_Last updated: 2026-08-21_
Spotter is an AI lifting coach. It uses your phone's camera to score your squat reps. This policy explains, precisely, what happens to that camera feed and to everything else the app touches.
The short version: your workout video never leaves your phone. It is analysed live, on the device, and discarded frame by frame. Nothing is recorded, nothing is uploaded, and we never see it. We don't ask for an account, a name, or an email. The only things that reach our servers are a handful of numbers describing how a rep went.
1. Camera and body-pose data
This is the part most people want to understand, so it comes first.
- The video is processed entirely on your device, using Apple's on-device Vision framework. Frames are held briefly in memory while they are analysed and are then discarded. No video or still image is ever written to storage, saved to your photo library, uploaded, transmitted, or seen by us or anyone else. The app contains no code capable of recording or exporting video.
- While a set is running, the app derives the position of a few body joints (shoulder, hip, knee, ankle) from each frame in order to measure how deep you squatted and how controlled the movement was. This joint data exists only in memory, only for the instant it is used, and is never stored or transmitted — not to us, and not to anyone else.
- We do not use this data to identify anyone. It is not face geometry, not a fingerprint, not an iris or retina scan, not a voiceprint, and not a scan of hand geometry. It cannot be used to recognise you, and we do not attempt to. It measures how a movement was performed, not who performed it.
- We do not sell, lease, trade, or otherwise profit from camera or body-pose data, and we do not disclose it to anyone, because we never receive it in the first place.
- Retention and destruction schedule. Because camera and body-pose data are never collected by us, we hold none of it and there is nothing for us to retain. On your device, each frame and its derived joint positions are discarded immediately after analysis — within a fraction of a second — and in all cases when the set ends or the app closes.
What does survive a set is a small set of numbers: how many reps you did, and a depth score, a tempo score and an overall score for each one.
2. What stays on your device
Stored locally, in the app's own storage, and never copied to us:
- Your training profile — experience level, goal, chosen program, and the working weight the coach has calculated for each lift.
- Your workout history — logged sets, rep counts, per-rep scores, dates, and streak.
We do not have a copy of any of it. Deleting the app deletes all of it. If you use the Apple Watch companion, this information moves directly between your iPhone and your Watch and does not pass through us.
3. What we send off your device
Only the following leaves your phone, and only when the relevant feature runs:
- Rep scores, to write your coaching notes. After a set and after a session, the app sends the numeric scores (for example: rep 1, depth 88, tempo 79, overall 79) and the name of the exercise to our coaching service, which passes them to Google's Gemini API to generate a short piece of coaching text. No video, no images, no joint coordinates, no name, no email, no account identifier, and no device identifier are included.
- Your goal, experience level and — if you choose to enter it — your sport, when you ask the in-app coach to pick a program for you. This runs once, during setup. The sport field is free text and optional; whatever you type is sent to our coaching service and on to Google's Gemini API so the recommendation can account for it. Please don't type anything into it you wouldn't want processed that way. Leave it blank and nothing is sent.
- An abuse-prevention token. To stop the coaching service being flooded, our server counts requests per caller per day. It does this using a one-way, salted hash of your IP address combined with the current date — an opaque token that cannot be turned back into your address and cannot be linked to you across days. The raw IP address is not stored. The counter expires automatically after 48 hours.
4. Purchases
Subscriptions are sold and processed entirely by Apple through the App Store, using StoreKit. Apple validates your subscription on your device. We never see your name, your card details, or your Apple ID, and no third-party billing provider is involved.
5. Use of artificial intelligence
Two features use AI:
- On-device movement scoring — Apple's Vision framework, running locally as described in section 1. Nothing is sent anywhere.
- Written coaching notes and the program recommendation — Google's Gemini API, reached through our own server, receiving only the numeric scores and setup answers described in section 3.
We use a paid Gemini tier under which Google does not use the content sent to it to train its models. The AI writes coaching text only; it does not make any decision about you that produces a legal or similarly significant effect.
6. Who processes data on our behalf
- Apple — App Store distribution and subscription processing.
- Cloudflare — hosts our coaching service and its rate-limit counters.
- Google — the Gemini API that generates coaching text.
We use no advertising networks, no analytics SDKs, no crash-reporting SDKs, and no tracking or attribution SDKs of any kind. We do not sell or share personal information, and we do not use it for cross-context behavioural advertising.
7. What we never collect
No account, no sign-in, no name, no email address, no phone number, no contacts, no location, no advertising identifier, no device identifier, no photos or videos, and no health records.
8. Health information
Spotter measures athletic performance — how deep and how controlled a squat was. It is not a medical device, it does not diagnose or infer any health condition, and we do not derive health information from what it measures. It is not a substitute for professional medical or coaching advice. See our Terms of Use.
9. How long anything is kept
- Camera frames and joint positions: discarded immediately after analysis, on your device. Never received by us.
- Your workouts and profile: on your device, until you delete the app.
- Rep scores sent for coaching text: processed to produce the reply and not retained by us in any identifiable form afterwards.
- Abuse-prevention counters: hashed, and automatically deleted after 48 hours.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, restrict or object to the processing of your personal data, and to lodge a complaint with your data protection authority.
Because Spotter has no account and stores your training data on your own device, most of this is already in your hands: deleting the app erases everything it holds. For anything we hold, contact us at the address in section 13 and we will respond within the period your law requires.
Californian residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not offer financial incentives for personal information.
11. International transfers
Our coaching service runs on Cloudflare's global network and calls Google's Gemini API, which means the small amount of data described in section 3 may be processed outside your country, including in the United States. We rely on our providers' data protection terms and standard contractual clauses where applicable.
⚠️ To be completed by counsel: the specific transfer mechanism relied on (EU Standard Contractual Clauses, the EU–US Data Privacy Framework, or the UK Addendum), and whether a transfer impact assessment is required.
12. Children
Spotter is a barbell strength-training app intended for adults. It is not directed to children, and we do not knowingly collect personal data from children under 13 (or the equivalent minimum age where you live). If you believe a child has provided us with personal data, contact us and we will delete it.
13. Who we are, and how to reach us
⚠️ To be completed by counsel: the legal name and registered address of the data controller, and — where required — the identity of any EU/UK representative.
Questions, requests, or complaints: info@kalibrefin.com
14. Changes
If we change how the app handles data, we will update this page and change the date at the top. Material changes will be highlighted here.