Subprocessors
Last updated: 2026-07-19 · DRAFT pending legal review
These third parties process data on our behalf under contract. Your data is stored and processed in the United States. If you live elsewhere, this is an international transfer, which we ask you to consent to.
Who processes your data
| Provider | Role | Data | Location | DPA |
|---|---|---|---|---|
| Supabase | Database, auth, storage, realtime | All account data, profiles, messages, photos | United States | pending |
| OpenAI | AI conversation + profile extraction | Conversation text, profile text | United States | pending |
| Anthropic | Alternate AI provider | Conversation text, profile text | United States | pending |
| Voyage AI | Search indexing (embeddings) | Profile text | United States | pending |
| RevenueCat | Subscription entitlements (IAP) | Purchase state, user id | United States | pending |
| Apple | App distribution + in-app purchase | Purchase, device id | United States | n/a |
| App distribution + in-app purchase | Purchase, device id | United States | n/a | |
| Resend | Transactional email (codes) | Email address | United States | pending |
| Vercel | Web hosting | Request metadata (approx. country) | United States | pending |
| Railway | API hosting | All account data in transit | United States | pending |
| Expo | Mobile build + push delivery | Push token, device id | United States | pending |
| Sentry | Error monitoring | Diagnostics (no PII configured) | United States | pending |
| PostHog | Product analytics (currently off) | None while disabled | United States | n/a |
| Twilio | SMS (currently off) | None while disabled | United States | n/a |
| OpenFreeMap / Photon (komoot) | Map tiles + place search | Place search text goes from your device to komoot | European Union | n/a |
Notes
Place searches you type are sent from your device directly to komoot (Photon) to find locations. We do not sell your data. This list is updated whenever a provider changes.