Delete your Spotter account
Sorry to see you go. Here's how to permanently delete your Spotter account and the personal data attached to it (GDPR Art. 17, the right to erasure). It takes about a minute.
From inside the app
- Open Spotter and sign in.
- Go to the Profile tab.
- Scroll to the bottom, tap Delete account.
- Type
DELETEto confirm. - Done. Your account is removed from our live servers immediately and rolls off our encrypted off-site backups within 30 days.
What we delete
Everything we hold about you on our servers: your account, your sign-in email, and every record attached to them.
- Your profile and your preferences
- Workouts, sets, and personal records
- Templates, plans, and any plan share links you created
- Custom exercises you added
- Water logs, wellness goal targets, and workout-of-the-day history
- Your public profile, and the blocks and reports tied to your account
- Your subscription record, and your Apple sign-in link if you have one
What stays on your phone
Deleting your account from inside the app also deletes everything the app can reach on your phone. There is one thing it cannot reach. If you imported a workout file into an older version of Spotter, a fingerprint of that file can stay in your phone's secure storage where the app cannot reach it to delete it. It holds no workout data, only that an import happened, when, and how many workouts were in it. Email us at goncalomatos97@gmail.com if you want to know more about it.
Analytics and crash reports
If you had analytics turned on, we also ask PostHog to delete the analytics profile held for the phone you delete from, using their Delete Persons API. That profile is your personal data, and deleting from inside the app is what lets us name it: your phone reads the random code PostHog's software generated on it and sends that code along with the deletion, so the request names your profile by that code. We never send your account ID to PostHog, on this request or on any other. If you used Spotter on more than one phone, the profile held for a phone you did not delete from is still your data and we cannot find it, because the only copy of the code that names it is on that phone and we never had it. Open Spotter on the other phone and delete your account there as well, and that phone sends its own code. If you no longer have that phone, the code is gone with it and neither we nor PostHog can pick your profile out of the others. It carries no name, no email and no account ID, and it stops growing the moment you stop using Spotter on that phone. Email us at goncalomatos97@gmail.com if you want us to look at your case (GDPR Art. 11(2)).
Crash-report data on Sentry is not deleted when you delete your account; it is purged on Sentry standard retention. There is one identifier in it we should name. Sentry's own software puts a random code on what it sends, made on your phone the first time Sentry runs there, and it does not change from one launch to the next. It is not your name, your email or your account ID, and we never send Sentry any of those. What it does mean is that Sentry can tell that several crash reports came from the same phone. Separately from that code, we turn off the network logging Sentry lets us turn off, and where a record of a request your phone made still reaches a crash report we keep only the address of the endpoint and drop the part of it that picks out one row. Where the crash trail needs to refer to a workout, it uses a random code your phone made and kept, so your own phone can match it back to that workout. Where it needs to refer to a set, it uses a scrambled code worked out from a key that exists only while the app is running, so once the app closes not even your own phone can match it back.
If you can't sign in
If you have lost access to your account email and cannot sign in to delete the account from inside the app, email goncalomatos97@gmail.com from the email address on your account. We will verify ownership and delete the account on your behalf within 30 days.
A deletion we run for you this way never touches your phone, so there is no analytics profile we can name and none is deleted at PostHog. Everything else described above is deleted in full.
If we cannot do what you asked
If we do not act on your deletion request, we will tell you why within one month, and you can complain to a data-protection authority or go to court. Both routes, and the authority for Portugal where we are established, are set out in the Privacy Policy.