FitTrainr is a SaaS business we designed, built, and operate end to end — a coaching platform for fitness professionals spanning web, iOS, and Android. Everything below is running in production today. When we say we can build something, this is what “can” means.
FitTrainr serves coaches, their sub-coaches, their clients, and whole organizations from one codebase — with hard tenancy scoping on every query and a permission hierarchy that survived a security review, not just a diagram.
4 role-scoped portals
Row-level tenancy discipline
Firebase Auth + session cookies
02
Payments that bill real money
Stripe and PayPal subscriptions in production: card-less trials, dunning, webhooks with signature verification, idempotent charge protection (built after finding — and fixing — a real duplicate-charge bug), and admin billing overrides.
Stripe + PayPal live
Webhook-driven lifecycle
Idempotency by design
03
AI features with guardrails
Gemini-powered meal and workout planning, an in-app assistant, and content tooling — every call wrapped in safety preambles, token budgets, rate limits, and consent logging. AI that legal and finance both signed off on.
Vertex AI in production
Token budget enforcement
Consent audit trail
04
Mobile apps in the stores
iOS and Android apps sharing the web codebase via Capacitor: native Google/Apple sign-in, push notifications, deep links back from external checkout, and App Store review battle scars turned into checklists.
App Store + Play Store
Universal/App Links
External checkout flow
05
A CI/CD platform, not just pipelines
A versioned library of reusable GitHub Actions workflows drives every repo: PRs get plan previews and gated checks, merges apply Terraform and deploy automatically. Nobody deploys by hand — including us.
Reusable workflow library
Terraform plan on every PR
Zero manual deploys
06
Terraform-first Google Cloud
The entire estate — projects, VPC, Cloud SQL, Cloud Run, App Hosting, Secret Manager, IAM — is code. Keyless workload-identity deploys, least-privilege service accounts, per-environment rendering.
100% IaC coverage
Keyless WIF deploys
Least-privilege IAM
Your project gets the same treatment.
Same architecture discipline, same automation, same accountability — scoped to what you actually need.