Privacy Policy

Last updated 24 October 2026. Spotter (spotter.hamidaddin.org) is a personal fitness platform run by Ali Hamidaddin. Contact: hamidaddin@gmail.com.

What we collect

• Account: your email address and name. If you sign in with Google we receive only your name, email and profile picture (scopes openid email profile).
• WHOOP (only if you connect it): recovery, HRV, resting heart rate, sleep, strain, workouts, profile and body measurements, through WHOOP's official API.
• Google Health / Fitbit (only if you connect it): read-only steps, resting heart rate, heart rate variability and sleep from your Fitbit or Pixel Watch, through the Google Health API.
• What you add: training schedule, meal photos, training videos, InBody results, progress photos and messages.
• Telegram (only if you link it): your Telegram chat id and the messages and photos you send the Spotter bot.

How it is used

Only to run Spotter for you: show your data, let the trainers you choose see it and comment, translate messages between English and Arabic, and power the Spotter assistant. The assistant and translations are processed by Anthropic's Claude API under its commercial terms, which do not use your data to train models. We do not sell data, show ads, or share data with anyone else.

Who can see your data

You. Trainers can see only the categories you switch on for them under People, and you can change or remove that at any time. Read-only trainers in a group see the group conversation, not your personal data, unless you share it with them.

Google user data

Spotter's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google sign-in data is used only to sign you in. Google Health data is used only to show your readings to you, to the trainers you choose, and to the Spotter assistant acting for you; it is never sold, used for advertising, or used to train AI models. You can disconnect Google Health in Settings at any time, which revokes access.

Storage and security

Data is stored in Amazon Web Services (us-east-1), encrypted at rest and in transit. Files are private and only reachable through short-lived signed links.

Deleting your data

You can disconnect WHOOP and unlink Telegram in Settings at any time. To delete your account and all its data, email hamidaddin@gmail.com and it will be removed within 30 days.