Last updated: September 19, 2026
Spyke is a workout tracking app published by Vincent Duong (independent developer). This policy describes what data is collected when you use Spyke, why, and what your rights are. Questions: spyke.training@gmail.com.
When you create your account, depending on the sign-in service you choose:
When your online backup runs:
Body weight and training history are wellness data. By creating your account, you consent to their inclusion in your online backup. You can withdraw this consent at any time by deleting your account.
When cloud video backup is active (enabled by default, can be turned off in Settings → Videos):
When the app runs into an error (crash, display error or failed operation):
When you open the app, after onboarding for new users, we ask you to accept or decline usage analytics with PostHog if you have not yet answered on this device. Accepting means declaring that you are at least 18 and explicitly consenting to this measurement. Your choice is saved and remains editable in Settings → Application → Improve Spyke. All features remain available without accepting. PostHog collection only starts after your choice has been recorded on our server.
Events measure app openings, workout starts and endings, program creation and changes, video recordings and imports, export outcomes, opening the share sheet, and backup success or failure. They include technical workout, video, program or attempt identifiers, outcome categories and a few counts. Events are linked to your Spyke account identifier, action time, app version and operating system (iOS or Android). They are not anonymous. Even without performance details, workout events may reveal information about your physical activity.
We do not send names, email addresses, body weight, lifted weight, repetitions, exercise names, notes, media, file paths or raw error messages to PostHog. Screen recording, automatic interaction capture, IP geolocation, advertising and cross-app tracking are disabled. Your IP address is still necessary for network transport and may appear in the provider’s technical logs, even though we do not retain it as an event property.
Consent applies to this device and is not restored from a backup. Withdrawal immediately stops collection on this device, clears pending events and is sent to our server as soon as possible. Other devices check this state at their next launch or foreground return with connectivity. Withdrawal stops new collection but does not automatically erase events already received. You can request erasure at spyke.training@gmail.com or delete your account.
PostHog processes these events on our behalf through its Cloud Europe service to understand usage and improve Spyke’s reliability. Processing relies on your consent, including for information about physical activity revealed by these events. Providers and their subprocessors may operate outside your country, including in the United States; applicable transfers must be covered by contractual safeguards, including standard contractual clauses where required.
The publisher consults aggregated reports about activity, retention, feature use and operational reliability, including through the official PostHog connector for its analytics assistant. This does not change your choice or authorize additional collection. These reports cover only people who accepted analytics; they do not represent all app downloads.
Account data, backups, the online copies of your videos and error reports are hosted by Supabase, in the European Union (AWS Frankfurt region, eu-central-1). Data is encrypted in transit (TLS) and at rest. Supabase acts as a processor and does not use your data for its own purposes. As with any online service, technical logs (including IP addresses) are processed temporarily by the host for the security and proper operation of the service.
Subscription management relies on RevenueCat, which also acts as a processor. It processes your Spyke account identifier and your subscription status (plan, start and end dates, ongoing trial, promotional code if any). No workout data, no video, no photo and no wellness data is sent to it. Your payment method is never accessible: payment is handled solely by the app store you subscribe through.
Your account data, backups, the online copies of your videos and error reports are kept as long as your account is active. A video copy you remove is deleted immediately. When you delete your account (Settings → Account → Delete account), your account, all your online backups, the copies of your videos and your error reports are permanently deleted. Locally stored data remains on your device, under your control.
Events already received by PostHog are retained until erasure is requested or your account is deleted, subject to the retention rules applied by PostHog. Its free plan provides a one-year query window; that window and its application to the project do not guarantee automatic physical deletion after 12 months. We therefore do not promise this as a maximum storage duration. Withdrawing consent stops new measurements; to erase events already received, contact us or delete your account.
Consent receipts are kept while your account exists. Account deletion also schedules PostHog erasure: this runs asynchronously and retries after outages without blocking account deletion. Only identifiers needed to process and verify this request remain in a tracking queue until processing finishes, then for up to 90 days when the account has been deleted. For an erasure request without account deletion, a marker is retained while the account exists to prevent collection from being reactivated unintentionally.
Under the GDPR, you have the right to access, rectify, erase, port, restrict and object to the processing of your data, as well as the right to withdraw your consent at any time.
Age and parental authorization requirements for creating an account depend on your country. France’s age threshold of 15 is not a worldwide rule. PostHog usage analytics is restricted to people declaring they are at least 18; do not enable it if you are a minor. This choice does not restrict app features or replace the rules applicable to account creation.
This policy may evolve along with the app (for instance if new online features are added). The last update date appears at the top of this document, and notable changes will be announced in the app.
Vincent Duong, spyke.training@gmail.com