MapFit Pro Privacy Policy

Your privacy matters. Protect yourself with a secure VPN.
Sponsored

MapFit Pro — Privacy Policy

Last updated: May 16, 2026 Developer: Ahmed Moussa Contact: a7mdmosaa@gmail.com

MapFit Pro ("the App") is a fitness coaching app that connects clients with gym coaches. This policy explains what data we collect, why we collect it, who we share it with, and the rights you have over your data.

By using MapFit Pro you agree to this policy. If you do not agree, please do not use the App.


 

1. Who we are

MapFit Pro is operated by Ahmed Moussa as an independent developer. You can reach us at a7mdmosaa@gmail.com for any privacy-related question, complaint, or data request.


 

2. What we collect

We collect the following categories of personal data, all of which are required for the App to function. We do not collect data we do not need.

Account & identity

  • Phone number — used to create and sign in to your account (via SMS one-time code).
  • Name — shown to your coach and on your profile.
  • Email address — optional; used for account recovery and notices.
  • Profile photo — optional; shown to your coach and on your profile.
  • Role — whether you are a client or a coach.
  • Language preference, theme preference — to remember how you want the App to look.

Health and fitness data

This data is provided by you and is the core purpose of the App.

  • Body metrics — height, weight, age, gender, activity level.
  • Body measurements — chest, waist, arms, etc. when you log them.
  • Workout logs — exercises performed, sets, reps, weights used.
  • Nutrition / meal logs — meals you log, calories, macros.
  • Water and supplement logs — when you log them.
  • Progress photos — body photos you choose to upload.
  • Goals and milestones — fitness goals you set.
  • Form correction notes — feedback from your coach.

Communication data

  • Chat messages between you and your coach, including text, voice notes, images, and file attachments.
  • Broadcast messages from your coach.

Coach-authored data (about clients)

If you are a coach, data you create about clients is stored: coaching notes, tasks assigned, medical notes, attendance records, weekly check-in responses, and program assignments.

Technical data

  • Device push notification token (Firebase Cloud Messaging) — to deliver notifications to your device.
  • App version, OS version, device model — included automatically in crash reports.
  • Anonymous crash reports (via Firebase Crashlytics) — stack traces and device info when the App crashes, with no personally identifying information.

What we do not collect

  • We do not collect your precise location.
  • We do not collect contacts, calendar, microphone (except when you record a voice note), or camera (except when you choose to take a photo).
  • We do not use advertising identifiers or run ads.
  • We do not use AI to analyze your data.
  • We do not collect financial or payment information — MapFit Pro is free and contains no in-app purchases.


 

3. How we use your data

We use your data only to operate the App:

  • Authenticate you and keep your session secure.
  • Show your data to you and to your coach (and vice versa).
  • Send push notifications (new messages, reminders, broadcasts).
  • Sync your data across your devices.
  • Diagnose and fix bugs (via crash reports).
  • Protect the App from abuse (via Firebase App Check).

We do not use your data for advertising, profiling, or sale to third parties.


 

4. Who we share it with

Your data is shared only with:

Your coach (or your clients, if you are a coach)

The whole point of MapFit Pro is the coach–client relationship. Your coach can see your profile, your logs, your photos, your messages, and your progress. If you are a coach, your clients can see your name, photo, and the programs/messages you send them.

Google / Firebase (our backend provider)

We use Google Firebase for all backend services. Firebase processes data on Google-operated servers and is bound by Google's privacy commitments. Specifically we use:

ServicePurpose
Firebase AuthenticationPhone-number sign-in
Cloud FirestoreStoring profile, logs, messages, etc.
Firebase StorageStoring photos, voice notes, file attachments
Firebase Cloud MessagingSending push notifications
Firebase CrashlyticsAnonymous crash reporting
Firebase App CheckBlocking abusive non-app requests
Firebase Remote ConfigServer-controlled app configuration

Firebase's privacy practices are described at firebase.google.com/support/privacy.

Nobody else

We do not sell, rent, or share your data with any other third party. We do not work with ad networks, data brokers, or analytics providers beyond what is listed above.


 

5. Where your data is stored

Your data is stored on Google's Firebase infrastructure. Firebase processes data globally and may transfer data across borders, including to the United States, in accordance with Google's standard contractual clauses. By using the App, you consent to this transfer.

A copy of certain data (workout logs, profile, recent messages) is also cached on your device so the App works offline. This local cache is deleted when you uninstall the App or delete your account.


 

6. How long we keep it

We keep your data for as long as your account exists. When you delete your account, your data is removed as described in Section 7.

Firebase backups may retain data for up to 30 additional days as part of standard Google backup procedures, after which it is permanently deleted.


 

7. Your rights — how to delete your account

You have the following rights over your data:

  • Access — view all your data inside the App.
  • Correction — edit your profile and logs inside the App.
  • Deletion — see below.
  • Withdraw consent — by deleting your account.

Deleting your account (in-app)

Open the App → Profile tab → tap Delete Account → confirm. You will be asked to re-verify your phone number for security. After confirmation:

If you are a client: your profile, all logs (workouts, meals, weight, measurements, water, strength), all progress photos, all goals, all chat messages you sent, your medical notes, your nutrition plan history, your weekly check-ins, your attendance records, and your form feedback are permanently deleted.

If you are a coach: your authored content (programs, plans, notes you wrote, messages you sent) is kept so the clients who depend on it are not orphaned. Your profile is anonymized — your name becomes "Mapfit Coach" and your phone, email, and photo are cleared.

In both cases your Firebase authentication account is deleted and you can no longer sign in.

Deleting your account (without app access)

If you cannot access the App, email a7mdmosaa@gmail.com from the phone number on your account. We will process the request within 30 days.


 

8. Children

MapFit Pro is not intended for users under 13 (or under 16 in the European Economic Area). We do not knowingly collect data from children. If you believe a child has provided us data, email a7mdmosaa@gmail.com and we will delete it.


 

9. Security

We protect your data with the following measures:

  • All traffic between the App and our backend is encrypted in transit (TLS 1.2+).
  • Firebase enforces row-level security rules so users can only read data they are authorized to see.
  • Firebase App Check rejects requests that do not come from the genuine App.
  • Sensitive operations (account deletion) require phone re-verification.
  • We do not store payment information because the App is free.

No system is perfectly secure. If we detect a breach affecting your data, we will notify you within 72 hours where required by law.


 

10. Changes to this policy

We may update this policy as the App evolves. The "Last updated" date at the top will change. Material changes will be communicated via an in-app notice. Continued use of the App after a change means you accept the updated policy.


 

11. Contact

For any privacy question, data request, or complaint:

Email: a7mdmosaa@gmail.com

If you are in the European Union and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.