Privacy policy

This policy applies from 1 November 2026. Spotter is run by Spotter PT (Pty) Ltd, a South African company. Our information officer is Dylan Dawson.

What we keep

For a trainer: your name, email, phone number, gym, photograph, business details and the bank account your clients pay into, and the advertising cookie ids and browser from your visit to our website.

For a client: your name, email, phone number, photograph, birthday, measurements, progress photographs, health answers, workouts, meal plans, invoices and data from a health app you connect.

Why

To run the app. Your programme, sessions, check-ins and invoices need them. We keep nothing we do not use for that.

Health information

Your health answers, progress photographs and health app data are special personal information under POPIA. We keep them only with your consent, which you give when you join. You can withdraw it at any time by asking your trainer or us, and we delete them.

Health apps

If you connect a health app on your phone, we read only the kinds of data you allow: workouts, steps, sleep, resting heart rate and weight. We use it only to show you and your trainer your progress in Spotter. We never use it for adverts or marketing, never share it with anyone else without your consent and never sell it. You can disconnect it at any time, and ask us to delete what we have read.

Who is responsible

Your trainer is responsible for their clients' information, and Spotter PT (Pty) Ltd processes it for them. A trainer's own account information is Spotter PT (Pty) Ltd's responsibility.

Where it is kept

We keep it on our hosting provider's servers, which may be outside South Africa. The provider handles it under a data processing agreement with us.

Checking your bank account

When you add your bank account, we send your bank, account number, account type, the name on the account and your ID, passport or company registration number to our payment provider. It asks your bank whether these details match, and tells us yes or no. We keep the account details, but not the ID, passport or registration number.

Who sees it

You and your trainer. We see it only to help you or when the law requires it. Our payment provider sees your bank details for the check above. The advertising platforms we use see what is listed under Adverts. Notifications reach your phone through its maker's notification service. Our payment provider, advertising platforms and phone makers may keep what they see outside South Africa. We do not sell your information.

Signing in and cookies

You sign in with a code we email you, or with a passkey. One cookie keeps you signed in. The app uses no advertising cookies.

Adverts

Our website uses our own cookies and our advertising platforms' cookies to see which of our adverts bring trainers to Spotter. Visitors in Europe are asked first.

We tell those platforms when you sign up as a trainer, when you add your first client and when a client first finishes a workout. One gets your email address and phone number, hashed, with your IP address and browser, so it can match them to an account you have with it. The other gets only the id of your website visit. We never send them anything about your clients.

To stop this, use Cookie settings at the foot of any page on our website, or email us.

How long

For as long as you have an account. Sign-in sessions and the app's activity log are kept for 90 days.

Deleting

You can ask for your account to be deleted at any time, by email or through your trainer. Everything is deleted within 30 days. We export it for you first if you ask. When a trainer deletes their account, their clients' information is deleted with it.

Your rights

You can ask us what we hold about you, have it corrected or have it deleted. Email us. If you are not happy with our answer, you can complain to the Information Regulator of South Africa.

Contact

Spotter PT (Pty) Ltd, hello@spotterpt.app.