Privacy Policy

Spartn ("we," "us," or "our"), operated by Clevor, Ltd., located at 2020 N Academy Blvd, Ste 261 #2461, Colorado Springs, CO 80909, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"), our web-based trainer dashboard ("Dashboard"), our trainer marketplace, or submit a sales or pilot inquiry (collectively, the "Platform"). This policy applies to all users of the Platform, including individual app users, trainers, training clients, and business prospects. Please read this policy carefully. If you do not agree with its terms, please do not use the Platform.

1. Information We Collect

We collect information about you in the following ways, depending on how you use the Platform:

a. Account Information

• ✓All Users: When you create an account via Firebase Authentication, we collect your user ID, email address, display name, and profile photo.
• ✓Trainers: During onboarding, we additionally collect your first and last name, username, bio, profile photo, certifications, specialties, social media links (Instagram, TikTok, Twitter), website, and location.
• ✓Clients (Trainer Marketplace): During client onboarding, we may collect your name, contact information, fitness goals, training preferences, and any special notes or health information you provide to your trainer.

b. Health and Fitness Data

• ✓Workout Data: We store workout logs, exercise history, program progress, and completed sessions.
• ✓Body Metrics: If provided, we may store weight data (including data synced from Apple HealthKit), calories burned, and water intake.
• ✓Apple HealthKit Data: With your permission, the App reads step count, active energy burned, heart rate, and body weight from Apple HealthKit to enhance workout tracking, step goals, recovery insights, and analytics. Some HealthKit-derived values, such as weight or activity summaries, may be stored in Firebase Firestore if needed to power your account features. HealthKit data is not shared with third-party advertisers, sold, or used for advertising.
• ✓Nutrition Data: If you use meal tracking features, we store meal logs, food items, macronutrient breakdowns, recipe data, meal plan preferences, and generated meal-plan or food image data.
• ✓Apple Watch and Widgets: If you use the Spartn Apple Watch app or home screen widgets, these extensions read step count and meal data from your account to display on-device summaries. This data is synced via App Group shared storage and is not transmitted separately.
• ✓Health and fitness data is considered sensitive personal information. We use it solely to provide and improve our fitness services. We do not sell this data to third parties.

c. Payment and Financial Information

• ✓App Subscriptions (Spartn Pro): In-app subscription payments (Spartn Pro Monthly for $9.99/month or Spartn Pro Yearly for $69.99/year) are processed by Apple via StoreKit. We do not collect or store your credit card details for these purchases. We store subscription status, purchase date, and expiration date in Firestore.
• ✓Trainer Marketplace Payments (Clients): Training plan subscriptions are processed by Stripe. When you purchase a plan, Stripe collects your payment method details. We store your Stripe customer ID, subscription ID, payment status, and billing history — but we do not store your full card number or bank details.
• ✓Trainer Payouts: Trainers connect a Stripe Express account to receive payouts. Stripe collects your banking information, government-issued ID, and tax details directly. We store your Stripe Connected Account ID, payout status, and payout history. We do not have access to your full bank account number — only the last four digits and bank name as provided by Stripe.

d. Communications Data

• ✓In-Platform Messaging: Trainers and clients can communicate via our built-in messaging system. Message content, images, timestamps, and read status are stored in Firebase Firestore and Firebase Storage.
• ✓Support Tickets: If you submit a support request, we collect the contents of your inquiry and any related correspondence.
• ✓Sales and Pilot Inquiries: If you ask about an Enterprise pilot, we collect your name, work email, organization, website, role, organization-size ranges, primary business need, expected timeline, message, referral or campaign attribution, and your consent to be contacted. This information is kept separate from trainer applications and is not added to a marketing list based on contact consent alone.
• ✓Transactional Emails: We send transactional emails (e.g., client acceptance, subscription confirmations, refund notifications, weekly digest emails, and Smart Coach weekly plan emails) via Amazon Web Services Simple Email Service (AWS SES). Your email address and the content of these emails are processed by AWS.
• ✓Push Notifications: We use Firebase Cloud Messaging (FCM) to send push notifications to your device. Your device token is stored to deliver these notifications.

e. Reviews and Public Content

• ✓Client Reviews: If you leave a review on a trainer's profile, the review text and your associated display name are stored and publicly visible to all users.
• ✓Trainer Profiles: Trainer profile information (name, photo, bio, certifications, specialties, and reviews) is publicly accessible on the Platform.

f. AI Feature Inputs and Outputs

• ✓Smart Coach and Weekly Plans: We may process your goals, recent workouts, exercise history, activity signals, recovery momentum, and plan preferences to generate Smart Coach recommendations, weekly plans, rationale, and emails. Smart Coach emails may include links to view the plan or apply it for the week.
• ✓Meal, Recipe, and Image Generation: We may process nutrition targets, meal preferences, dietary restrictions you provide, meal names, and descriptions to generate meal plans, recipes, and food images.
• ✓Trainer Content Generation: Trainers may use AI-assisted tools to generate program sales copy or related content from trainer-provided program details.
• ✓AI providers, including OpenAI, process these inputs as service providers to deliver Spartn features. Spartn does not sell AI inputs or outputs and does not use health, fitness, nutrition, or HealthKit data for advertising.

g. Automatically Collected Information

• ✓Usage Data: We collect information about how you interact with the Platform, including features used, pages visited, timestamps, and session duration.
• ✓Device Information: We may collect device type, operating system, browser type, and unique device identifiers.
• ✓Error and Crash Data: We use Sentry to collect error reports, crash logs, and performance data from both the iOS App and web Dashboard to identify and fix bugs. This may include your user ID, device info, and the action that triggered the error.
• ✓Performance Monitoring: We use New Relic in the iOS App to monitor app performance, network requests, and response times. This data may include device type, OS version, and timing metrics but does not include personally identifiable information beyond a session identifier.
• ✓Analytics: We use Firebase Analytics and Heap in the iOS App to understand feature usage and user flows. On our website, we use Umami and Google Analytics. These tools may collect session data, page views, and event data associated with a pseudonymous identifier.
• ✓Advertising: For users who have not subscribed to Spartn Pro, we may display advertisements in the App via Google AdMob. AdMob may collect advertising identifiers and usage data to serve relevant ads. You can limit ad tracking through your device's privacy settings.

2. How We Use Your Information

We use your information to:

• ✓Provide Our Services: Authenticate your identity, manage your account, deliver training programs, process payments, and facilitate communication between trainers and clients.
• ✓Process Payments: Process subscription payments from clients, issue refunds, manage the 24-hour refund window, and release payouts to trainers via Stripe Connect.
• ✓Manage Subscriptions: Process and manage Spartn Pro in-app subscriptions (via Apple StoreKit) and trainer plan subscriptions (via Stripe), including activating features and updating statuses.
• ✓Communicate with You: Send transactional emails (e.g., client acceptance, subscription confirmations, refund notifications), push notifications, and support responses.
• ✓Evaluate Sales and Pilot Inquiries: Qualify organizations for Enterprise pilots, assign follow-up, maintain internal sales notes and status history, and contact authorized prospects. AWS SES processes the email address and message content needed to deliver our acknowledgement and follow-up notifications.
• ✓Generate Personalized Features: Generate Smart Coach weekly plans, workout suggestions, recovery insights, step goals, meal plans, recipes, food images, and trainer content using account, workout, nutrition, and trainer-provided data.
• ✓Facilitate Trainer-Client Relationships: Share relevant client information (name, goals, onboarding data) with their chosen trainer, and share relevant trainer information (profile, plans) with clients.
• ✓Safety and Enforcement: Investigate and enforce violations of our Terms of Service, including reviewing messages and content in connection with safety investigations or legal compliance.
• ✓Improve the Platform: Analyze usage data, error reports, and feedback to enhance features, performance, and user experience.
• ✓Comply with Legal Obligations: Meet legal and regulatory requirements, including tax reporting for subscription revenue and trainer payouts.

3. Data Sharing Between Trainers and Clients

When you subscribe to a trainer's plan, certain data is shared between you and your trainer to facilitate the coaching relationship:

What trainers can see about their clients:

• ✓Name, profile photo, and contact information
• ✓Fitness goals, training preferences, and onboarding questionnaire responses
• ✓Workout history and program progress
• ✓Subscription status and plan details
• ✓Messages sent within the platform

What clients can see about their trainer:

• ✓Public profile information (name, photo, bio, certifications, specialties)
• ✓Available training plans and pricing
• ✓Public reviews from other clients
• ✓Messages sent within the platform

Trainers are contractually required to keep client information confidential and use it only for training purposes under our Trainer Terms of Service. However, once information is shared with a trainer, their handling of it is governed by their own practices. Spartn is not responsible for how trainers use client data outside of the Platform.

4. How We Share Your Information with Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following cases:

• ✓Stripe: We share payment-related data with Stripe to process client subscription payments and trainer payouts. Trainers' banking and identity information is collected directly by Stripe via Stripe Connect. See Stripe's Privacy Policy.
• ✓Firebase (Google LLC): We use Firebase for authentication, real-time database and Firestore storage, cloud functions, and push notifications (FCM). See Google's Privacy Policy.
• ✓Apple StoreKit: For processing in-app subscription purchases. We do not access your credit card details for these transactions. See Apple's Privacy Policy.
• ✓Amazon Web Services (AWS): We use AWS Simple Email Service (SES) to send transactional emails. Your email address and email content are processed by AWS. See AWS Privacy Policy.
• ✓Sentry: We use Sentry for error monitoring and crash reporting in the iOS App and web Dashboard. Error data may include your user ID and device information. See Sentry's Privacy Policy.
• ✓New Relic: We use New Relic for performance monitoring in the iOS App. Data shared includes session identifiers, timing metrics, and device information. See New Relic's Privacy Policy.
• ✓Heap: We use Heap for product analytics in the iOS App. Heap may collect pseudonymous usage data, event data, and session information. See Heap's Privacy Policy.
• ✓Google AdMob: For users who have not subscribed to Spartn Pro, we may use Google AdMob to display advertisements. AdMob may collect your advertising identifier (IDFA) and usage data. You can opt out of personalized ads via your device's privacy settings. See Google's Privacy Policy.
• ✓LaunchDarkly: We use LaunchDarkly for feature flag management. LaunchDarkly may receive a user identifier and device context to evaluate feature flags. No personally identifiable health or payment data is shared. See LaunchDarkly's Privacy Policy.
• ✓OpenAI: We use OpenAI as a service provider for AI-assisted Smart Coach plans, workout and meal plan generation, recipe and image generation, and trainer program sales content. OpenAI may process prompts and outputs needed to provide these features.
• ✓Legal Requirements: We may disclose your information if required by law, such as to comply with a subpoena, court order, or other legal process, or to protect the rights, safety, or property of Spartn, our users, or the public.
• ✓Business Transfers: If Spartn is involved in a merger, acquisition, or asset sale, your information may be transferred to the new entity, with notice to you and in accordance with applicable laws.

5. Trainer-Specific Privacy Provisions

a. Stripe Connect and Financial Data

To receive payouts, trainers must connect a Stripe Express account. During this process, Stripe directly collects:

• ✓Government-issued identification (for identity verification)
• ✓Bank account or debit card details (for payouts)
• ✓Tax identification information (e.g., SSN or EIN)

This information is collected and stored by Stripe, not by Spartn. We only receive your Stripe account ID, connection status, account type, and the last four digits and name of your connected bank account. Your use of Stripe is governed by the Stripe Connected Account Agreement.

b. Google Workspace Account

As part of trainer onboarding and session scheduling, we may create or manage Google Workspace, Google Calendar, and Google Meet resources under the spartn.app domain for platform operations. Event titles, descriptions, participant names, attendee emails, session times, meeting links, and reminder metadata may be processed by Google to create meetings and send calendar-related notifications. These accounts and calendars are managed by Spartn and are subject to Google's terms.

c. Public Trainer Profile

Your trainer profile — including your name, photo, bio, certifications, specialties, and client reviews — is publicly accessible on the Spartn website and may be indexed by search engines. You can control some of this information through your profile settings, but certain fields (name, certifications) are required for platform operation.

6. In-App Subscriptions (Spartn Pro)

The App offers in-app subscriptions (Spartn Pro Monthly and Spartn Pro Yearly) to unlock premium features. The following applies:

• ✓Payment Processing: All in-app subscription payments are processed securely by Apple via StoreKit. We do not access or store your credit card details for these purchases.
• ✓Subscription Data: We store subscription-related data (user ID, subscription status, authorization level, total cost, expiration date) in Firebase Firestore to manage your access to premium features.
• ✓Free Trial: The yearly subscription includes a 3-day free trial. You can cancel during the trial without charge through the App Store. After the trial, the subscription auto-renews unless canceled at least 24 hours before the renewal date.
• ✓Cancellation: You can manage or cancel your subscription in the App Store under your Apple ID settings. Upon cancellation, your subscription status will update to "inactive" and premium features will be disabled.
• ✓Restore Purchases: You can restore previous purchases via the "Restore Purchases" button in the App.

7. Data Security

We implement reasonable security measures to protect your information, including:

• ✓Firebase Security: Firebase Authentication and Firestore use industry-standard encryption and access controls. Our Firestore security rules enforce that users can only access data they are authorized to see.
• ✓Stripe Security: All payment data is handled by Stripe, which is PCI-DSS Level 1 certified — the highest level of payment security certification.
• ✓Firebase App Check: We use Firebase App Check to verify that requests to our backend come from legitimate app instances, helping prevent unauthorized access.
• ✓HTTPS Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
• ✓Minimal Data Collection: We collect only the data necessary to provide the Platform's functionality.

However, no method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

If we discover a security incident involving personal information, health-adjacent data, payment records, or other protected data, we will investigate and provide notices required by applicable law.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• ✓Access: Request a copy of the personal information we hold about you.
• ✓Correction: Request corrections to inaccurate or incomplete data.
• ✓Deletion: Request deletion of your personal information, subject to legal obligations (e.g., retaining transaction records for tax purposes). Note that deleting your account will cancel all active subscriptions.
• ✓Data Portability: Request a machine-readable copy of the data you have provided to us.
• ✓Opt-Out: Cancel subscriptions, disable push notifications, or delete your account to stop data collection.
• ✓Messaging: You may stop receiving transactional emails by closing your account. Platform messages from your trainer are part of the service and cannot be individually opted out of while subscribed.

To exercise these rights, contact us at [email protected]. We will respond to valid requests within 30 days. EU residents have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority. California residents have additional rights under CCPA, including the right to opt out of data sales (though we do not sell personal data).

9. Data Retention

• ✓Active Accounts: We retain your information for as long as your account is active or as needed to provide services.
• ✓Financial Records: Payment and payout records (e.g., Stripe transaction history) may be retained for up to 7 years to comply with tax and legal obligations.
• ✓Messages: In-platform messages are retained for the duration of the trainer-client relationship and for a reasonable period after, unless earlier deletion is requested.
• ✓Sales and Pilot Prospects: We generally retain inactive or closed Enterprise prospect records, qualification data, correspondence status, and internal workflow history for up to 24 months, unless a longer period is required by law or you request earlier deletion where applicable.
• ✓Account Deletion: You can request account deletion by contacting us. Upon deletion, we will remove your data from Firestore, cancel any active subscriptions, and — for trainers — process prorated refunds for active clients. Legally required records (e.g., transaction history) will be retained as described above.

10. Children's Privacy

The Platform is not intended for users under 13 years old (or 16 in the EU). We do not knowingly collect personal information from children. The trainer marketplace requires users to be at least 18 to purchase training plans unless verifiable parental or guardian consent is provided for ages 13-17. If we learn that a child's data has been collected without appropriate consent, we will delete it promptly. Contact us at [email protected] if you believe a child's data has been collected.

11. International Data Transfers

Your information may be processed in the United States, where our servers, Firebase infrastructure, and Stripe services are located. By using the Platform, you consent to the transfer of your data to the U.S., which may have different data protection laws than your country. We rely on Firebase's and Stripe's compliance with GDPR and other international data transfer frameworks (including Standard Contractual Clauses) for EU and international data transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. Material changes will be communicated via the App, the Dashboard, or email at least 30 days before taking effect. The updated policy will be posted with a new "Last Updated" date. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at:

• Email: [email protected]
• Address: Clevor, Ltd., 2020 N Academy Blvd, Ste 261 #2461, Colorado Springs, CO 80909

Thank you for using Spartn!