Your information, explained.

Last updated 6 September 2026

Spotta helps people find and contact independent personal trainers. This policy explains how information is used when you browse, apply, send an enquiry, review a trainer or report a concern. Contact us at spottaaustralia@gmail.com with privacy questions.

1. What we collect

• Trainer applications and profiles: name, email, optional phone, photos, suburb, service area, qualifications, coaching details, prices and requested inclusion tags. We also keep application decisions, account associations and relevant admin notes.
• Enquiries: your name, email, optional phone, message, the chosen trainer, submission time and the trainer’s response status.
• Reviews: a rating, optional comment, date and a link to the accepted enquiry. Review invitations are associated with the client’s email.
• Reports and support: the contact details and information you supply, along with records needed to investigate or respond.
• Account and technical information: sign-in records, session information, service events and error or delivery logs. Infrastructure providers may process IP addresses, browser details and request metadata to deliver and protect their services.

Information about health, disability or sexual orientation can be sensitive. Inclusion-tag requests are optional and, if approved, the corresponding tag is public. Only request an identity-related tag you want displayed. Please don’t include medical histories, identification documents or someone else’s sensitive information in public content or initial enquiries.

2. Why we use it

We use information to review applications, maintain profiles, provide sign-in, deliver enquiries and service emails, manage reviews, respond to reports and support requests, and prevent abuse. We keep relevant moderation and ban records to help identify repeat misuse. A trainer may contact you outside Spotta using the details in your enquiry.

3. What is public

An approved profile can show the trainer’s name, photos, suburb and service area, bio, headline, coaching information, qualifications, starting price, approved tags and published reviews. Public pages can be shared and may be indexed or copied by search engines and other people.

Review ratings and comments are public; the client’s email and phone are not shown with the review. Do not put contact details or sensitive information in a comment or public profile field.

Profile images use public storage links. Someone with an image link may be able to view it even before approval or after a profile is removed from search. Only upload images intended for public use, with permission from anyone pictured. Contact us if an image needs to be removed; copies already saved elsewhere may remain.

4. Who can receive information

Your selected trainer receives your enquiry details. Authorised Spotta administrators can access information needed to review applications, support users, manage enquiries and investigate concerns. Reports are not published, but relevant details may need to be shared with affected people, advisers or authorities when investigating a matter or when legally required. We cannot promise absolute confidentiality.

Supabase provides the database, authentication and image storage. Resend delivers transactional emails, which may include enquiry details and private action links. Hosting and infrastructure providers deliver the website and process technical requests. The site also loads fonts from Google Fonts, which involves a request from your browser to Google.

These providers may process information outside Australia. The locations involved depend on the service and account configuration. Contact us for current information about providers and overseas processing. A trainer’s subsequent handling of your information is separate from Spotta; ask them about their own privacy practices.

5. Sign-in, storage and security

Trainer and admin sign-in uses Supabase Auth. The site stores session information in the browser to keep you signed in. Sign out on shared devices and do not forward sign-in or review links. Clients do not need a Spotta account.

Access controls separate public profiles from private records, and administrative actions require authorisation. No online service can guarantee absolute security. If you think your account or information has been compromised, contact us promptly.

6. How long information stays

Information may be retained while needed to operate the service, handle enquiries or disputes, investigate reports, prevent repeat abuse or meet legal obligations. Disabling or banning a profile hides its listing; it does not automatically delete its account, enquiries or moderation history. Removal from active systems may not immediately remove copies in backups or provider logs.

7. Access, corrections and removal requests

Email spottaaustralia@gmail.com to request access, correction, removal of a public tag or image, or deletion of your information. Tell us which profile or interaction is involved without sending sensitive identity documents in your initial message. We may need to confirm your identity before releasing or changing records. If information must be retained, we will explain why.

8. Privacy concerns and changes

Send privacy complaints to the same email address with a description of your concern. We will review the issue and respond using your contact details. If you are not satisfied, the Office of the Australian Information Commissioner provides information about complaint options and whether it can help.

We may update this policy as Spotta changes. The date above identifies this version.