Introduction
SpotMe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
Please read this privacy policy carefully. By using SpotMe, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Account Information
- Email address
- Username
- Profile picture
- Account preferences
Physical Characteristics
- Height
- Age / Date of birth
- Gender
- Activity level
- Hair color (used for personalized avatar features)
- Ethnicity (used for personalized avatar features)
Health and Fitness Data
We collect health and fitness information to provide our core services:
- Body Composition Data: Weight, body fat percentage, muscle mass measurements
- Workout Data: Gym sessions, exercises, sets, reps, weights lifted
- Cardio Data: Walking, running, cycling activities including distance, duration, pace, and calories burned
- Nutrition Data: Food logs, calorie intake, macronutrients (protein, carbs, fats)
- Fitness Goals: Your personal fitness targets and progress
Apple HealthKit Data
With your permission, we integrate with Apple Health to:
Read from HealthKit:
- Workouts and exercise sessions
- Active calories burned
- Distance traveled
- Heart rate data
- Step count
Write to HealthKit:
- Cardio workouts logged in SpotMe (walks, runs, bike rides)
- Workout summaries and calories burned
Location Data
We collect precise location data to track your cardio workouts (walks, runs, bike rides). This includes GPS coordinates during active cardio sessions and background location when tracking ongoing workouts.
You can disable location tracking at any time in your device settings.
Photos and Camera
We access your camera and photo library for:
- Barcode Scanning: To look up nutritional information for food items
- Body Composition Photos: If you opt to use our AI-powered body fat analysis feature
- Profile Pictures and Shared Posts: To personalize your account
Social and Community Data
- Posts you create (photos, captions, workout summaries)
- Comments on posts
- Likes and interactions
- Training partner connections (followers/following)
- Challenge participation and competition data
Third-Party Services
OpenAI (AI Body Composition Analysis)
If you choose to use our AI-powered body fat and muscle mass analysis feature:
- Your body composition photos are sent to OpenAI's API for analysis
- Additional context you provide (height, weight, fitness level) may be included
- OpenAI processes this data to estimate body composition metrics
This feature is entirely optional. You can manually enter body composition data without using AI analysis.
Firebase (Google Cloud)
We use Firebase services for:
- Authentication: Secure account management
- Cloud Firestore: Storing your fitness data, posts, and progress
- Cloud Functions: Secure server-side processing
- Cloud Storage: Storing profile pictures and post images
USDA FoodData Central
When you scan food barcodes, we query the USDA FoodData Central database to retrieve nutritional information. No personal data is sent with these requests.
How We Use Your Information
We use your information to:
- Provide and maintain the SpotMe service
- Track and display your fitness progress
- Enable social features (posts, comments, training partners)
- Facilitate fitness challenges between users
- Send notifications about your goals, challenges, and social interactions
- Improve and optimize the app experience
- Respond to your inquiries and support requests
Data Sharing
We do not sell your personal information. We may share your data in the following circumstances:
With Other Users
- Your public posts are visible to other SpotMe users
- Your username and profile picture are visible to other users
- Users can see limited fitness information based on your privacy settings
With Service Providers
We share data with third-party services (Firebase, OpenAI) solely to provide app functionality as described above.
Legal Requirements
We may disclose your information if required by law or in response to valid legal requests.
Data Security
We implement appropriate technical and organizational security measures to protect your data, including:
- Secure authentication via Firebase Auth
- Firestore security rules that restrict data access to authorized users
- HTTPS encryption for all data transmission
- API keys stored securely on our servers (not in the app)
Data Retention
We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us.
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your account and data
- Opt-out: Disable optional features like AI analysis or location tracking
Children's Privacy
SpotMe is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
European Users (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, port, and erase your data, as well as the right to object to or restrict certain processing.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: sullivanrory9@gmail.com