Spot privacy policy
Spot is a fitness coach for iPhone and Apple Watch. This page explains what Spot collects, why, who processes it, and how you can remove it. Spot has no ads, does not sell or rent your data, and does not use health data for marketing.
What Spot collects
- Account: your name and email address from Sign in with Google, Sign in with Apple (which may be a private relay address Apple gives Spot), or the email you register with. If you sign in with a password, Spot stores only a salted hash of it, never the password itself.
- Training: workouts you plan, start or import, the sets you log (weights, reps, times), ratings, and anything you say or type to Spot during and around a workout.
- Health data (only if you allow it): from Apple Health — sleep, heart rate variability, resting heart rate, respiratory rate, wrist temperature, blood oxygen, VO₂ max, workouts from other apps, steps, activity energy, exercise minutes, body measurements, blood pressure and mindful minutes. Raw heart-rate streams are not uploaded; only daily and per-workout summaries.
- Notes you or an assistant you connect write: your plan document, planned workouts, findings, rules, and care-team notes.
- Device data needed to run the service: push-notification tokens and basic request logs.
How it is used
Only to coach you: to plan and adjust workouts, track progress and recovery, remind you about planned workouts, and let an AI assistant you choose to connect (through Spot's connector) help plan your training. Health data is used solely for these purposes.
Who processes it
- Google Cloud (Cloud Run and Firestore, United States) stores and serves your data.
- Anthropic (Claude) generates Spot's coaching. The parts of your data relevant to a request — your plan, recent training, notes and health summaries — are sent to Anthropic's API to produce each reply. Anthropic does not use API data to train its models.
- Apple delivers notifications (Apple Push Notification service).
- An AI assistant you connect yourself (for example Claude on claude.ai) can read and write your Spot records only after you sign in and approve it, and you can disconnect it at any time.
Keeping and deleting your data
Your data is kept while you have an account. You can delete your account in the app at any time: Settings › Account › Delete account. That deletes your account and everything Spot stores for you immediately — workouts, logged sets, history, conversations, plans, notes, health data synced to Spot, notification tokens — signs you out on your iPhone and Apple Watch, disconnects any assistant you connected, and revokes Spot's Sign in with Apple access. It can't be undone. Data in Apple Health on your iPhone is not touched. Server request logs, which hold no training or health content, age out within 30 days.
You can also ask for deletion by writing to the address below; it is completed within 30 days. You can stop Health sharing at any time in Settings › Health › Data Access & Devices › Spot.
Security
Data is encrypted in transit (HTTPS) and at rest. Sign-in tokens are stored only as hashes.
Children
Spot is not intended for anyone under 16.
Contact
Questions or deletion requests: support@spotfit.app