Privacy Policy

What we collect, why, and the choices you have.

Last updated: November 1, 2026

ATHIR ("ATHIR," "we," "us") is a fitness technology platform based in Jordan, available at athirfit.com and as a mobile app. This policy explains what information we collect from members, coaches, and visitors, why we collect it, and the choices you have. Questions about this policy: hello@athirfit.com

Information we collect

Account information: your name, email address, and language preference when you create an account — either directly, or via "Continue with Google" (we receive your name, email, and profile photo from Google; we never receive your Google password). Profile and training data: what you choose to log — workouts, sets and reps, templates, personal records, body measurements and weight, and any health or injury notes you add. Location is only ever collected for a workout you personally log, only with your explicit, per-session permission, and is never collected when a coach logs a session on your behalf. Coach-client data: if you connect with a coach or client, we store that relationship and the access level you've granted (view only, log access, or full access) — a coach can only ever see what you've specifically allowed, and you can revoke that access at any time. Device information: if you enable notifications on our mobile app, we store a device push token so we can deliver them, used only for notification delivery. Usage analytics: we track a small number of product events (e.g. account created, workout logged, template created) tied to an anonymous ID, never your name or email, processed through PostHog — we never send your raw IP address, workout content, or any personally identifying information into this system. Cookies: we use essential cookies only, to keep you signed in and remember your language, and don't set non-essential cookies without your permission.

Where your data is stored

Your account and training data are stored on servers located in Singapore, operated by our database provider, Supabase. Anonymized product analytics are processed by PostHog on servers located in the European Union. Using ATHIR means your information may be transferred to, and processed in, these locations, which may have different data protection laws than your own country.

How we use your information

We use your information to provide the service — logging workouts, syncing your data across devices, connecting you with a coach or client, and sending the small set of in-app notifications tied to your own activity — and to understand and improve the product through the anonymized analytics described above. We also use it to communicate with you about your account (password resets, security notices) and, only with your separate, explicit opt-in consent, product updates or special offers — we do not have your consent to send marketing email today, and won't send any until that consent exists. We do not sell your data, and we never share your personal workout or health information with advertisers. If ATHIR ever introduces advertising, it will be based on anonymous, aggregate segments only — never your name, email, phone number, or identifiable workout history.

How we protect your information

Access to your data through our systems is governed by row-level security tied to your account — a coach, another member, or ATHIR staff can only see what the system and your own sharing choices explicitly allow. Sensitive fields, including your name, date of birth, and health or injury notes, are encrypted at the database level, not just access-restricted. Our analytics pipeline runs through a database login that can read exactly one anonymized table and nothing else in our systems. No system is perfectly secure, and we can't guarantee absolute security, but protecting your data this way is a deliberate design choice, not an afterthought.

Your choices and rights

You can access and correct your information anytime from Settings. You can delete your account anytime from Settings — this starts a 30-day grace period, so signing back in within that window lets you cancel the deletion; after 30 days, your account and associated personal data are permanently erased. You control what a coach can see, and can change or revoke their access level at any time. You can also control notifications and location permissions from your device or app settings.

Data sharing

We share data with the following service providers, strictly to operate ATHIR: Supabase, our database and authentication provider (Singapore); Google, only if you choose "Continue with Google" to sign in; PostHog, for anonymized product analytics (EU); and our push notification delivery provider, to deliver notifications you've enabled on mobile. We do not sell personal information to any third party, and we do not share it with advertisers.

Children's privacy

ATHIR is not directed at, and is not intended for use by, children under 16. We don't knowingly collect information from anyone under that age.

Changes to this policy

If we make a material change to how we handle your information, we'll update this page and change the "Last updated" date above. For significant changes, we'll look for a more direct way to let you know, such as an in-app notice.

Contact

ATHIR — a fitness technology company based in Jordan. hello@athirfit.com