Privacy policy

This policy applies from 31 October 2026. Spotter is run by Spotter Pty Ltd, a South African company. Our information officer is Dylan Dawson.

What we keep

For a trainer: your name, email, phone number, gym, photograph, business details and the bank account your clients pay into.

For a client: your name, email, phone number, photograph, birthday, measurements, progress photographs, health answers, workouts, meal plans and invoices.

Why

To run the app. Your programme, sessions, check-ins and invoices need them. We keep nothing we do not use for that.

Health information

Your health answers and progress photographs are special personal information under POPIA. We keep them only with your consent, which you give when you join. You can withdraw it at any time by asking your trainer or us, and we delete them.

Who is responsible

Your trainer is responsible for their clients' information, and Spotter Pty Ltd processes it for them. A trainer's own account information is Spotter Pty Ltd's responsibility.

Where it is kept

On Cloudflare's servers, which may be outside South Africa. Cloudflare handles it under its data processing agreement with us.

Checking your bank account

When you add your bank account, we send your bank, account number, account type, the name on the account and your ID, passport or company registration number to Paystack. Paystack asks your bank whether these details match, and tells us yes or no. We keep the account details, but not the ID, passport or registration number.

Who sees it

You and your trainer. We see it only to help you or when the law requires it. Paystack sees your bank details for the check above. We do not sell your information.

Signing in and cookies

You sign in with a code we email you, or with a passkey. One cookie keeps you signed in. We use no advertising cookies.

How long

For as long as you have an account. Sign-in sessions and the app's activity log are kept for 90 days.

Deleting

You can ask for your account to be deleted at any time, by email or through your trainer. Everything is deleted within 30 days. We export it for you first if you ask. When a trainer deletes their account, their clients' information is deleted with it.

Your rights

You can ask us what we hold about you, have it corrected or have it deleted. Email us. If you are not happy with our answer, you can complain to the Information Regulator of South Africa.

Contact

Spotter Pty Ltd, hello@spotterpt.app.