Privacy Policy
Introduction
In this privacy policy (the “Privacy Policy”), the terms “Spotbro”, “we”, and “us” refer to Sander de Vries, a private individual, who provides the Spotbro workout tracking mobile application (the “App” or “Application”).
In the event of questions in relation to Spotbro’s personal data processing or this Privacy Policy, please feel free to contact us via the contact details listed under Contact below.
In this Privacy Policy, we explain which categories of personal data Spotbro collects, why Spotbro collects such data, and what Spotbro uses the personal data for in connection with the App. This is done in order for you to be able to exercise your rights.
Spotbro processes personal data in accordance with applicable data protection law. Sander de Vries is the controller for the processing of personal data, unless otherwise stated in this Privacy Policy.
Personal data is all such information that may be used to identify a specific individual (a natural person).
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.
1. Who we are
| Item | Details |
|---|---|
| Controller | Sander de Vries (natural person / private individual) |
| Product / brand | Spotbro (product name only) |
| Country | Sweden (Swedish law; GDPR for EU/EEA users) |
| Privacy email | sander.douwe@gmail.com |
| Scope | Spotbro mobile app only |
2. What we collect
We collect only what is needed to run Spotbro as a workout tracking app. Personal data comes primarily from you - directly or indirectly - when you create an account or sign in, use the App (including sync and import), or contact us.
| Category | Examples | When |
|---|---|---|
| Account & identity | Apple / Google / guest sign-in; email and name from providers; display name, full name, gender, date of birth; app preferences | When you sign in or edit your profile |
| Training data | Workouts, exercises, sets, reps, weights, notes, templates, favorites; workout history you choose to import from other third-party fitness apps | When you log, sync, or import |
| Body measurements | Body weight, body fat %, circumferences, and related notes you enter | When you log measurements |
| Photos (optional) | Photos attached to custom exercises (camera or library) | Only if you grant permission and attach a photo |
| On-device data | Session tokens, offline caches, local rest-timer notifications / Live Activities (not remote push today) | Stored on your device while you use the App |
We do not collect today
| Not collected | Notes |
|---|---|
| Analytics / crash SDKs | No third-party product analytics or crash reporters in the App |
| Health platforms | No HealthKit, Google Fit, or Apple Watch sync |
| Sensitive device data | No precise location, contacts, or microphone for App features |
| Ads / data sales | We do not sell personal data or use ad networks in the App |
Our backend provider may process technical connection data (such as IP address) to provide a secure service. This policy does not cover a separate marketing-site analytics stack.
3. How we use your data
| Purpose | What that means |
|---|---|
| Provide the service | Account, sync, history, progress, and core App features |
| Import & export | Process import files you upload; generate CSV exports you request |
| Support & security | Respond to you, protect accounts, keep the service reliable |
| Legal obligations | Comply with applicable law when required |
4. Legal bases (GDPR)
Where GDPR applies, we rely on:
| Basis | When we use it |
|---|---|
| Contract | Account, logging, sync, and export needed to provide Spotbro |
| Legitimate interests | Security, abuse prevention, and basic operational reliability |
| Consent | Optional photos (system permission) and certain optional profile fields - withdraw via device settings, removing content, or deleting your account |
| Legal obligation | When law requires us to retain or disclose information |
5. Sharing and processors
We do not sell your personal data. We share only as needed to run Spotbro:
| Recipient | Role |
|---|---|
| Supabase | Authentication, database, and file storage for App data |
| Apple / Google | Sign-in (under their own policies when you use their login) |
| Expo | Platform/runtime services used to build and run the App |
| Vercel | Hosts this Privacy Policy page only - not your workout history |
| Advisers / authorities | If required by law or to protect legal rights |
Providers act as processors where applicable. They may process your data only on our instructions and must protect it under law and contract - they cannot use it for their own unrelated purposes.
6. Where we store data
App data is stored with our service providers (notably Supabase). Providers may process personal data outside Sweden or the EU/EEA. Where they do, we rely on appropriate safeguards under applicable data protection law, such as the EU Commission’s Standard Contractual Clauses, and on their security practices. You can ask us for more information about transfers and safeguards via the contact details below.
7. Retention
| Data | How long we keep it |
|---|---|
| Active account & training data | While your account remains active |
| After you delete your account | We anonymize or remove personal data promptly and sign you out. Residual technical or backup copies may be cleared on a short follow-up schedule |
| On-device caches | Cleared on sign-out or account deletion (you can also clear App data in device settings) |
| Legal holds | Limited information may be kept if needed for claims, disputes, or compliance |
8. Your rights
Pursuant to applicable data protection legislation, you have a number of rights relating to the processing of your personal data. In order to exercise your rights, please contact us. See contact details below. You can also exercise many of them in the App.
| Right | How to exercise it |
|---|---|
| Access / portability | Export training history as CSV in the App, or email us for a copy of personal data we process about you |
| Rectification | Edit your profile in the App, or email us |
| Erasure | Delete your account in the App (anonymizes personal data) |
| Object to legitimate interests | Email us with reasons related to your particular situation. We may continue processing if we have compelling legitimate grounds |
| Restrict processing | Email us; some App features may be limited while a restriction applies |
| Withdraw consent | Device permissions, remove optional content, or email us. Withdrawal does not affect processing that already occurred |
| Complaint | Your local supervisory authority. In Sweden: Integritetsskyddsmyndigheten (IMY) - imy.se |
When you contact us to exercise your rights, please state your full name and a way we can reach you. We may need to verify your identity before we proceed. We aim to reply within one month where GDPR applies.
California / similar US state laws: we do not sell personal information. Know / delete / correct requests can use the App tools above or email.
9. Security
We use reasonable technical and organizational measures to protect personal data (including access controls and encrypted transport to our backend). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
10. Children’s privacy
Spotbro is not directed at children under 13 (or under 16 where a higher age is required by local law). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
11. Changes to this policy
We may amend this Privacy Policy from time to time. If any amendments imply a change to the way we process your personal data, e.g. collecting additional personal data for the stated purposes or processing of data for new purposes, we will inform you of such amendments via, for example, the Application or by email. We recommend that you regularly read this Privacy Policy for the most recent information on how we process your personal data.
12. Contact
| Item | Details |
|---|---|
| Data controller | Sander de Vries, Sweden (private individual) |
| Product / brand | Spotbro |
| Privacy email | sander.douwe@gmail.com |
For privacy questions or to exercise your rights, contact us at the email above and include your name plus a way we can reach you.
SpotBro.