PerFIT
This document has four parts. We recommend reading all of it before using the app — especially the health and safety warning in section 1.
Contents
PerFIT is not a medical device and does not give medical advice. Nothing in the app — including workout suggestions, progress analyses, estimated strength calculations, muscle distribution charts, reminders and reports — replaces the examination, diagnosis or treatment of a physician, physiotherapist, dietitian or other qualified health professional.
Exercise carries a risk of injury. Weight training can lead to muscle, tendon, ligament and joint injuries, cardiovascular events and other health problems. This risk exists whether or not you use the app.
See a doctor before you start training. This is essential if you have a chronic condition, a past injury or cardiovascular disease, if you are pregnant, if you take medication or if you have been inactive for a long time.
You exercise at your own risk. The weight, rep, set and rest suggestions the app shows are statistical estimates derived from your past records; the app cannot know what you are able to lift on a given day. If you feel pain, dizziness, chest tightness, shortness of breath or any unusual symptom, stop immediately and get medical help.
Suggestions are rule-based. Smart Program adjustments, Monthly Report comments and Body Tracking comparisons are rule-based suggestions, not medical advice or a diagnosis. If you have an injury, pain or any other health problem, see a doctor.
During first-time setup, PerFIT asks you a question about your injury history. Your answer is used only to personalize the content the app shows you. This is not a health assessment. PerFIT does not diagnose your injury, evaluate your recovery, offer a rehabilitation program, or determine whether an exercise is safe for your injury.
You can leave this question blank; the app still works.
To the fullest extent permitted by applicable law, no liability is accepted for any injury, health problem or harm that arises during or as a result of using PerFIT. By using the app you acknowledge that you know this risk and that you exercise voluntarily and at your own responsibility.
This limitation applies subject to the mandatory provisions of the Turkish Code of Obligations; cases of liability that cannot be limited in advance by law are not limited by this text.
This part explains who processes your personal data, which data, why, on what legal basis, who receives it and what rights you have. It is written to meet both Law No. 6698 on the Protection of Personal Data ("KVKK"), the data protection law of Türkiye, where the data controller is based, and the General Data Protection Regulation of the European Union ("GDPR"), which applies to users in the European Economic Area. It applies to everyone who uses PerFIT, wherever they live.
| Data controller | Erencem Öztürk (individual) |
|---|---|
| Address | Ankara, Türkiye |
| support@itsperfit.app |
Write to this address for every question about your personal data and for every request described in 2.8.
| Category | Data | Source |
|---|---|---|
| Identity and contact | Name/display name, email address, public and searchable @username | Information you enter; from the provider if you sign in with Google or Apple |
| Profile and body measurements | Gender, age, height, weight, experience level, goal, weekly training days, injury declaration | Setup questionnaire and profile screen — all of it is optional |
| Profile photo | The image you choose | You optionally choose it on the profile screen |
| Workout photo | The photo you choose to add to a workout (with EXIF metadata, including location, removed) | You optionally add it at the end of a workout |
| Body Tracking data and photo | The weight and body measurements you enter in Body Tracking, and the photo you choose to add (with EXIF metadata, including location, removed) | You optionally add them in Body Tracking, after giving your separate explicit consent |
| Workout data | Exercises, set/rep/weight records, workout duration and date, personal records, programs | You record it while using the app |
| Connection data | Friend requests, accepted connections, coach connections and block records | Actions by you and by the other party |
| My Circle and reports | Friend feed, "Power Up" record (who, to whom, when), reporting and reported accounts, context, reason and a description of up to 500 characters | Actions by you and other users; only PerFIT reviews a report |
| Technical and diagnostic | Device model, operating system version, app version, error and crash logs | Collected automatically |
| Usage data | The screens you view and the time you spend on them, the buttons you tap, how many times the app is opened; summary numbers such as workout duration and set count; linked to your account if you are signed in. The weights you lift, your body measurements, injury and other health-declaration values, photos, plan names and the text you type are not sent. | Enabled by default; a saved off choice remains off. Accepting the Privacy Policy or Terms does not change this preference. You can turn it off or on at any time on the Privacy and Terms screen. Turning it off stops collection and resets the analytics data on your device; turning it off restricts no feature |
| Notification data | Your device's notification token and device type, your notification preferences (Social Notifications, Offers and deals). A notification sent to you includes the display name of the person who performed the action and, if any, the name of the plan they sent. | Created automatically when you grant notification permission; you choose the preferences |
Device access and text entered in the app: PerFIT does not access your precise/GPS location, device contacts, call logs, or the contents of your SMS or email inboxes. When Google Analytics is on, approximate geography derived from the IP address may be processed. To deliver personal notifications at local times, the operating system's IANA time-zone identifier is written to the device record with the notification token. Text you enter in coach comments and plan offers is sent to Firebase to provide those features and can be seen by the relevant users. Today the app shows no ads, collects no advertising ID and shares no personal data with anyone for advertising (details: 2.4, “Advertising and partnerships”).
Photos: Your profile photo is stored on our
servers so that it can appear on your other devices along with your account;
it is visible to the friends you have accepted and to your connected coach.
Exercise images you add yourself stay only in your device's
storage and are not uploaded to our servers.
Your workout and Body Tracking photos: We access your camera and photos only when you choose to add a photo to a workout or to Body Tracking. The photo you add stays in your device's storage, attached to that workout or Body Tracking entry; if you are signed in to an account and “Photo Backup” in Settings is on (it is on by default), it is also backed up to your account, so it comes back if you change phones. The backup is stored encrypted on Google Cloud (Firebase Storage) servers in the EU (europe-west1 region); only you can access it, your friends, your coach and other users cannot see these photos, and the photo is not shared with anyone; photo comparisons in Body Tracking are made only on your device. Before upload, all EXIF metadata in the photo, including location, is removed. You can turn backup off in Settings at any time; turning it off stops new uploads but does not delete the photos already in the cloud — you can delete those separately with “Delete Cloud Photos”. When you delete the photo, the workout or the Body Tracking entry, its backed-up cloud copy is deleted when the deletion is successfully synced; the server-side technical record marking the photo as deleted follows the retention schedule in section 2.6. When you delete your account, all of your photo backups are deleted. If you use the app without an account (guest mode), the photo stays only on your device; it starts being backed up once you create an account and move your workouts to it. If your phone's own backup is turned on (iCloud or Google backup), the photo may also be included in that backup. When you send a
share card to Instagram or another app yourself, that image is subject to the
terms of the app you send it to.
Username: your @username is public and searchable. Reserved names and offensive words are filtered on the server; you can change it once in the first 24 hours and then once every 30 days. A released name stays in quarantine for 30 days, during which only its previous owner can reclaim it. Internal links rely on your permanent account ID, not on your username.
My Circle: The friends you accept can see your profile photo, your workout count this month, your last workout time, your personal records and the weights in those records, your completed workouts and the posts that enter the friend feed. When a friend uses "Power Up" on a record, who reacted to whom is recorded. Social interaction with an account you block stops. Other users cannot read report records; only PerFIT reviews them. My Circle and coach connections may require your email address to be verified; an account whose email is not verified cannot search for people, send requests or connect with a coach. People search runs on the server; the user directory cannot be listed from the app.
Your connected coach can see your workout history, sets, reps, the weights you use and your body weight; they can send you plans and comment on your workouts. Your body weight is shared only if you have given health-data consent and you approve the coach connection on the "PerFIT coach connection" screen (button "Approve Sharing and Accept"), which lists the data to be shared. Your injury information is never shared with coaches. This access ends when you remove the coach connection.
For each purpose the table names the legal basis under KVKK and under the GDPR.
| Purpose | Legal basis (KVKK art. 5) | Legal basis (GDPR art. 6 and 9) |
|---|---|---|
| Creating and managing your account, letting you sign in | Necessary for the establishment and performance of a contract (art. 5/2-c) | Performance of a contract (art. 6(1)(b)) |
| Storing your workout records and syncing them between your devices | Necessary for the performance of a contract (art. 5/2-c) | Performance of a contract (art. 6(1)(b)) |
| Producing progress analyses, personal records, reports and suggestions | Performance of a contract (art. 5/2-c) and legitimate interest (art. 5/2-f) | Performance of a contract (art. 6(1)(b)) and legitimate interest (art. 6(1)(f)) |
| Personalizing content with injury, height and weight data; sharing your body weight with a coach you approve | Your separate explicit consent (KVKK art. 6) — these fields are optional, you can leave them blank | Your explicit consent (art. 9(2)(a) and 6(1)(a)) — these fields are optional, you can leave them blank |
| Saving your weight, body measurements and body photos in Body Tracking and backing them up to your account | Your separate explicit consent (KVKK art. 6) — asked separately before the first entry; withdraw under Settings → Privacy → “Body Tracking Consent” | Your explicit consent (art. 9(2)(a) and 6(1)(a)) — asked separately before the first entry; withdraw under Settings → Privacy → “Body Tracking Consent” |
| Establishing friend connections and sharing progress | Your explicit consent — you are the one who sends and accepts the connection request | Your consent (art. 6(1)(a)) — you are the one who sends and accepts the connection request |
| Notifications about friend requests, accepted requests and plans sent to you | Performance of a contract (art. 5/2-c) — you can turn it off with the "Social Notifications" switch in Settings | Performance of a contract (art. 6(1)(b)) — you can turn it off with the "Social Notifications" switch in Settings |
| Delivering announcements of new features and important changes by notification | Legitimate interest (art. 5/2-f) | Legitimate interest (art. 6(1)(f)) |
| Delivering campaigns, discounts and partnership offers by notification | Your explicit consent — only if you turn on the "Offers and deals" switch in Settings; you can turn it off at any time | Your consent (art. 6(1)(a)) — only if you turn on the "Offers and deals" switch in Settings; you can turn it off at any time |
| Detecting errors, keeping the app secure and improving it | Legitimate interest (art. 5/2-f) | Legitimate interest (art. 6(1)(f)) |
| Providing a paid membership that you buy | Performance of a contract (art. 5/2-c) | Performance of a contract (art. 6(1)(b)) |
| Fulfilling legal obligations and responding to requests | Legal obligation (art. 5/2-ç), establishment, exercise or protection of a right (art. 5/2-e) | Legal obligation (art. 6(1)(c)); establishment, exercise or defence of legal claims (art. 6(1)(f)) |
Where we rely on legitimate interest, our interest is to run, secure and improve the app; you can object to this processing at any time (see 2.8). Where we rely on consent, you can withdraw it at any time; withdrawing does not affect the processing that took place before.
About health data. Entering your injury, height and weight information is optional. By entering it you give your separate explicit consent (KVKK art. 6; GDPR art. 9(2)(a)) for (a) personalizing the content and (b) sharing your body weight with a coach whose connection you approve on the "PerFIT coach connection" screen (button "Approve Sharing and Accept"), which lists the data to be shared. The purpose is to flag, when you choose exercises and during a workout, movements that could strain the relevant area, and to help your coach guide you. You can use the app without this information. When you withdraw your consent in Settings, this information is deleted and sharing with your coach stops. Your injury information is never shared with coaches. Body Tracking (weight, body measurements and body photos) has its own separate explicit consent (KVKK art. 6; GDPR art. 9(2)(a)), asked before your first entry; if you decline, nothing is saved and every other feature of the app keeps working. You can withdraw this consent any time under Settings → Privacy → “Body Tracking Consent”; when you do, your Body Tracking data is deleted from this device and your account (including backed-up photos), and from your other devices when they sync. If you are offline, the deletion in your account is retried the next time this device syncs while you are signed in to that account, and may be delayed until then. This consent is separate from, and does not affect, the injury, height and weight consent above. The latest weight you enter in Body Tracking also updates your profile weight; when you withdraw Body Tracking consent this value is deleted too, unless you have given the injury, height and weight consent, in which case it stays under that consent.
We do not sell your personal data. Your personal data is processed on the infrastructure of the following service providers so that the app can work. They act on our behalf under their data processing terms, except the app stores, which act for themselves:
| Provider | Service | Data transferred |
|---|---|---|
| Google (Firebase) | Authentication, database and sync (Cloud Firestore, Cloud Functions), photo storage (Cloud Storage), error reporting (Crashlytics), device and app verification (App Check), usage measurement (Google Analytics; on by default unless you turn it off in Privacy and Terms), sending notifications (Firebase Cloud Messaging) | Account data, workout data, profile data, technical and diagnostic data, usage data, notification data, workout and Body Tracking photos |
| Google (Sign-In) and Apple (Sign in with Apple) | Optional sign-in with your Google or Apple account | Authentication data and the name and email address your provider shares with us |
| Apple App Store and Google Play | Distribution of the app and processing of your purchase and payment | Purchase and payment data stay with the store, which handles them as an independent controller under its own privacy notice; we do not receive your payment card details |
| RevenueCat, Inc. (USA) | Verifying and syncing your subscription status | Your PerFIT account ID (pseudonymous; before sign-in, a random anonymous ID), store transaction/receipt data and subscription status; your email address is not sent to RevenueCat |
Exercise videos. The "How to do it?" videos are not hosted in the app; they are shown with the embedded player of third-party video platforms (YouTube or Vimeo). When you open a video, or when a cover image loads in the library, your device's IP address and device and browser information are sent to that platform; the platform applies its own cookie and privacy policy. PerFIT does not receive this data. Which platform is used is stated under the video in a line such as "Plays via YouTube". You can use the app without opening videos. For YouTube, see the Google Privacy Policy: policies.google.com/privacy
Advertising and partnerships. Today the app shows no ads and no personal data is shared with third parties for advertising or marketing. If we start showing ads or working with partners in the future, we will update this text beforehand and notify you in the app. Transferring your personal data to third parties for advertising or marketing would rely only on your separate explicit consent; you can withdraw it at any time. Your injury information is never used or shared for advertising or marketing under any circumstances.
Other disclosures. We disclose personal data to public authorities or courts only where the law requires it or where it is necessary to establish, exercise or defend a legal claim.
Google Firebase is our service provider. The Firestore database runs in the
EU region eur3, and Cloud Functions run in the
europe-west1 region. Workout photo backups are also stored in the EU, in the europe-west1 region (Cloud Storage). Other Firebase services such as authentication,
analytics (on by default unless you turn it off in Privacy and Terms) and notifications may also process data; we do not claim that all
processing is limited to these regions. Transfers outside Türkiye rely, under KVKK art. 9, on the
standard contractual clauses and additional technical and organizational
safeguards in Google's data processing terms. You can also review Google's
Firebase Data Processing and Security Terms.
RevenueCat, which verifies your subscription status, is located in the United States. For users in Türkiye, the mechanism we plan to use under KVKK art. 9 (the standard contract published by Türkiye's Personal Data Protection Board) has not yet been completed; it is being arranged, and we do not claim that EU standard contractual clauses satisfy KVKK. For users in the EEA, this transfer relies on the standard contractual clauses in RevenueCat's data processing agreement. You can also review RevenueCat's privacy policy and data processing agreement (DPA).
If you use PerFIT from the European Economic Area, your data is processed by us in Türkiye and by providers that may be located in the United States and other countries outside the EEA. For such transfers, Chapter V of the GDPR applies; we rely on the safeguards it provides for, in particular the standard contractual clauses contained in Google's data processing terms (for Google) and in RevenueCat's data processing agreement (for RevenueCat). You can ask us for information about the safeguards at the address in 2.1.
Using the app with an account requires a Firebase transfer; if you do not want that, you can use guest mode. Workout and profile records you save in this mode are not synced to a PerFIT account. When usage measurement is on, summary events such as workout duration and set count may be processed without a Firebase user ID, together with Analytics installation/device identifiers and approximate geography derived from the IP address. Depending on notification settings, an FCM notification token and error and crash logs may also be sent. RevenueCat uses a random anonymous identifier to check subscription status. These technical identifiers are not your name or email address, but that does not mean the data is linked to no identifier.
You can delete your account from inside the app: Profile → Settings → Delete Account. Deletion cannot be undone.
For step-by-step instructions, the email route if you cannot access the app, and the full list of deleted and retained data: Deleting your account and data.
Your data is encrypted in transit (TLS). Server-side access is restricted by rules that let you reach only your own data. The people you connect with as friends can see the summaries described in 2.2, the weights in your records and your completed workouts. The content of reports is closed to other users. The app performs device/app verification with Firebase App Check. For search by email, a digest derived from the email may be kept in the directory; when your directory entry is removed, this digest is deleted too.
No system can provide absolute security; we take reasonable, industry-accepted measures.
Under article 11 of KVKK, you have the right to learn whether your personal data is processed; to request information if it has been processed; to learn the purpose of processing and whether it is used in line with that purpose; to know the third parties to whom it is transferred in Türkiye or abroad; to request correction if it is incomplete or inaccurate; to request its deletion or destruction; to request that these actions be notified to the third parties to whom the data has been transferred; to object to a result against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage because of unlawful processing.
Under the GDPR, you also have the following rights:
How to use your rights. You can delete your account and your data inside the app (Profile → Settings → Delete Account) and withdraw your health-data consent and notification choices in Settings. For every other request, send an email to support@itsperfit.app. We may need to verify your identity first. We answer your request within 30 days at the latest (the period set by the Communiqué on the Procedures and Principles of Application to the Data Controller under KVKK and, under the GDPR, one month, which can be extended in complex cases, in which case we tell you). Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.
If you think we process your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. If you live or work in the European Union or the European Economic Area, or the alleged infringement took place there, you can complain to the data protection authority of your country of residence, your place of work or the place of the alleged infringement (GDPR art. 77). In Türkiye, the authority is the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, KVK Kurulu). We would appreciate the chance to resolve your concern first, so please feel free to contact us beforehand.
PerFIT accounts are for people aged 16 and over; people under 16 cannot open an account. Countries set different ages from which a child can consent to an online service on their own (between 13 and 16 under the GDPR); we apply the age of 16 to everyone. In guest mode, workout data does not leave the device. If you think a child has opened an account, contact us at support@itsperfit.app.
This text may be updated. When there is a material change, you are informed inside the app. The "last updated" date at the top of the page always shows the version in force.
PerFIT is a mobile app that lets you keep strength training records, track your progress and see performance analyses. By downloading and using the app, you accept these terms.
You can use the app without an account, in guest mode; in this mode your data is kept only on your device and is not synced between devices. When you create an account, you are responsible for the accuracy of the information you provide and for the security of your account. My Circle and coach connections may require your email address to be verified.
PerFIT offers optional paid memberships: PerFIT Pro and PerFIT Platinum. The free scope includes 3 basic preset programs, 3 completed workouts in total, 1 plan of your own, 3 custom exercises, the last 30 days of progress, all share templates, My Circle and coach connections. Which features are free and which belong to a membership can change over time; changes are announced in the app (on the “What's new in PerFIT” screen). Access to your saved workout history and exporting your data remain free.
While using the app:
If you violate these rules, your account may be suspended or closed.
All rights in PerFIT's name, logo, interface design, images, texts and software are reserved. You are granted a limited, non-transferable and non-exclusive right to use the app for personal, non-commercial purposes.
The workout data you record in the app belongs to you.
PerFIT is provided "as is". We do not promise that the app will be uninterrupted, error-free or available under all conditions. The accuracy of the estimates and analyses the app produces depends on the accuracy of the data you enter.
To the fullest extent permitted by applicable law, no liability is accepted for indirect damages, loss of profit, loss of data or loss of use. This limitation also covers the health and safety warning in section 1.
The mandatory provisions of the Turkish Code of Obligations are reserved; cases of liability that cannot be limited in advance by law are not limited by this text.
We reserve the right to change, add or remove features of the app. If the service is ended entirely, you will be informed a reasonable time in advance so that you can export your data.
You can delete your account at any time from inside the app (Profile → Settings → Delete Account). Deleting your account does not cancel a paid subscription (see 3.5).
These terms are governed by the law of the Republic of Türkiye.
If you are a consumer in Türkiye: under Consumer Protection Law No. 6502, depending on the monetary value of the dispute, the Consumer Arbitration Boards or the Consumer Courts have jurisdiction. You can apply to the consumer arbitration board where you live or where the consumer transaction took place (art. 68); a consumer lawsuit can also be filed in the consumer court where you live (art. 73). For disputes above the arbitration board's limit, applying to a mediator before filing a lawsuit in the consumer court is a condition for suing (art. 73/A).
If you live in another country, including a member state of the European Union, this choice of law does not deprive you of the protection of the mandatory consumer laws of your country of residence, and you may also bring proceedings in the courts of your country of residence.
This text deliberately does not contain a jurisdiction clause tying disputes to the courts of a single city: in consumer contracts, such clauses restricting the consumer's right to apply to the court where they live are invalid.
For disputes with users who are not consumers, the general jurisdiction rules of the Code of Civil Procedure apply.
| Provider of the app | Erencem Öztürk (individual) |
|---|---|
| Address | Ankara, Türkiye |
| support@itsperfit.app |
| General and support | support@itsperfit.app |
|---|---|
| Personal data requests | support@itsperfit.app |