Legal

Last updated: 1 June 2026

Privacy Policy

Who we are

Spotter is operated by Giuliano Tosto, 44 Angles Road, London, SW16 2UR, United Kingdom (info@spotter.click). References to "we", "us", or "Spotter" refer to this individual operator.

What data we collect

• Account data — email address and password (via Supabase Auth) when you create an account.
• Fitness data — your quiz answers: name, age, weight, height, goal, dietary preferences, activity level, and food preferences. This data is used solely to generate your personalised plan.
• Payment data — billing is handled entirely by Stripe. We do not store card numbers or payment details on our servers. We receive a Stripe customer ID and subscription status.
• Usage data — anonymised page view and event data via Google Analytics (GA4), including device type, country, and pages visited. No personally identifiable information is sent to GA4.
• Check-in data — if you use the optional check-in feature: weight, energy, difficulty, and free-text notes you provide.
• AI interactions — messages sent to the AI coach are processed by DeepSeek's API to generate responses. These messages are not stored by us beyond what is necessary to display your conversation.

Legal basis for processing

• Contract performance — processing your fitness data and generating plans is necessary to deliver the service you signed up for.
• Legitimate interest — anonymised analytics help us improve the product.
• Consent — you explicitly accept these terms before any data is processed.

How we use your data

• To generate your personalised nutrition and workout plan.
• To manage your subscription and send transactional emails (plan delivery, check-in reminders).
• To provide AI coach responses when you use that feature.
• To improve the product using aggregated, anonymised analytics.

We do not sell your data. We do not use your fitness data for advertising.

Third-party processors

• Supabase (supabase.com) — authentication and database. Servers in the EU.
• Netlify (netlify.com) — hosting and serverless functions. Servers in the US (with EU option). Covered by Standard Contractual Clauses.
• Stripe (stripe.com) — payment processing. Compliant with PCI DSS.
• Resend (resend.com) — transactional email delivery.
• DeepSeek (deepseek.com) — AI model for plan generation and chat. Your quiz answers and coach messages are sent to DeepSeek's API.
• Google Analytics (analytics.google.com) — anonymised usage analytics.

Data retention

We retain your account and plan data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., Stripe transaction records).

Your rights (UK GDPR)

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Restriction — request that we restrict processing of your data.

To exercise any of these rights, email info@spotter.click. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use localStorage and sessionStorage (not traditional cookies) to store your session token, quiz answers, and UI preferences. Google Analytics sets cookies for session tracking. You can disable analytics cookies via your browser settings.

Changes to this policy

We may update this Privacy Policy occasionally. The date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance.

Terms of Service

1. Acceptance

By using Spotter, you agree to these Terms of Service and our Privacy Policy. If you do not agree, do not use the service.

2. The service

Spotter provides AI-generated personalised nutrition plans, workout plans, and an optional AI coaching chat. Plans are generated by large language models and are intended for informational and general fitness purposes only.

Spotter is not a medical service. We are not registered dieticians, certified nutritionists, or medical professionals. Nothing on this platform constitutes medical advice, diagnosis, or treatment. Always consult a qualified physician before starting a new diet or exercise programme.

3. Eligibility

You must be 18 years of age or older to use Spotter. By creating an account or generating a plan, you confirm that you meet this requirement.

4. Subscription and billing

• Free tier: one plan per email address, 3-day sample, one PDF export. No payment required.
• Paid tiers (Solo £5/mo, Premium Solo £10/mo, Together £15/mo) are billed monthly or annually via Stripe.
• Subscriptions renew automatically. You can cancel at any time via your account page; access continues until the end of the billing period.
• Annual subscriptions are billed upfront. No pro-rata refunds on cancellation — you retain access until the period ends.
• Prices are in GBP and inclusive of any applicable VAT.

5. Refunds

We offer a 7-day refund on first-time monthly subscriptions if you are not satisfied. Contact info@spotter.click within 7 days of your first charge. Annual subscriptions are non-refundable after 14 days.

6. Acceptable use

You agree not to:

• Use the service for any unlawful purpose.
• Attempt to reverse-engineer, scrape, or exploit the AI models or APIs.
• Share account credentials or allow others to use your account.
• Misrepresent your age or health status to obtain plans not appropriate for you.

7. AI-generated content

Plans and coaching responses are generated automatically by AI. They may contain errors. Spotter does not guarantee the accuracy, completeness, or fitness-for-purpose of any generated content. You use all AI-generated plans at your own risk.

8. Limitation of liability

To the maximum extent permitted by law, Spotter and Giuliano Tosto shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the service, including but not limited to personal injury, illness, or financial loss. Our total liability to you shall not exceed the amount you paid us in the 3 months preceding the claim.

9. Intellectual property

The Spotter platform, brand, and software are owned by Giuliano Tosto. AI-generated plans belong to you once generated; we do not claim ownership of your plan content.

10. Termination

We reserve the right to suspend or terminate accounts that violate these terms, with or without notice. You may delete your account at any time by contacting us.

11. Governing law

These Terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

12. Contact

Questions about these terms: info@spotter.click