Privacy Policy

Who this applies to

• Gym owners, administrators, staff using the Spotlr Fitness web platform.
• Members using the Spotlr Fitness mobile app connected to their gym.

Information we collect

• Account information: name, email, phone, role, and credentials (hashed passwords).
• Profile & membership data: membership plans, check-ins, attendance, goals, workout and meal entries.
• Payments & billing: billing address, payment method tokens (via payment processors), invoices, receipts.
• Usage data: app interactions, device type, OS, crash logs, feature engagement, cookies and similar technologies.
• Device & network data: IP address, browser/app version, language, time zone.
• Communications: support requests, feedback, and messages sent via the platform.

How we use information

• Provide, operate, and improve the web platform and member app.
• Manage memberships, workouts, meals, payments, check-ins, and notifications.
• Authenticate users and protect accounts, investigate and prevent misuse.
• Offer customer support, troubleshoot issues, and analyze performance.
• Comply with legal obligations and enforce our terms and policies.
• With consent where required, send product updates or relevant communications.

Legal bases (where applicable)

• Contract: to deliver the services you or your gym signed up for.
• Legitimate interests: to secure and improve our services.
• Consent: for certain analytics/marketing and optional features.
• Legal obligation: to meet regulatory and compliance requirements.

Sharing & disclosure

• Service providers: we use trusted vendors (e.g., hosting, analytics, payments) who process data on our behalf under appropriate agreements.
• Your gym: member data entered in the app is shared with the member’s gym to operate services.
• Legal: we may disclose information to comply with law, protect rights, or respond to lawful requests.
• Business transfers: in a merger, acquisition, or asset sale, data may be transferred consistent with this policy.

Data retention

We retain information for as long as necessary to provide services to you or your gym, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account or certain data, subject to legal and contractual requirements.

Security

We use reasonable administrative, technical, and physical safeguards to protect personal information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your rights

• Access, rectify, or delete your personal data.
• Object to or restrict processing in certain circumstances.
• Data portability where technically feasible.
• Withdraw consent for optional processing where consent is the basis.

To exercise rights, contact us at privacy@spotlr.fitness. If you are a member, you may also contact your gym to manage your data.

Children’s privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us to request deletion.

Changes to this policy

We may update this Privacy Policy to reflect changes to our practices. We will update the “Effective” date and, where appropriate, provide additional notice.

Contact

Questions or requests? Email privacy@spotlr.fitness or visit our website at spotlr.fitness.