Privacy policy

What FitX collects when you use the app, this website or the waitlist, why we need it, who helps us handle it, and how you can see, change or delete it.

Last updated: October 14, 2026

Who we are

FitX is a workout app for lifters and their coaches, on iPhone and Android, and this website at fitxapp.net. Both are run by Sakar HamaSaeed HamaSalid, an independent developer in Erbil, Iraq, under the name FitX ("FitX", "we", "us").

We decide how your personal data is used, and we answer for it. To ask about anything in this policy, email support@fitxapp.net.

What we collect

We collect only what the app needs to work. Most of it you type in yourself.

Your account

Your phone number, which is how you sign in, and earlier numbers if you change it.
Your password, stored only as a one-way hash.
Your username and full name, and a profile photo address if you set one.
Profile details you choose to give: city, gym, where you train, gender, date of birth, height, weight, fitness goal, activity level, and how you heard about FitX.
Whether you use FitX as a lifter, a coach or both.
Your subscription status and plan, and when it renews.
Your progress in the app, such as level, points and streaks.

Your workouts

The sessions you log: exercises, sets, reps and weights.
The programs you build or follow.
If you coach or are coached: the link between coach and client, and the programs and messages shared between you.

Your device

A push notification token, if you allow notifications.
Your IP address, which our servers see with every request. We use it to protect sign-in from abuse, and it is kept in our server logs.
Crash and performance reports, described under Crash reports and performance.

We do not collect your location, contacts, photos, health records from other apps, or payment card details. Apple and Google handle payments and never share your card with us.

How we use it

To create your account, sign you in and keep it secure.
To save, show and sync your workouts and programs.
To connect coaches and clients, and show each what the other shares.
To give you the paid features you bought and check that a subscription is active.
To send the notifications you allowed.
To find and fix crashes and slow screens.
To answer you when you contact us.
To meet legal duties and to protect FitX and its users from abuse.

We do not sell your data, we show no ads, and we do not use your data to profile you for anyone else.

When you sign in or change your phone number, we send a one-time code to that number through OTPIQ, a messaging provider. The app sends it by WhatsApp first and by SMS if WhatsApp cannot deliver it. OTPIQ receives your phone number and the code, and nothing else about you.

Codes expire after 5 minutes and are then deleted automatically.

Notifications

If you allow notifications, your phone gives the app a token that Apple (on iPhone) or Google Firebase Cloud Messaging (on Android) uses to deliver them. We store that token with your account and use it only to send FitX notifications. You can turn notifications off at any time in your phone settings.

Crash reports and performance

The app uses Sentry to report crashes and to measure how fast screens and requests are, on a sample of sessions. A report holds technical details: the error, your device model and system version, the app version, and a request number that lets us find the matching server error. Sentry is set up not to collect personal details such as your name or phone number.

Our own servers keep technical logs and measurements, such as how long a request took, whether it failed and the IP address it came from, on systems we run ourselves. Phone numbers are masked (only the country code and last 2 digits are kept) and sign-in secrets removed before they are stored.

The app has no advertising and no third-party analytics tools.

This website

fitxapp.net sets no cookies of its own and runs no analytics or advertising. It runs on our own server, which sees your IP address and browser details when it delivers pages and handles the waitlist.

The waitlist

If you join the waitlist on this site, we keep:

Your email address, or your WhatsApp number when that option is offered.
Whether you confirmed it with the code, and when.
Your answers to "What brings you to FitX?", including any text you wrote under Other.
The language you used, and the date you signed up.
For WhatsApp, your consent to receive one message at launch.
A keyed one-way hash of your browser details. To limit how many codes can be requested, we also keep a keyed one-way hash of your IP address, and a count of the codes sent to your contact and of wrong guesses.

We save your entry as soon as you submit the form, before you enter the code, so it is kept even if you never confirm it. Only confirmed contacts get the launch message.

Codes for email are sent from our own mailbox, noreply@fitxapp.net, through Purelymail, our email provider. Codes for WhatsApp, when that option is offered, are sent through OTPIQ by WhatsApp only. Each provider receives your contact and the code to deliver it. Codes stop working after 5 minutes and are stored only as a one-way hash. They are deleted when you confirm, or otherwise with the rest of the waitlist.

We use the waitlist for two things only: to tell you when FitX launches, and to understand who is interested. We do not use it for anything else and do not share it with anyone else.

To leave the waitlist, see Leave the waitlist or email us, and we delete your entry. Otherwise we delete the whole waitlist 90 days after launch.

We share personal data only with providers that help us run FitX, and only what each needs for its job:

OTPIQ: delivers sign-in codes, and waitlist codes by WhatsApp.
Purelymail: delivers waitlist codes by email.
Sentry: crash and performance reports.
Apple and Google: push notifications, and in-app purchases, which they process under their own privacy policies.

Each provider is bound to use the data only for us and to protect it at least as well as this policy does. Some of them process data outside your country.

Within FitX, a coach sees what a client shares with them, and a client sees what their coach shares. We may also disclose data when the law requires it, or to protect someone from harm.

How long we keep it

Account and workout data: while your account is open, then as described under Deleting your account.
App sign-in codes: 5 minutes, then deleted automatically.
Waitlist codes, and the records that limit code requests (a count per contact and a hash of your IP address): deleted with the waitlist, no later than 90 days after launch. The codes themselves stop working after 5 minutes.
Crash reports: as long as Sentry keeps them under our plan, then deleted automatically.
Waitlist entries: until you ask us to remove them, and no later than 90 days after launch.

We keep something longer only when the law requires it, for example records of a legal claim, and we tell you if that applies to you.

Deleting your account

You can delete your account in the app: Settings, then Account, then Delete account. Your account closes at once: your profile is hidden and any coaching you are part of ends.

If you do not sign in again within 60 days, your account and everything in it (profile, programs, sessions, progress and messages) are deleted for good, including from our providers. Signing in before then brings it back, except the coaching.

No app? Ask us on the support page or by email, with the phone number on your account. We confirm with you before deleting anything.

Deleting your account does not cancel a subscription: Apple or Google bills it, so cancel it in your store settings first. Apple and Google keep their own records of your purchases.

Your choices and rights

You can, at any time:

See and correct your profile in the app.
Ask us for a copy of the personal data we hold about you.
Ask us to correct or delete it, or to stop using it.
Turn off notifications in your phone settings.
Leave the waitlist.
Delete your account.

Email support@fitxapp.net and we answer within 30 days. We may ask you to prove the account or contact is yours before we act. You can also complain to the data protection authority where you live.

Security

Everything between the app, this site and our servers travels encrypted (HTTPS). Passwords and waitlist codes are stored only as one-way hashes, app sign-in codes are deleted automatically once they expire, and in our logs phone numbers are masked and sign-in secrets removed.

No system is perfectly secure. If a breach puts your data at risk, we tell you and the authorities as the law requires.

Children

FitX is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us data, email us and we delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters to how we use your data, we tell you in the app or by message before it takes effect.

Contact

FitX, run by Sakar HamaSaeed HamaSalid
Erbil, Iraq
Email: support@fitxapp.net