VendorPurposeDataRegionTransferReviewed
Supabase Inc.Database, authentication, file storageAll in-app dataUSUK IDTA / EU SCCs2026-05-13
Deepgram Inc.Audio transcriptionVoice clipsUSUK IDTA / EU SCCs2026-05-13
Google LLCAI text generation, image analysis, Health Connect, Play StorePrompts, media, optional OS data, purchase recordsUS / deviceUK IDTA / EU SCCs; device-local where applicable2026-05-13
Anthropic, PBCClaude AI for Vault summarisationExplicitly submitted Vault contentUSUK IDTA / EU SCCs2026-05-13
OpenRouter, Inc.AI gatewayAI prompts routed to selected vendorsUSUK IDTA / EU SCCs2026-05-13
RevenueCat Inc.Subscription state and purchase tokensEmail, user ID, purchase metadataUSUK IDTA / EU SCCs2026-05-13
Functional Software, Inc. (Sentry)Crash and error monitoringScrubbed diagnosticsUSUK IDTA / EU SCCs2026-05-13
Apple Inc.HealthKit and App StoreOptional OS data and purchase recordsDevice / AppleApple terms; device-local where applicable2026-05-13
Mixpanel, Inc.Product analyticsProduct-interaction events; no health data; IP/device identifiers minimized where enabledUSUK IDTA / EU SCCs2026-05-13
Resend, Inc.Transactional email, approved marketing email transport, delivery webhooksEmail address, message metadata, delivery events, unsubscribe preferences; no health data for marketing campaignsUS / global email networkUK IDTA / EU SCCs; DPA archive pending operator confirmation2026-05-16