Consumer Health Data Privacy Policy
This policy explains how PocketGym (formerly Spotter) collects, uses and shares consumer health data, as Washington's My Health My Data Act requires. Our privacy policy covers everything else PocketGym does with your information.
Quarterdeck Collective LLC, 732 S 6th St Ste N, Las Vegas, NV 89101, United States. business@quarterdeckcollective.com
What we collect
- your body weight and weigh-ins;
- weight-loss goals and their targets;
- workout logs, including the 1–10 effort rating on a finished workout;
- details of pain, an injury, a medical condition, medication or pregnancy that you type in notes or to Pumpy, the coach;
- safety markers on Pumpy messages (set when a message suggests a medical emergency or disordered eating, mentions medication or supplements, or someone under 18 asks to lose weight).
We do not collect your Apple Health data or your heart rate. On iPhone, PocketGym only writes finished workouts to Apple Health and never reads it, and heart rate from an Apple Watch stays on your devices.
Why we collect and use it
To provide workout logging, plans, goals and Pumpy's coaching; to keep that advice safe; and to secure and run the service. Never for advertising, and never sold.
Where it comes from
- you, when you log a workout, enter your body weight, set a goal or write to Pumpy;
- what PocketGym works out from your logs: records, estimated best lifts and goal progress;
- AI answers to your own requests.
Your consent
We collect this data to provide the features you ask for. We share it with the AI providers below only after you allow AI processing, and the AI permission asks your consent for exactly that: what you send can include health details you choose to share, such as injuries, pain, body weight and goals, and allowing AI processing means you consent to PocketGym and those providers processing them to coach you. You can withdraw that consent at any time in Settings › Data & privacy › AI processing; nothing more is sent to AI after that.
Who receives it
Processors that act only on our behalf, under contract:
- Supabase, which hosts PocketGym's database and server;
- OpenAI, for Pumpy's answers and for reading workouts;
- TypeSafe AI, through Cloudflare, for exercise matching and for screening Pumpy messages for safety.
At your direction only: Strava receives a workout summary when you connect it and tap Send to Strava, and if you turn on Save my workouts, PocketGym writes each finished workout and its effort rating to Apple Health on your iPhone. We do not sell consumer health data.
Your rights
You can:
- confirm whether we collect, share or sell your consumer health data;
- get a copy of it, together with the list of the third parties and affiliates it was shared with (the list above);
- withdraw your consent;
- have it deleted. We delete it from PocketGym and pass the deletion on to the processors and third parties above.
Use Settings › Data & privacy › Export my data and Delete account in the app, or email business@quarterdeckcollective.com with “Consumer health data” in the subject. We may ask you to confirm the request comes from your account's email. Requests are free. We answer within 45 days, and if we need more time (up to 45 more days) we'll tell you why.
Appeals
If we decline your request, you can appeal: email business@quarterdeckcollective.com with “Appeal” in the subject. We'll tell you what we decided and why. If we deny your appeal, you can contact the Washington State Attorney General (atg.wa.gov).
Changes
If this policy changes, the date at the top changes. We'll ask for your consent again before using consumer health data in a new way.