← Spotter

Privacy policy

Effective 3 October 2026

Spotter is a small, invite-only app for two people who coach each other at the gym. This page explains, in plain language, what data the app keeps, who can see it, and how to delete it.

The short version

• Only you and your paired partner can see your plans, logs, photos and messages.
• We don't show ads, run analytics, or sell or share your data with anyone.
• You can delete your account and everything in it yourself, any time, from Settings.

What we get from Google

You sign in with Google. We ask Google only for the basic sign-in scopes (openid, emailand profile) and keep:

• Your Google account ID: a number that identifies your Google account. This is how we recognise you.
• Your email address: shown to super users (see below) and used to decide whether you can sign up.
• Your name: used as your starting display name. You can change your display name in Settings.
• Your profile picture's web address: shown as your avatar.

Your name, profile picture and email are refreshed from Google each time you sign in. We don't request or receive any other Google data: no contacts, calendar, Drive, Gmail or anything else. We never see your Google password.

What you add

• Profile and goals: height, start and target weight, goal, target date, units and time zone.
• Weight log: your weigh-ins by date.
• Plans: your workout and diet plan (usually written by your partner), including exercise photos and links.
• Daily logs: exercises done with sets, reps and weight; meals and calories; water; calories burned.
• Photos: gym photos, chat photos and exercise photos.
• Chat and social: messages, reactions, nudges and notes of the day.

The app also derives streaks, milestones and an activity feed from what you log.

Photos are cleaned on your device before upload. They're resized and re-encoded in your browser, which removes location (GPS) and camera details, and the server rejects any photo that still contains them.

Who can see your data

• You, of course.
• Your paired partner, while you're paired. They can see your profile, weights, plan, daily logs, gym photos, exercise photos and activity, and you share one chat. Your partner can also edit your plan (and if you turn on self-editing, so can you). Nobody else can be paired with you; pairing is strictly one-to-one.
• Super users are the people who run this Spotter and send invites. In the app they can see every account's email, display name, sign-up date and whether it's active; the list of invites with each invite's note and who used it; and how much photo storage each person uses (totals only). They can deactivate and reactivate accounts. The app gives super users no way to read your plans, logs, weights, photos or messages.
• The operator's hosting account. As with any app, whoever controls the Cloudflare account that hostsSpotter could technically access the database and photo storage directly, outside the app. We don't do this except when needed to keep the service running or when legally required.

Where it's stored

• The app runs on Cloudflare Workers.
• Your account and everything you log are stored in a Cloudflare D1 database.
• Photos are stored in a private Cloudflare R2 bucket. They have no public web address: they're only sent to a signed-in user allowed to see them (you or your partner).
• Cloudflare keeps short-lived technical logs of requests (such as the page or API address, time and any errors) to help keep the service running. These expire automatically after a few days.
• Cloudflare's database keeps a rolling backup history for disaster recovery. Deleted data drops out of that history on its own within about a month.

Cookies and your device

• spotter_session keeps you signed in. It's a random token (we store only a scrambled version of it). It's sent only to this site and isn't readable by scripts. It lasts up to 30 days and is renewed while you keep using the app. Signing out ends it.
• spotter_oauth exists only while you're signing in with Google (at most 10 minutes). It protects the sign-in from tampering and, if you came from an invite link, carries the invite.
• Your light/dark theme choice is saved in your browser only.

To slow down abuse, the server counts sign-in and pairing attempts per IP address. These counters are short-lived: any counter over a day old is deleted the next time someone signs in or enters a pairing code.

Other services your device talks to

• Google, when you sign in, and to load your profile picture from Google's image servers.
• YouTube, only for video links in a plan. When you open an exercise's photos and videos, the video's thumbnail loads from YouTube's image server; the video player (YouTube's privacy-enhancedyoutube-nocookie.com version) loads only when you tap play.
• Other links in a plan open the linked website in a new tab.

There are no ads, no analytics or tracking scripts, and no social media widgets. Fonts are served from Spotter itself.We don't sell or share your data.

When you unpair

Either partner can unpair at any time in Settings. When you do:

• You immediately stop seeing each other's data.
• Your shared chat (messages, and the reactions, nudges and notes of the day between you) is deleted.
• Each of you keeps your own profile, weights, plan, logs and gym photos. A plan your partner wrote for you stays with you, and you can then edit it yourself.
• Photos you sent in the chat stay stored in your own account, where the app no longer shows them to anyone. They're deleted with your account.

Deleting your account

Go to Settings → Delete account. After you confirm twice, the deletion happens immediately and can't be undone:

• Your account, profile, weights, plan, daily logs, streaks, milestones and activity are deleted.
• Your gym photos, chat photos and the photos on your plan are deleted from storage.
• You're unpaired; your shared chat, reactions, nudges and notes are deleted.
• You're signed out everywhere.
• If you're a super user, invites you created are deleted (people who already joined keep their accounts).

Your former partner keeps their own data. That includes the plan you wrote for them and any exercise photos you added to it, since those are part of their plan; their plan simply no longer says who set it.

Can't sign in? Email clusterwithgigs@gmail.com from the address on your account and we'll delete it for you.

Changes to this policy

If we change how your data is handled, we'll update this page and its effective date. For significant changes we'll let you know in the app.

Contact

Questions or requests about your data: clusterwithgigs@gmail.com.

Questions? Email clusterwithgigs@gmail.com.