Controller: krloz · privacy@sprots.ai
This is a translation, provided so you can read the policy in your own language. The Spanish version is the one that governs, and it is the one that applies in case of any difference.
This document says what data we keep, where it is, and who it's shared with. It's written to be understood, not to cover us.
What we keep
Your account. Name, email, language, whether you use kilos or pounds. You type them, or they come from Apple or Google, depending on whether you sign in with Apple, Google or your email.
Your training. The sessions you do and the ones prescribed to you: exercises, sets, reps, weight, rest, how hard each set felt, and when.
Your body, if you record it. Weight, height, date of birth, sex, tape measurements, body fat percentage. And any limitations or injuries you write down. This is health information and we treat it as such.
Where you train. The places you declare and what equipment each one has.
What you talk about with your coach inside the app.
Your connections: who you coach or who coaches you, which gym you belong to, who your training partners are.
Photos you upload. Your profile photo and your business's or your gym's: the logo, the cover and the gallery. Only the ones you choose to upload are kept. The other photos on your phone, like your progress photos, stay on it; the exception is the ones you show the app so it can read a report, look at a meal or recognise a place, which travel but aren't kept (it's in "What we do NOT keep"). Before the ones you upload are stored, hidden data is removed from them, such as the place where the photo was taken.
- Who sees them. Your profile photo is seen by the people you train or work with —your coach or the people you coach, and the people at your gym— and by anyone only if your public profile is on. The logo, the cover and the gallery are seen by the people you coach or your gym's members and, if your public profile is on, by anyone. Sprots only hands a photo's address to those people, but that address opens without signing in: whoever receives it can copy it and pass it on to someone else, and the photo keeps opening for as long as its file exists. Whoever sees a photo can also save it with a screenshot, like any photo.
- How they're checked. Before a photo is published, it goes through an automatic check by Google (Cloud Vision). It checks for explicit, suggestive or violent content and counts how many faces appear (it doesn't ask whose they are). It does this on every photo, your profile photo and your logo included; but only in the cover and the gallery does a face stop a photo from being published. If it doesn't pass, the app tells you why and you can ask for a person at Sprots to look at it. If the automatic check is unsure or can't decide, a person at Sprots also looks at it before it's published. Nothing is published without being checked.
- How long they're kept. Until you remove them, replace them with another one or delete your account. When you remove or replace one, it stops being shown in Sprots within minutes. Its file is deleted in the cleanup that runs once a day, normally within a day, and until then whoever has its address can open it. After that, Google Cloud keeps deleted files for 7 more days, with no public access. And a phone or browser that already had the photo may keep showing it: for up to a day if it's your profile photo or one from your coach business, and for up to 7 days if it's a gym's logo, cover or gallery, which may also sit in internet caches. A photo that didn't pass the check and that nobody asked to review is deleted after 30 days.
- How they're deleted. With "Remove this photo", on your photos screen, or by deleting your account, which erases your profile photo and your coach business's photos. What you uploaded as a gym administrator belongs to the gym and stays with it.
What you report to us. If you use the feedback button, we keep your message, which screen you were on, the app version and the phone model — and a screenshot, only if you leave it in. The screenshot is shown before sending and can be removed.
How you use the app. Which screens you open and when, and what you chose when you started. It's tied to your account, stays on our server and carries no advertising or device identifiers; no third party receives it. It tells us where the app is misunderstood. It's in your data export and is deleted with your account.
What we do NOT keep
Photos you show the app, video and audio. When you show the app a photo —or a few frames from a video—, taken on the spot with the camera or picked from your photos, so it can recognise a place's equipment, look at a meal or read a body composition report, Sprots processes it and does not keep it. What remains is the result: the equipment list, what's on the plate, or the figures you confirm. Sprots never keeps the image, but the image does travel to an image recognition provider, which may retain it for a limited time (it's in "Who we share it with"). From a video only those frames leave, never the file, and audio is not recorded.
Your other photos. Your progress photos and the rest of the photos on your phone stay on it. Sprots only receives the ones you choose to upload for your profile or your business, and the ones you show the app so it can read them, as you've just read.
Your location. When you ask for "gyms near me", your location is used to sort that list and then forgotten. It isn't stored and doesn't go anywhere else. (A gym's coordinates are stored: whoever runs it puts them there, and they're a business address.)
Your address. We never ask a person for it. Only the district, and only if you want to appear in the search.
Health data, and Apple Health
On the watch, during a workout, we read your heart rate from Apple Health, to adapt your rest periods. When you finish, the watch shows you how long the workout lasted and, if it was able to read your heart rate for long enough, your average and highest heart rate. Your heart rate is only saved in Sprots if you allow it: if you answer "Yes" to "Share your heart rate with Sprots?" on the watch, or if you turn on "Share my heart rate" in Profile › What you share. With that permission, it stays with your workouts, and whoever can see how you train can see it too: your coach and the administration of your gym, if you allowed them to. It is one permission for all of them: anyone who joins later and can see how you train will see it as well. You can withdraw that permission whenever you want in Profile › What you share. When you finish, we save the workout to Apple Health so it stays in your history. On the phone too: when you finish a session we ask your permission —once— to save it to Apple Health, so it counts toward your rings. If you say no, nothing changes inside Sprots. What Sprots itself saved to Health is not brought back when you import your history: it's already here.
Data coming from Apple Health is not used for advertising and is not sold. Of that data, only your workouts —what activity, when and how long, the distance, the calories, and which app or device recorded it— and your heart rate reach Sprots, and your heart rate is only saved if you allow it.
Permissions, one by one
Nothing is shared automatically. Each of these is accepted separately and withdrawn whenever you want from My account:
- That your coach sees how you train.
- That the gym sees it — it's a third party distinct from your coach, which is why it's asked separately.
- Your heart rate data.
- Your body measurements.
Withdrawing a permission cuts off access from that moment on.
Where it is
On Google Cloud. The service runs in Santiago, Chile, and the database is in the United States (us-central1). We tell you because you have a right to know: it was a cost decision and it's written down to be revisited. The photos you upload are stored in Santiago, Chile.
Who we share it with
- Google / Firebase, so you can sign in with Apple, Google or your email.
- Google Cloud, which hosts the service.
- Google (Cloud Vision), only to check the photos you upload before they're published. It receives the photo for that and may process it outside Chile.
- The people you authorise: your coach, your gym, your training partners.
- An image recognition provider, only at the moment you show the app a photo, whether taken with the camera or picked from your photos. It receives the photo and returns what it sees. We don't keep it; the provider may retain it for a limited time under its own terms.
We don't sell your data. We don't advertise with it. We don't use it to train models.
What you can do
From My account, without writing to anyone:
- See which permissions you granted and when.
- Download everything of yours, in one file.
- Withdraw any permission.
- Delete your account. Your personal data is erased. What you shared with a coach stays anonymised in their work record, because that record is also theirs.
If you'd rather write to us: privacy@sprots.ai.
How long
For as long as you have an account. When you delete it, your personal data is erased. Feedback reports and their screenshots are deleted when they're resolved. Your photos, until you remove them or delete your account: the details are in "What we keep".
Minors
Sprots is for people aged 18 or over. To check this, in the app we ask for your date of birth, and on the website we ask you to tick a box that confirms it.
If we find out an account belongs to someone under 18, we close it and delete their data, just as when someone deletes their account.
If you already had an account and you're under 18, we'll tell you in the app and by email. You have 30 days, with everything working, to take your data with you from My account → Take my data with me. After that, we close your account and delete your data.
Changes
If this changes, we show it to you in the app and you have to accept it before continuing. The version and the date are recorded.