This policy explains how SpotLift ("we" or "us") collects, uses, and shares information when you use the app and its related services. It includes the account-linked analytics introduced for build 50.
With your permission, SpotLift uses the camera or a photo you select to identify gym equipment. Images are transmitted through our service to OpenAI. We do not save the original scan photos in our application database, but our AI provider may retain submitted content under its data controls and policies. Equipment identification results and scan history may be saved.
If you use voice input, your device’s speech recognition service turns speech into text for Coach. Processing may involve Apple or your device’s speech service. The resulting text is handled like a typed Coach message. SpotLift does not upload voice recordings to its own API.
You can manage camera, photo, microphone, and speech recognition permissions in your device settings.
We use information to authenticate you, save your training activity, identify equipment, personalize plans and Coach guidance, respond to support requests, protect and operate the service, investigate crashes, measure AI usage and costs, and improve SpotLift.
We do not sell your personal information, use it for targeted advertising, or share it with data brokers. We do not use it to track you across other companies’ apps and websites.
Before signup, usage events are associated with a random identifier stored by the app. After successful signup or sign-in, we link activity from that sign-in period, including preceding signup steps, to your account. This helps us understand onboarding, common screens, and where users stop progressing.
Signing out starts a new identity period to separate accounts on a shared device. Clearing app data creates a new installation identifier; a fresh reinstall generally does too, although device backups may restore local data. Our first-party analytics does not use advertising identifiers, hardware serial numbers, or fingerprinting.
Analytics event properties exclude names, emails, Coach message text, scan images, and actual route parameter values. This does not make the events anonymous: they can be linked to your account. Sentry crash reporting is separate and includes email as described above.
We use service providers to deliver SpotLift:
Providers process information under their applicable terms, settings, and privacy policies. We may also disclose information when required by law, to protect rights and security, or as part of a business transfer with appropriate privacy protections.
Account and training records are generally kept while your account exists. You can request deletion through the app’s Profile → Delete account flow or by contacting us. The deletion flow removes account records, training records, AI usage records associated with your user ID, and analytics rows directly linked to your account.
Raw usage events are subject to a 13-month retention limit, with daily cleanup while the backend retention task is operating. Events awaiting delivery on your device expire after 7 days; the queue is also limited to 500 events.
Events stored only under a random installation or identity-period identifier can remain until the analytics retention limit, including earlier events whose account link is removed during account deletion. Deleting the app alone does not delete server-side account data.
Third-party diagnostics, AI provider records, support correspondence, backups, and operational logs have separate retention rules. The app’s account deletion flow does not automatically erase every provider’s records. Contact us for help with an access or deletion request concerning those records. Information may also be retained where needed to meet legal obligations or protect service security.
You can update supported profile information, choose what to include in Coach messages and feedback, decline to share health limitation details in the consent flow, manage device permissions, and request account deletion. Depending on where you live, you may also have rights to access, correct, delete, or obtain a copy of personal information, or object to certain uses. Contact us to make a request.
SpotLift does not currently provide an in-app switch for usage analytics. Device permission settings control camera, photos, microphone, and speech access; they do not disable account-linked usage analytics or crash reporting.
We use access controls and encrypted network connections to protect information. No system can guarantee absolute security. Our service providers may process information in countries other than your own, subject to applicable data protection requirements.
SpotLift is not directed at children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address the request.
We may update this policy as SpotLift changes. We will post the revised policy with an updated date and provide additional notice where required. For privacy questions or requests, contact us at coachlift71@gmail.com.
Questions or requests?
Contact us about your information or to request access, correction, or deletion.
coachlift71@gmail.com