Sub-processors
Last updated: 21 August 2026
The third parties that process personal data on our behalf to run Emmenia. We keep this list current and will give notice of material changes. For the authoritative processing terms, see the Privacy Policy or email privacy@emmenia.com.
| Processor | Purpose | Data | Region |
|---|---|---|---|
| Supabase | Database, authentication, file storage and serverless functions that run the Service. | Account, profile and all health data you enter; authentication tokens. | EU / US (project-dependent) |
| OpenAI | Powers AI features (coach, predictions, voice) — only when you enable AI processing, and only the specific inputs a request needs. | The specific prompt/content for the AI feature you invoke. Off by default. | US |
| Stripe | Subscription and one-time payments, tax calculation and invoicing. | Billing email, payment details (handled by Stripe, never stored by us), tax ID if you enter one. | US / EU |
| Resend | Sends transactional email (auth, data-request and sharing emails). | Your email address and the contents of the specific message. | US |
| Cloudflare | Hosting, content delivery and edge network that serves the app to your browser. | Technical request data (IP, user agent) needed to deliver and secure the Service. | Global edge |
| Browser push services | Delivers reminder notifications through the push service operated by your browser/OS vendor (e.g. Apple, Google, Mozilla). | The push subscription and the reminder payload, only if you enable notifications. | Vendor-dependent |
We do not sell personal data or share it for cross-context behavioural advertising. Where data leaves the UK/EEA, transfers rely on appropriate safeguards such as Standard Contractual Clauses.