Current subprocessors
| Service | Purpose | Data |
|---|---|---|
| Supabase | Authentication and PostgreSQL database | Account data, session data |
| Hetzner | Web app and API server hosting | All server-side data (processed in-transit) |
| Cloudflare | DNS, proxy and edge security | Request logs (IP, headers) |
| Obelisk (VaultSpark Studios) | Optional studio-wide account sign-in at /login | Account identifier, email |
| Anthropic (Claude) | AI scoring, coaching, and daily intention | Challenge answers, reasoning text, session history |
| Stripe | Payment processing | Email, billing address |
| PostHog | Product analytics | Usage events, device info (with your consent) |
| Resend | Transactional and marketing email | Email address, name |
| Upstash (Redis) | Caching and real-time features | Cached AI responses (no PII) |
Changes
When we add or replace a subprocessor we update this page and the privacy policy. Organisations with a data processing agreement can see our Data Processing Agreement (DPA).