Privacy
PocketGym (formerly Spotter) is operated by Quarterdeck Collective LLC. This page says plainly what it stores and what it does not do. If anything here is unclear, email business@quarterdeckcollective.com. Washington residents: see our Consumer Health Data Privacy Policy.
Who we are
PocketGym is run by Quarterdeck Collective LLC, a company in the United States. We decide why and how your personal information is used, and we are responsible for it.
Quarterdeck Collective LLC, 732 S 6th St Ste N, Las Vegas, NV 89101, United States. business@quarterdeckcollective.com
Privacy contact: Privacy Officer, business@quarterdeckcollective.com. Email is the fastest way to reach us. Write “Privacy” in the subject line.
PocketGym is offered in the United States, Canada, Australia and New Zealand.
What PocketGym stores
- Your email address and password. Handled by Supabase Auth; the password is stored only as a salted hash and is never visible to us.
- If you continue with Google or Apple, PocketGym receives the account identifier, name and email address the provider shares, together with tokens needed to authenticate the connection. Your provider password never reaches PocketGym. Apple lets you hide your real email address behind a private relay. For Apple sign-in, PocketGym also keeps a refresh token in server-only storage so it can revoke your Apple authorization when you delete your account.
- The videos you save — the link, the creator name, the caption or description that was public on the post, and the workout extracted from it.
- What you log — the sets, reps and weights you record in Workout Mode, plus any notes and planned days you add.
- Your preferences and permission choices, including the date and version of your AI processing choice and optional reminder settings.
- Your goal and body weight, if you give them — the goal you set (for example, get stronger or lose fat, and where you train) and, only if you enter it, your body weight with your last 52 weigh-ins. Clearing the body weight field removes all of it.
- A personal save key so the iPhone share extension or an iOS Shortcut can add videos for you. You can replace it any time from Settings.
- Your conversations with Pumpy, the coach, so you can pick a chat up where you left it, and the changes you confirmed from them. They are private to your account.
- If you subscribe to PocketGym Plus, an identifier for you at your payment provider and the state of your subscription — the plan, whether it is running, and the date it renews or ends. Never your card. See Payments below.
What PocketGym does not do
- No ads or advertising trackers, and no third-party web analytics scripts. PocketGym does keep the operational and subscription measurements described below.
- Your library, logs and plan are private to your account and are not sold. Relevant details are processed by the service providers described below when you use AI features.
- PocketGym does not collect your location. Workout logs are fitness information, and anything you type into notes or Pumpy may include health or other sensitive information. Optional Apple Health and Apple Watch heart-rate access are described below.
How we use information
You need an email address, or an Apple or Google account, to have an account. Everything else is optional. Without AI permission, you can still log and plan workouts by hand.
| What we do | Information | Why |
|---|---|---|
| Account and sign-in (email, Apple, Google) | Email; password hash; name; provider ID; account ID | To give you an account and keep it yours. |
| Library, logging, plan, collections, records, goals | Links and public captions; cards; sessions, sets, reps, weights, notes, effort; plan; goals | This is the app: it keeps what you ask it to keep. |
| AI reading of posts and uploads | Links, captions, images, text, audio or video, still frames cut on the phone | To turn a video into a workout card. Only after you allow AI processing. |
| Pumpy, How to do this, Swap or modify | Your messages plus workout context (see AI and Pumpy) | To answer you with your own training in view. Only after you allow AI processing. |
| Jev: matching, sorting, ranking, safety screening | Exercise names, captions, search text, Pumpy messages | To link exercises, sort shared links, rank searches and keep advice safe. Only after you allow AI processing. |
| Health information (see below) | Body weight and weigh-ins; weight-loss goals; injury, pain or condition details; safety markers | To tailor coaching and keep it safe. Only with your explicit consent. |
| Subscriptions and payments | Account, product and transaction IDs; status; a Stripe customer ID on an old web record | To give you the plan you paid for, and keep the records tax and accounting law requires. |
| Creator codes | Code; qualifying transactions | To pay the creator what they earned. |
| Security, abuse prevention, allowances, spend caps | Counters; AI request records; upload permits; logs | To keep PocketGym up, fair and affordable for everyone. |
| Service email (codes, confirmations, resets, deletion) | To sign you in and confirm changes to your account. No marketing email. | |
| Reminders | Push token; time zone; settings | To send the reminders you turned on. |
| Send to Strava | Workout summary, only when you tap Send | Because you asked. |
| Reviewing a Pumpy answer you report | A copy of that answer | To check it and fix what went wrong. |
| Internal measurements (no third-party analytics) | Feature counts; subscription activity; AI outcomes, timing, errors, costs | To see what works, what breaks and what it costs. |
| Shared extraction cache | Public post information, not linked to any account | So a video read once is ready at once for the next person, without another AI call. |
| Legal duties (rights requests, age rules) | As the request or the law requires | Because the law requires it. |
Health information
What we treat as health information:
- your body weight and your last 52 weigh-ins;
- a weight-loss goal and its target;
- anything you type about pain, injury, a medical condition, medication or pregnancy, in notes or to Pumpy;
- the 1–10 effort rating on a finished workout.
Your workout log is fitness information, and we protect it the same way.
Safety markers. If a Pumpy message suggests a medical emergency or disordered eating, mentions medication or supplements, or someone under 18 asks to lose weight, Pumpy replies with a fixed safety message. We mark the message so the rule holds for the rest of the conversation.
Your explicit consent. We process health information only with your explicit consent. The AI permission PocketGym shows before your first AI request (in the app, or in the share sheet) asks for it in plain words: what you send can include health details you choose to share, such as injuries, pain, body weight and goals, and allowing AI processing means you consent to PocketGym and the AI providers it names processing them to coach you. We record the date and the version of the wording you agreed to, and when the wording changes we ask again. Body weight is optional: the field says it is saved to your account to tailor your coaching, and that you can clear it any time.
To withdraw consent or remove health information:
- Settings › Data & privacy › AI processing › Turn off AI processing. Nothing more is sent to AI. Requests already sent and data already saved stay.
- Delete single items. Clearing body weight removes all your weigh-ins. You can also delete a chat, a session or a saved workout.
- Delete account removes everything.
Never for advertising. There are no ads and no trackers, and we don't sell health information or use it for marketing.
Apple Health and Apple Watch stay on your devices. On iPhone, PocketGym only writes finished workouts to Apple Health and never reads it. The Watch reads heart rate and active energy during a workout to show them on your watch and phone. Nothing from Apple Health, and no heart-rate value, goes to our servers or to AI.
AI and Pumpy
Pumpy is an AI, not a person. OpenAI's model writes its answers. AI can be wrong, so check before you train. Pumpy is not medical advice, and it can't change your library or plan until you confirm. We use three AI providers, and only after you allow AI processing. Our server refuses requests to any other AI host.
PocketGym asks for permission before using AI features. You can decline and keep logging workouts and planning manually. In Settings, you can review or turn off AI processing. Turning it off stops future AI requests after the choice is saved; it does not recall requests already sent or delete saved workouts and conversations.
| Provider | Receives | When | Retention |
|---|---|---|---|
| OpenAI (US) | Captions, descriptions, images and text. For Pumpy, How to do this and Swap or modify: your message, an index of your workouts, your planned days, a summary of recent sessions, estimated best lifts, your goal, and your body weight if entered. Not your email | Saving a post; each Pumpy, How to do this or Swap request | Under OpenAI's API terms (data controls) |
| Google Gemini (US) | Audio or video from a post or upload; up to 3 still images. Never your typed text or chats | When a video has too little written workout | We delete our upload after each read; anything else under Google's API terms (terms) |
| TypeSafe AI's Jev, through Cloudflare Workers AI | Exercise names, captions, search text, and your Pumpy messages, which may include health details you type, for safety screening; the text of a Pumpy answer you report, to sort it for review. Never images, audio, video or Apple Health data | Matching, sorting, ranking, safety screening | Cloudflare lists zero data retention for this model; TypeSafe AI states it does not train on customer data. We keep only Jev's answer and a keyed fingerprint of the input (no text, no account ID) for 90 days |
Saving a post can send its caption, description, carousel images, or text you supply to OpenAI to extract exercises. Google Gemini is used for supported audio/video reads, including sampled video frames. Text, coaching and image requests do not automatically fall back to Google. Private uploads can also be processed by Google. Groq is no longer part of the active reading workflow.
Asking Pumpy, tapping How to do this, or Swap or modify also sends an AI model what you typed plus what it needs to answer: the titles, exercises, equipment and collection names of the workouts you have saved, your planned days, a summary of your recent sessions (how many, which muscles, how much volume, your estimated best lifts), your goal and, if you entered one, your body weight. Pumpy sends a short index of that — titles, categories, equipment, collection names, your planned days — at the start of every message so it needs fewer round trips, and sends a workout's exercises only when it needs them to answer. Account email is not deliberately included in these requests. Text you put in a message, exercise detail or selected workout may be included, so avoid adding sensitive information unnecessarily. Pumpy cannot change anything in your library until you confirm it in the app.
To match exercises, sort shared links, rank searches and keep advice safe, PocketGym also sends TypeSafe AI's Jev model the text those decisions need: exercise names, post captions and descriptions, what you type into a search, and your Pumpy messages, which Jev screens for safety (a message can include health details you chose to type). Jev answers fixed questions about that text (for example, which exercise a name means, or whether a message needs the safety reply); it does not write replies and never receives images, audio, video or Apple Health data. PocketGym reaches Jev through Cloudflare Workers AI, which lists zero data retention for this model; PocketGym would reach Jev directly from TypeSafe AI only under a zero-data-retention agreement. TypeSafe AI states that it does not train on customer data (TypeSafe's terms). PocketGym keeps Jev's answers with a keyed fingerprint of the input to check its accuracy, never the text itself. Jev is used only after you allow the AI permission that names it.
When a person reads your data. No one reads your chats, except a Pumpy answer you report: we keep a copy of up to 32,000 characters so it can be reviewed and fixed. Safety screening only chooses whether Pumpy answers normally or with a fixed safety message; it makes no decision about you beyond that reply.
Other services involved
Every service provider named on this page receives only what it needs to do its job for PocketGym, and is bound by its terms with PocketGym to use that data only to provide its service and to protect it at least as well as this policy describes. None of them may sell it or use it for advertising. Strava, which you connect yourself, and the video platforms whose players you choose to play handle what you send them under their own policies.
Data is stored with Supabase in the United States. Sign-in codes and account emails are sent through Resend, which receives your email address and the message. Fonts are loaded from Google Fonts and Fontshare.
Video playback happens in an embedded player from Instagram, TikTok or YouTube. Those players are the platforms' own and follow the platforms' privacy policies.
When you ask how an exercise is done, PocketGym shows a short demonstration clip. These come from a short list of fitness creators' public YouTube channels, collected in advance and stored by exercise, so most of the time nothing is looked up at all — the answer is already in PocketGym's own list, and more than one creator may be offered for the same movement. For a movement that list does not cover, the server falls back to searching YouTube, preferring those same channels. Either way only the name of the exercise is sent — never your email, your account or anything else about you — and any search result is cached and shared by everyone, so the same movement is looked up once for all of PocketGym rather than once per person. The thumbnail is loaded from Google's image host, and the clip, if you tap it, plays in a privacy-enhanced (no-cookie) YouTube player that is only added to the page once you tap and is removed again when you close the sheet. The link beside it opens YouTube's own search results.
International transfers
PocketGym is run from the United States. Your data is stored with Supabase in the United States, and our providers process it in the United States and possibly other countries where they operate. US law may differ from the law where you live, and US courts and authorities may be able to access data held there.
- Canada: our US service providers are bound by contract to protect your information and use it only for PocketGym. While it is in the United States, US courts and authorities may access it.
- Australia: we are likely to disclose your personal information to recipients in the United States, and possibly other countries where our providers operate. We take reasonable steps so they handle it consistently with the Australian Privacy Principles.
- New Zealand: our overseas providers act only on our behalf, and we stay responsible for your information under the Privacy Act 2020.
Payments
In the native Android and iPhone apps, purchases are handled by Google Play or Apple. RevenueCat validates purchases and synchronizes subscription access with your PocketGym account. RevenueCat receives your PocketGym account ID, purchase history, product and transaction identifiers, subscription status, and technical information needed to process purchases. It does not receive your workout library or coaching conversations. Payment-card details stay with the store. See RevenueCat’s privacy policy.
Store subscriptions renew until cancelled in Google Play or Apple subscription settings. Deleting your PocketGym account or uninstalling the app does not cancel store subscriptions. Cancel in the store first if you want billing to stop. Store providers may retain transaction records required for tax, accounting, fraud prevention, and legal obligations.
PocketGym no longer sells subscriptions on the web. Web purchases through Stripe ended on 18 September 2026, and no web subscription bills anyone. PocketGym does not store your payment-card details. If your account has a record from Stripe's time, PocketGym keeps on it only the customer and subscription identifiers Stripe gave you, which plan it was and its status, the date the period ends, and the date a payment last failed, if one did; PocketGym's log of the notifications Stripe sent holds each one's identifier, type and when it was handled, and no account or payment details. Deleting your account removes the record from PocketGym and asks Stripe to delete the customer there. Stripe keeps its own record of payments under its own privacy policy, for as long as tax and accounting law says it must.
Connections
PocketGym can connect to Strava, if you choose to, so that a workout you have just finished can be sent there as an activity. You connect it yourself in Settings → Connections, and nothing happens until you do.
The connection is one-way. PocketGym writes to Strava and never reads from it: it does not see your activities, your friends, your routes, your segments or your profile, and no Strava data is ever given to any of the AI services above. What gets sent, and only when you tap Send to Strava on a session, is the workout's name, when you started it and how long it took, one line per exercise with the sets you logged, your total volume, any personal bests from that session, and a link back to PocketGym.
When you connect, Strava gives PocketGym's server two access keys. They are held on a row attached to your account on the server only — the app on your phone never receives them and cannot read them — together with your Strava athlete number and the identifier of each activity PocketGym created, so the same session is never posted twice. Disconnecting deletes both keys and tells Strava to forget PocketGym, and so does deleting your account. You can also revoke PocketGym yourself at any time from your Strava settings.
Apple Health, Apple Watch, widgets and reminders
Apple Health. If you turn on Save my workouts (Settings › Connections), PocketGym saves each workout you finish to the Health app on your iPhone: when it started and ended, any pauses, the kind of workout, the effort you rated and, when no Apple Watch recorded it and you have entered your body weight, an estimate of active energy. If you edit or remove that workout in PocketGym, PocketGym updates or removes the copy it saved. On iPhone, PocketGym only writes to Health; it never reads your Health data. Nothing from Health is sent to PocketGym's server or AI providers, used for advertising or marketing, or sold. Workouts already saved to Health stay there if you delete your PocketGym account; you can delete them in the Health app. You can turn saving off in PocketGym and manage Health permissions in your device's settings.
Apple Watch. The Apple Watch companion exchanges the current workout and workout controls with your paired iPhone. With Save my workouts on and Health access granted on the Watch, the Watch records the workout: it reads your heart rate and active energy while you train, saves the workout and your effort rating to Apple Health when you finish, and shares live heart rate with your iPhone so it can appear on your Lock Screen, during the workout and in its summary. Heart-rate values stay on your devices: PocketGym does not send them to its server or AI providers.
Effort. The 1–10 effort rating you give a finished workout is also saved with that workout in your PocketGym account, like the rest of your training log.
Widgets and Live Activities use a local shared container to display workout information, including on your Lock Screen or Dynamic Island when enabled. Anyone who can view those surfaces may see that information. While a workout runs, PocketGym keeps a record of your workout taps (and, with an Apple Watch, your heart rate) in files on your iPhone so these controls keep working when the app is closed. Those files are excluded from iCloud and computer backups; files older than a week are deleted the next time you start a workout, and all of them are removed if you delete the app. You control widgets, Live Activities and notification previews in your device settings.
If you enable reminders, PocketGym stores a push subscription or Apple push token, its association with your account, your timezone and reminder preferences, and delivery state. Apple's Push Notification service delivers iPhone notifications. You can turn reminders off in PocketGym Settings or disable notifications in your device settings. PocketGym does not use reminder tokens for advertising.
Operational measurements and creator codes
PocketGym records usage allowances, AI request outcomes, processing times, errors and costs to operate the service, prevent abuse and improve reliability. Internal reports also summarize saves, completed workouts, use of features and subscription activity. These records can be linked to your account while it exists, and are kept for the periods in Retention. RevenueCat also processes purchase information for subscription analytics.
If you redeem a creator's offer code in the App Store or Google Play, the store tells PocketGym which code was used. PocketGym records it with qualifying subscription transactions so it can account for creator earnings. Creator reporting shows aggregate counts and earnings rather than your workout library or coaching conversations. When you delete your account, the account link is removed from retained earnings records; transaction and payout records may remain for accounting.
Files and video reading
Uploads enter private temporary storage. PocketGym's server sends supported audio or video to Google Gemini for transcription or workout extraction. PocketGym attempts to delete its temporary file and Google's uploaded file after processing, including failed attempts. A cleanup sweep targets files left in PocketGym storage after two hours; outages can delay cleanup. Extracted text and workout details remain on your saved card.
For public links with little written workout information, PocketGym may also read available audio or video, automatically or when you request it. Source material fetched from a public post may contribute to the shared cache below. Your private uploads and supplied captions or HTML are excluded from new shared cache entries.
Deleting a temporary uploaded file does not erase a provider's separate processing or abuse monitoring records. Provider handling depends on the account and service configuration; see OpenAI's data controls and Google's API terms. In particular, Google's paid and unpaid services have different data-use terms.
Shared extraction cache
When a video is read for the first time, the resulting workout is cached under the video's public ID so the next person who saves the same video gets it instantly and no AI call is needed. That cache holds only information taken from the public post — never anything about who saved it. It is not linked to any account, so deleting an account does not remove it. An entry not updated for 18 months is deleted; a creator can ask us to remove one sooner (see the terms).
Retention
| Information | How long |
|---|---|
| Account, profile, settings (consent date and version, goal, body weight) | Until you delete your account |
| Body-weight history | Your last 52 weigh-ins; clearing the field removes all of them |
| Workouts, sessions, plan, collections, corrections, records, goals | Until you delete the item or your account |
| Pumpy chats and safety markers | Until you delete the chat or your account |
| A reported Pumpy answer | Until you delete your account |
| Uploads and still frames cut on the phone | Deleted when the read finishes; a cleanup removes anything left after 2 hours |
| Our upload to Google | Deleted after the read; anything Google keeps is under its API terms |
| Save jobs (the server's record of reading a video for you) | 30 days after the job finishes; deleted with your account |
| Reminder registrations | Until you turn reminders off, the device rejects them, or you delete your account |
| Subscription status | Until you delete your account |
| Strava keys | Until you disconnect or delete your account |
| Apple sign-in token | Until you delete your account (revoked at Apple first) |
| Save and coaching counters | 13 months; deleted with your account |
| AI cost ledger (provider, model, tokens, cost) | 13 months; your account ID is removed when you delete your account |
| AI admission records | 40 days; deleted with your account |
| AI cost reservations | 90 days; your account ID is removed when you delete your account |
| Upload permits | 7 days |
| Per-minute counters | About 10 minutes |
| Jev decision log (no text, no account ID) | 90 days |
| Deletion requests to providers | Until the provider confirms; a Strava request stops after 8 tries or 7 days, and RevenueCat and Stripe requests are retried at least once a day until they confirm |
| Creator-code earnings | 7 years from the payment, for accounting; your account link is removed when you delete your account |
| Stripe notification log (no account ID or payment details) | 7 years |
| Shared extraction cache (public post data, no account) | 18 months after the entry was last updated |
| Cover images of public posts shown on saved cards | No set period: every card saved from that post shows the same image |
| On-iPhone workout journal | Files older than 7 days are deleted at the next workout |
| Server and sign-in logs (may include IP address), backups | Kept by Supabase, our host, under its log and backup retention |
Your rights
Everyone
- Export my data: Settings › Data & privacy › Export my data writes a JSON file of everything in your account (see below).
- Correct: edit in the app, or email us.
- Delete: Settings › Data & privacy › Delete account, or delete single items. If you can't sign in, email us from your account's address; we erase it within 30 days of confirming it's you.
- Stop AI processing: Settings › Data & privacy › AI processing.
- Anything else: business@quarterdeckcollective.com. We may ask you to confirm the request comes from your account's email. Requests are free.
Canada
You can access and correct your personal information and challenge our compliance with PIPEDA. We answer within 30 days. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Australia
You can ask to access (APP 12) and correct (APP 13) your personal information, and we answer within 30 days. You can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
New Zealand
You can ask to access (IPP 6) and correct (IPP 7) your personal information, and we answer within 20 working days. You can complain to the Privacy Commissioner (privacy.org.nz).
United States
We don't sell your personal information or share it for targeted advertising. That includes residents of Nevada and Washington: we do not sell covered information or consumer health data. Washington residents: see our Consumer Health Data Privacy Policy. Wherever you live, you can use the export, correction and deletion options above.
Children and teens
PocketGym is for people 13 and older. If we learn someone under 13 has an account, we delete it. Email us if you think a child under 13 is using PocketGym.
Under 18: Pumpy won't set a weight-loss goal for anyone who says they are under 18, and offers a strength goal instead. Weight-loss plans ask “Are you 18 or older?” and need a “Yes”. We remember an under-18 statement for the whole conversation.
App-store age signals: some US states (for example Texas, Utah and Louisiana) require apps to use the app stores' age range and parental-consent signals. Support for these signals is being added to PocketGym. When it arrives, we will use them only to apply age rules, meet the law and keep users safe, and delete them once used.
Taking your data with you
Settings → Data & privacy → Export my data writes everything you put into PocketGym — your workout cards, every session you have logged, your plan, your collections, your goals and their programs, the corrections you made to cards, your records and awards, your chats with Pumpy and any Pumpy answers you reported, your plan status (store and subscription records, without payment details), your reminder settings and your settings — into a single JSON file on your device. It is a plain, structured, machine-readable format, so you can read it yourself or move it somewhere else. Your personal save key, reminder tokens and addresses, and connection keys (Strava, Apple) are deliberately left out of the file, because each works as a key and files get forwarded.
Deleting your account
Removing a workout deletes it immediately. To delete your whole account, open PocketGym and go to Settings → Data & privacy → Delete account. You will be asked to type DELETE to confirm, and then the following are removed from the active app:
- your workout cards, and any video files you uploaded;
- every session you have logged, and your plan;
- your collections and the corrections you made to cards;
- your chats with Pumpy;
- your profile, your settings and your personal save key;
- your subscription record in PocketGym, and any customer record left at Stripe from the old web purchases (PocketGym asks Stripe to delete it). Google Play and Apple subscriptions must be cancelled in the store separately;
- your Strava connection, if you made one — Strava is told to forget PocketGym and both access keys are deleted;
- your customer record at RevenueCat — PocketGym asks RevenueCat to delete it, and keeps asking until RevenueCat confirms;
- your Apple sign-in authorization, if connected — PocketGym asks Apple to revoke the stored grants and then deletes those tokens. You may need to sign in with Apple again first if the account was connected before token revocation was available;
- the sign-in account itself.
Export your data first if you want to keep it. Account deletion cannot be undone in the app. Backup copies and provider security records may remain under their separate retention policies. PocketGym keeps its own record of what the AI cost to run for 13 months, and the deletion strips your account id out of those rows rather than keeping them attached to you. New AI reservation records are retained for up to 90 days; request admission records for up to 40 days, with scheduled cleanup.
If you cannot sign in, email business@quarterdeckcollective.com from your account's address and it will be erased for you.
Changes to this policy
We'll update this policy as PocketGym changes; the date at the top shows the latest version.
Significant changes (new kinds of information, new uses, a new AI provider, fewer rights): we'll tell you in the app or by email before they take effect.
Changes to something you agreed to: where a change affects something you consented to, such as AI processing, we'll ask again, and the feature stays off until you answer.
Earlier versions: email us and we'll send you the version you ask for.