Service providers

Processors

These companies process personal data only on our instructions, under data processing agreements. We’ll update this list before adding a new one.

• Supabase (database, sign-in and server functions). EU, Frankfurt. All app and coaching data.
• Brevo (sends sign-in codes, waitlist emails, coach billing and price change emails, and our replies to messages you send us). EU, France. Email address, name and the email content.
• Stripe (coach payments, invoices, receipts). USA and Ireland. Coach name, email, card details (held by Stripe, never by us) and billing history.
• Expo (delivers push notifications). USA. Push token and notification text.
• Google Firebase Cloud Messaging (Android push delivery). USA. Push token and notification text.
• Apple Push Notification service (iPhone push delivery). USA. Push token and notification text.
• Google (optional “Continue with Google” sign-in). USA. Your Google account email and name, only if you use it.
• Apple (optional “Continue with Apple” sign-in on iPhone and iPad). USA. Your Apple ID email (or a private relay address if you hide it) and, the first time only, your name, only if you use it.
• [Website host] (serves our websites). [Region]. IP addresses in server logs.

Food data sources (no personal data)

Food searches and barcode lookups go from our server to Open Food Facts and USDA FoodData Central. They receive only the search words or barcode, never who you are.