Intakes on your own site

Overview

The gym turns on online planning under Settings → Intakes → On your website. There it also finds its public code (like jouw-gym-a3f9c1), the code for the widget and iframe, and its API keys.

Whatever way a lead plans, the time is held for 30 minutes and the lead gets an email to confirm. Only then the intake is booked, the lead appears under Leads and the staff member gets a calendar invite.

• Public page: https://app.rxapp.io/intake/{code} (a link or QR code)
• Widget: a form on your own page that takes on your site's font
• Iframe: the public page inside your site, adjusting its height
• API: your own form, from your own server, with an API key

Widget

Put this where the form should appear. The gym's house style (colour, corners, background) comes along automatically.

<div data-rxapp-intake="jouw-gym-a3f9c1"></div>
<script src="https://app.rxapp.io/intake/v1.js" async></script>

Deviate per page with these attributes on the div:

As a button with a pop-up:

<div data-rxapp-intake="jouw-gym-a3f9c1" data-mode="popup" data-button-text="Plan je intake"></div>
<script src="https://app.rxapp.io/intake/v1.js" async></script>

The div sends events: rxapp:intake-requested when a lead requests an intake, rxapp:intake-error when something goes wrong. For example for your own statistics:

document.addEventListener("rxapp:intake-requested", (event) => {
  // event.detail.starts_at: the chosen time (UTC ISO)
  window.dataLayer?.push({ event: "intake_requested", starts_at: event.detail.starts_at });
});

Iframe

The public page inside your site. The script below sets the height of the iframe to the height of the form.

<iframe src="https://app.rxapp.io/intake/jouw-gym-a3f9c1?embed=1" title="Plan your intake"
        style="width:100%;border:0;min-height:560px" loading="lazy"></iframe>
<script>
  window.addEventListener("message", function (event) {
    if (event.origin !== "https://app.rxapp.io" || !event.data || event.data.type !== "rxapp:intake-height") return;
    document.querySelectorAll('iframe[src^="https://app.rxapp.io/intake/jouw-gym-a3f9c1"]').forEach(function (frame) {
      frame.style.height = event.data.height + "px";
    });
  });
</script>

API

For a form of your own. The API key determines the gym; you never send a gym ID. Base URL: https://api.rxapp.io/api/v1/intake-api.

The gym creates keys under Settings → Intakes → API. A key is shown once. Send it as a Bearer token from your server.

Authorization: Bearer rxk_...

Free times for a week:

curl "https://api.rxapp.io/api/v1/intake-api/slots?from=2026-10-20&to=2026-10-26" \
  -H "Authorization: Bearer $RXAPP_INTAKE_API_KEY"

{
  "items": [
    { "date": "2026-10-20", "slots": ["2026-10-20T07:00:00.000Z", "2026-10-20T07:30:00.000Z"] },
    { "date": "2026-10-21", "slots": [] }
  ]
}

Request an intake (Node.js):

const response = await fetch("https://api.rxapp.io/api/v1/intake-api/requests", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.RXAPP_INTAKE_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    starts_at: "2026-10-20T07:00:00.000Z",
    name: "Sanne Smit",
    email: "sanne@example.com",
    phone: "06 1234 5678",
    consent: true, // the lead agreed to the gym's privacy policy
    language: "nl",
    utm: { source: "website" },
  }),
});
// 202 { "id": "…", "status": "requested", "expires_at": "…" }

Fields of a request:

Check a request:

curl "https://api.rxapp.io/api/v1/intake-api/requests/0d4e690e-284b-4ca2-82bc-b75e7501778c" \
  -H "Authorization: Bearer $RXAPP_INTAKE_API_KEY"

From request to intake

1. 1Fetch the free times (slots). The gym's rules apply: minimum notice, how far ahead, absence of staff.
2. 2Send a request with a time and the lead's details. The time is held for 30 minutes.
3. 3The lead gets an email in the gym's name with a button to confirm.
4. 4After confirming, the intake is booked: the lead appears under Leads (or the existing lead with that email is used), the lead and the staff member get a calendar invite, and reminders are planned.
5. 5Not confirmed within 30 minutes? The request expires and the time is free again.

Errors and limits

Errors are JSON with a message and, where useful, a code.

Limits: the widget and page allow 10 requests per 15 minutes per IP address, at most 3 requests per email address per day and 100 per gym per hour. The API allows 600 calls per 15 minutes per key.