FitPal Coach

Coach terms

Version 2026-11-07. These terms also exist in French and Spanish; where they differ, the French version prevails.

These terms are the contract between you, the coach, and FitPal Coach. Part A covers the service. Part B is the data processing agreement that the GDPR (Article 28) and Moroccan law 09-08 require, because you decide what happens to your clients' data and FitPal Coach handles it for you. You accept both when you create your coach account, or in the app when this version is new to you.

Part A. The service

1. Who we are

FitPal Coach is published by Ahmed Chioua, an individual, Bureau 69, Wilaya Center, Tétouan, Morocco (contact@fitpal.ma), called "FitPal Coach", "we" or "us". "You" means the coach who opens an account, acting for their coaching business. You must be of legal age to enter into a contract.

2. The service

FitPal Coach is an app for coaching clients: programs, workout logging, progress, check-ins, a public page and requests from people who want to train with you. We provide it as it is today and keep improving it. We aim for it to be available at all times, but we do not guarantee uninterrupted service; maintenance and updates can briefly interrupt it.

3. Your account

You sign in with a passkey, or with a code or link sent to your email. Keep your devices and email secure. You are responsible for what is done with your account, and you tell us without delay at contact@fitpal.ma if you think someone else has access to it.

4. Plans and payment

The Free plan costs nothing and is limited to the number of active clients shown on fitpal.ma. Paid plans are billed monthly or yearly, at the prices shown on fitpal.ma when you subscribe. Payments are handled by our payment provider, Creem, which acts as the merchant of record and issues your invoices. You can cancel at any time; your plan then runs to the end of the period already paid. If a paid plan ends or a payment fails, your account carries on with the Free plan's limits; nothing you have stored is deleted because of it.

4a. Referrals

While you have a public page, your account gives you a referral link. When a coach creates their account from that link, and a client who came through their public page, whom they accepted and who is still their client, then trains, you earn one free month: one per referred coach, however many clients they have. A free month is worth one month of the paid plan you are on when it is used; we apply it ourselves when you pay. It has no cash value, is not refundable or transferable, and does not extend the Free plan.

These do not count: referring yourself, a client whose email address is yours or the referred coach's, or an account opened only to earn a month; we may cancel a month earned that way, after telling you why. If your page is renamed, the old link stops counting. We may change or end referrals as section 9 provides; months already earned stay usable for 12 months after it ends.

5. Your coaching and your content

You are responsible for the programs and advice you give your clients, and for having the right to coach them. FitPal Coach is a tool: it gives no medical advice and no training prescription of its own. Your programs, notes and other content remain yours. You allow us to host, copy and display them only as needed to provide the service to you and your clients.

Clients who ask to join from your public page must confirm they are 16 or older. If you invite a client under 16 yourself, you do so under your own responsibility as the controller of their data, and you must have the agreement of a parent or guardian.

6. Acceptable use

You must not use FitPal Coach to break the law, to send unsolicited messages, to collect data you have no right to, to impersonate anyone, or to attack, overload or probe the service. We may suspend an account that does, after telling you why, or at once where that is needed to stop harm.

7. Liability

Our total liability to you under these terms, Part B included, is limited to the amount you paid us in the 12 months before the event giving rise to the claim, and never less than 100 euros. We are not liable for indirect losses such as lost profit or lost clients. These limits do not apply to gross negligence, wilful misconduct, or any liability the law does not allow to be limited. Where the standard contractual clauses apply (Part B, section 11), their Clause 12 on liability applies as written.

8. Ending the contract

You can close your account at any time by writing to contact@fitpal.ma. We can end the contract with 30 days' notice, or at once for a serious breach of these terms. What happens to your clients' data then is set out in Part B, section 9.

9. Changes to these terms

When we change these terms, we publish the new version here with a new date, tell you by email or in the app at least 30 days before it applies, and ask you to accept it. If you do not accept it, you can close your account before the new version applies, and any amount you paid for a period not yet used is refunded.

10. Law and courts

These terms are governed by Moroccan law, and the courts of Tétouan have jurisdiction. This does not take away any protection that the law of your own country gives you and that cannot be set aside by contract. The standard contractual clauses in Part B, section 11, are governed by their own law and courts.

Part B. Data processing agreement

1. Roles

For the personal data of your clients and of the people who ask to join you (Client Data), you are the controller and FitPal Coach is the processor, within the meaning of the GDPR and of law 09-08. For your own account (your identity, email address, plan) and for the security log, FitPal Coach is the controller; this Part does not cover that data. Annex 1 describes the processing.

2. Instructions

We process Client Data only on your documented instructions, including as regards transfers outside the European Economic Area, unless the law requires otherwise; in that case we tell you first, unless the law forbids it. Your instructions are these terms and what you do with the app (inviting, accepting, releasing a client, deleting answers); if you signed up through another coach's referral link (Part A, section 4a), you also authorise us to check whether a client who came through your public page has trained since you accepted them, to credit that coach; we keep only a yes or no, nothing about that client is passed to them, and we are the controller for this check, as our privacy notice says; you can give further instructions in writing to contact@fitpal.ma, and we confirm receipt. If we ever processed Client Data outside your instructions, we would be a controller for that processing and answer for it as such. If we think an instruction breaks data protection law, we tell you, and may suspend it until it is resolved. We do not use Client Data for any purpose of our own: no advertising, no sale, no profiling, no training of models; the referral check above, for which we are the controller and which keeps only a yes or no, is the one exception.

3. Confidentiality

Only the person who operates FitPal Coach has access to Client Data, and only as needed to run, secure and support the service. Anyone we ever authorise to access it is bound by confidentiality, which continues after their work ends.

4. Security

We apply the technical and organisational measures in Annex 2, appropriate to the risk, in particular because Client Data can include health data (injuries, pain, body measurements, progress photos). We may improve them over time, but never lower the overall level of protection.

5. Sub-processors

You give your general authorisation for the sub-processors listed in Annex 3. We tell you by email at least 30 days before adding or replacing one, and update the list on this page. You may object on reasonable data-protection grounds within 14 days of our notice; if we cannot resolve the objection, you may end the contract without penalty before the change, and any amount you paid for a period not yet used is refunded. Each sub-processor is bound by data protection obligations no less stringent than these, and we remain responsible to you for it.

6. Your clients' rights

If a client or someone who asked to join you contacts us to exercise their rights, we pass the request on to you within 5 business days and do not answer it ourselves unless you ask us to. The app lets you act on many requests yourself (releasing a client, deleting the answers to a request), and each client can export their own data or delete their account from their settings. You instruct us to carry out at once a deletion a client asks for this way: it also erases your notes, the programs you sent them and their requests to you, and we cannot undo it. We help you with the rest at no extra cost, within 10 business days of your request.

7. Personal data breaches

We tell you of a personal data breach affecting Client Data without undue delay and at the latest within 48 hours of becoming aware of it, with what we know: its nature, the categories and approximate number of people and records concerned, its likely consequences, the measures taken or proposed, and a contact. We follow up as we learn more, and help you meet your own duties to notify the supervisory authority and the people concerned.

8. Other assistance

We help you, taking into account the nature of the processing and the information available to us, to meet your obligations on security, data protection impact assessments and prior consultation (GDPR Articles 32 to 36), in particular by making available the information on how FitPal Coach handles Client Data.

9. End of the contract

When the contract ends, you can ask us within 30 days to send you your clients' data in JSON, a common machine-readable format. After that period, or sooner if you ask, we delete Client Data. Copies in our backups disappear as the backups rotate: nightly backups, encrypted, are kept for 14 days (their copy off the hosting account up to one day longer, while its automatic deletion runs), and the copy taken before each update of the service is kept for 90 days at most. Until then, backups are not used for anything but restoring the service. We keep Client Data longer only where a law we are subject to requires it, and then only for that purpose. We confirm the deletion in writing if you ask.

10. Audits

We make available to you the information needed to show that we meet this Part and Article 28 GDPR, first in writing. If that is not enough, you, or an auditor bound by confidentiality whom you appoint, may carry out an inspection once a year, with 30 days' notice, without disrupting the service or exposing other coaches' data, or sooner after a personal data breach or at the request of a supervisory authority. You bear the cost of an audit unless it reveals a material breach of this Part by us.

11. International transfers

FitPal Coach is operated from Morocco, and Client Data is hosted in the United States; its nightly backups, encrypted, are stored in the European Union by a US company that does not have the key (Annex 3).

If you are established in the European Economic Area, you (as data exporter) and FitPal Coach (as data importer) enter into the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914, Module Two (controller to processor), which are incorporated into this Part by reference, without modification. For their purposes: the optional docking clause (Clause 7) does not apply; under Clause 9, Option 2 (general written authorisation) applies, with the 30 days' notice in section 5; the optional wording in Clause 11 does not apply; Clauses 17 and 18 refer to the law and courts of the Member State where you are established; the competent supervisory authority under Clause 13 is that of the same Member State. Annex I.A of the clauses is you, as identified in your account, and FitPal Coach, as identified in Part A; Annexes I.B, II and III are Annexes 1, 2 and 3 below. Where the clauses conflict with these terms, the clauses prevail. We carry out, and keep up to date, the assessment of the laws of the countries of destination that Clause 14 requires, and make it available to you on request. Onward transfers to our sub-processors follow Clause 8.8.

If you are established in Morocco, transfers abroad follow articles 43 and 44 of law 09-08.

12. Duration and precedence

This Part applies for as long as we process Client Data for you, including after the contract ends until the data is deleted. Where it conflicts with Part A on data protection, this Part prevails.

Annex 1. Description of the processing

Annex 2. Technical and organisational measures

Annex 3. Sub-processors