WORK — CASE STUDY

FitTrainr: the platform that proves the pitch

FitTrainr is a SaaS business we designed, built, and operate end to end — a coaching platform for fitness professionals spanning web, iOS, and Android. Everything below is running in production today. When we say we can build something, this is what “can” means.

Visit fittrainr.com

01

Multi-tenant SaaS architecture

FitTrainr serves coaches, their sub-coaches, their clients, and whole organizations from one codebase — with hard tenancy scoping on every query and a permission hierarchy that survived a security review, not just a diagram.

  • 4 role-scoped portals
  • Row-level tenancy discipline
  • Firebase Auth + session cookies

02

Payments that bill real money

Stripe and PayPal subscriptions in production: card-less trials, dunning, webhooks with signature verification, idempotent charge protection (built after finding — and fixing — a real duplicate-charge bug), and admin billing overrides.

  • Stripe + PayPal live
  • Webhook-driven lifecycle
  • Idempotency by design

03

AI features with guardrails

Gemini-powered meal and workout planning, an in-app assistant, and content tooling — every call wrapped in safety preambles, token budgets, rate limits, and consent logging. AI that legal and finance both signed off on.

  • Vertex AI in production
  • Token budget enforcement
  • Consent audit trail

04

Mobile apps in the stores

iOS and Android apps sharing the web codebase via Capacitor: native Google/Apple sign-in, push notifications, deep links back from external checkout, and App Store review battle scars turned into checklists.

  • App Store + Play Store
  • Universal/App Links
  • External checkout flow

05

A CI/CD platform, not just pipelines

A versioned library of reusable GitHub Actions workflows drives every repo: PRs get plan previews and gated checks, merges apply Terraform and deploy automatically. Nobody deploys by hand — including us.

  • Reusable workflow library
  • Terraform plan on every PR
  • Zero manual deploys

06

Terraform-first Google Cloud

The entire estate — projects, VPC, Cloud SQL, Cloud Run, App Hosting, Secret Manager, IAM — is code. Keyless workload-identity deploys, least-privilege service accounts, per-environment rendering.

  • 100% IaC coverage
  • Keyless WIF deploys
  • Least-privilege IAM

Your project gets the same treatment.

Same architecture discipline, same automation, same accountability — scoped to what you actually need.

Start a work request