Privacy Policy

What Spotter does with your information — written to describe the app as it actually behaves.

Effective date: October 4, 2026
Last updated: October 4, 2026

Contents

This policy describes what Spotter does with your information. It is written to describe the app as it actually behaves, not as we intend it to behave later.

1. Who we are and how to reach us

Spotter is operated by Dharmarajsinh Jethva and Asiqur Rahman, trading as DA App Ventures. Both are joint data controllers for the information described here.

Email: help@daappventures.com

Spotter is available worldwide. We are established in the United States, so if you are outside the United States, your information is handled there. See section 7.

2. You must be 18 or older

Spotter is for adults. You must be at least 18 years old to create an account or use the app. We do not knowingly collect information from anyone under 18. If we learn that we hold information about someone under 18, we will delete the account and its contents.

We do not ask for a date of birth when you sign up.

If you believe a minor has created an account, contact us at the email address above.

3. What we collect, and why

3.1 Your account

When you create an account we collect your email address and a password. Passwords are handled by Google Firebase Authentication and are never visible to us. You may also add a display name and a profile photo.

3.2 Your training profile

During onboarding we ask three questions and store your answers:

Which lifts you train
Your training goal
How you currently train

We use these to shape the coaching you receive. They are stored on your account record and are not sent to Google or to any AI model.

We previously asked how often you had felt pain mid-set. That question has been removed from the app. Answers already stored on existing accounts are deleted by a separate one-off operation rather than by ordinary app use.

3.3 Your workout videos

This is the most sensitive thing the app handles.

When you upload a clip of yourself performing a lift, the complete video file is stored in Google Cloud Storage in a location only your account can read or write. From there it is sent to Google's Gemini AI service for analysis. See section 4.

Before anything is uploaded, the clip is re-encoded on your device. That re-encode:

Removes the audio track entirely. Sound from your recordings does not leave your phone. This matters because a gym recording picks up people talking nearby who never installed this app.

This applies to clips uploaded from this version of the app onward. Clips uploaded before it were sent with their audio intact, and those files remain in storage until you delete them.
Discards the file's embedded metadata, including the location where the video was recorded, the date, and the device model.

If that re-encode fails, the upload is refused rather than falling back to the original file. We would rather stop than send something we said we had stripped.

Other people may still appear in the picture. See section 9.

We also generate and store a still frame from your video as a thumbnail.

3.4 Your analyses and coaching conversations

We store the form score, the written analysis, and the coaching pointers produced for each set. If you use the AI coach, we store your questions and its answers.

3.5 Subscription information

If you subscribe, purchases are processed by Apple. We never see your payment card. We use RevenueCat to manage subscriptions, and we store a record of subscription events and your current entitlement.

3.6 Notifications

If you allow notifications, we store a device token so we can notify you when an analysis is ready.

The notification says only that an analysis is ready. It deliberately contains no score, no exercise name, and no numbers, because it is displayed on your lock screen where anyone near your phone can read it, and it travels through Apple's Push Notification service to get there. Your score stays behind your login.

3.7 Crash reports and diagnostics

We use Firebase Crashlytics to record crashes and errors, including a device model, operating system version, and where in the app the failure happened.

We do not use analytics. Google Analytics and In-App Messaging are switched off in this app's configuration, and we do not track you across other apps or websites.

4. How the AI analysis works, and what Google receives

When you request an analysis:

Your video is retrieved from storage.
The re-encoded video — picture only, with no audio and no embedded metadata — is sent to Google's Gemini API, together with the exercise type and any reps, weight, or duration you entered.
Google's model returns a score and written feedback, which we store on your account.

When you use the AI coach, we send Google the exercise, your score, the analysis summary, the coaching pointers, your full previous conversation, and your new question.

What Google does with it. We use Gemini on a paid service tier. Under Google's terms for that tier, Google does not use the content you submit to train or improve its models, and does not have human reviewers read it. This is the single most important reason we pay for this service rather than using the free tier.

Your training profile is not sent. Your goal and your lifts stay on your account and are never transmitted to Google's AI.

The coach is the only place you type freely. Please do not enter medical details, diagnoses, or personal information into the coach. Anything you type there is sent to Google.

5. Why we process your information

We process your information to create and run your account, to analyse your videos and produce coaching, to keep the app working, to send you notifications if you allow them, and to meet our legal obligations.

If you are in the UK or the EEA

These are the legal bases we rely on under the UK GDPR and the EU GDPR.

What we do	Legal basis
Create and run your account	Performance of a contract, Article 6(1)(b)
Analyse your videos and produce coaching	Performance of a contract, Article 6(1)(b)
Handle the video of your body, and the fitness inferences drawn from it	Explicit consent, Article 9(2)(a)
Manage your subscription	Performance of a contract, Article 6(1)(b)
Send you notifications, if you allow them	Consent, Article 6(1)(a)
Record crashes and keep the app working	Legitimate interests, Article 6(1)(f)
Meet our legal obligations	Legal obligation, Article 6(1)(c)

Video of you lifting shows your body and how it moves, and the score drawn from it is an inference about your physical condition. We treat that as health information and ask for your explicit consent before any of it is analysed.

Before your first analysis, the app asks you to agree that:

each clip you submit, and the exercise you name with it, are sent to Google's Gemini AI
the messages you write to the coach are sent to Google's Gemini AI
the feedback you get back is generated by AI, and is not medical advice

The screen links to this policy. Your agreement is recorded on your account along with the version you accepted and the date you accepted it, so we can tell you later exactly what you agreed to.

You can withdraw it. Email us at help@daappventures.com and we will stop analysing your videos and delete the ones we hold. Deleting your account from inside the app does the same thing immediately. Withdrawing does not undo analysis that already happened before you withdrew.

6. Who receives your information

We do not sell your information. We do not share it for advertising. We have never done either and have no plans to.

Recipient	What they receive	Why
Google (Firebase)	Account details, training profile, videos, thumbnails, analyses, coach threads, crash reports, device tokens	Hosting, authentication, storage, and delivery
Google (Gemini API)	Your complete video file, and your coach conversation	To produce your analysis and coaching
Apple	Purchase and subscription records; notification content	Payment processing and notification delivery
RevenueCat	An account identifier and your subscription status	Subscription management

We may also disclose information if we are legally required to, or to protect someone's safety.

7. Where your information is processed

Your information is processed in the United States. Firestore uses a US multi-region and our server functions run in us-central1. Google, Apple and RevenueCat are United States companies.

If you are in the UK, the EEA, or anywhere else outside the United States, using Spotter means your information is transferred to the United States and handled under United States law, which does not give it the same protection your own law does.

8. How long we keep things, and how to delete them

Videos and analyses are kept until you delete them. There is no automatic deletion. If you delete a set, its video, thumbnail, and analysis are removed. If you leave the app untouched, your clips remain stored indefinitely.

Deleting your account removes: every set and its coaching conversation, every video, thumbnail, and profile photo, your subscription event records, your account record, and your login credentials. You can do this from within the app — see how to delete your account.

What deletion does not reach. Apple retains its own record of your purchases under its own policies, and we cannot delete those. RevenueCat retains customer records under its own retention schedule. Crash reports already sent to Crashlytics are retained under Google's schedule. Routine backups may briefly hold copies until they age out.

9. Other people in your videos

If someone else appears in a clip you upload — a training partner, or anyone in the background of a gym — you are responsible for it. Their image is stored and sent to Google exactly as yours is, and they have not agreed to this policy. Please do not upload video of other people without their agreement.

10. Movement analysis and identification

Our AI analyses how your body moves in order to judge lifting technique. We do not use it to identify you, to match you against any database, or to build a face or body template that could recognise you elsewhere. We do not sell or share this data, and we do not create biometric identifiers from it.

That said, video of your body is inherently identifiable, which is why it is the most protected thing in this policy.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, object to, or restrict our use of your information, and to withdraw consent. You also have the right to complain to your local data protection authority.

Deletion is available immediately in the app. For anything else, email us at help@daappventures.com and we will respond within one month. Access and portability requests are handled manually.

If you are in California, you may request disclosure, deletion, and correction, and may limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under the CCPA. We will not discriminate against you for exercising these rights.

If you are in the UK or the EEA, you have the right to ask us for a copy of what we hold about you, to have it corrected, to have it deleted, to receive it in a portable form, to object to or restrict what we do with it, and to withdraw any consent you have given. Withdrawing consent does not affect what we did before you withdrew it.

You can also complain to your data protection authority. In the UK that is the Information Commissioner's Office. In the EEA it is the supervisory authority for the country you live in.

If you are in Washington or Nevada, a separate Consumer Health Data Privacy Policy describes how we handle consumer health data and the additional rights you have.

12. How we protect your information

Your videos, thumbnails, and profile photo are readable only by your own account, enforced at the storage layer. Your score and analysis can only be written by our servers, never by a client. Data is encrypted in transit and at rest by our hosting providers.

No system is perfectly secure, and we do not claim otherwise.