These are the companies that process personal data on our behalf to run CoachVana. Each one is bound by a contract to use the data only to provide its service to us and to protect it at least as well as our Privacy Policy does. None of them may sell it or use it for advertising.
Companies that process data for us
| Company | What it does | Data | Where |
|---|---|---|---|
| Supabase | Database, file storage, sign-in, scheduled jobs and server functions | All data held in CoachVana | United States |
| Vercel | Hosts the website and web app; aggregate traffic measurement if you allow it | Requests to the website, including IP address; pages a signed-in person loads | United States, with public pages cached worldwide |
| Stripe | Payments to CoachVana on the web, and coaches' own payment accounts | Name, email, what was bought and payment status; card details go to Stripe directly | United States |
| Apple | Plans bought in the iPhone app, Sign in with Apple, iPhone push notifications | Purchase records, sign-in identity, push tokens and notification text | United States |
| RevenueCat | Records plans bought in the iPhone app | Account ID and purchase records | United States |
| Sign in with Google, Android push notifications | Sign-in identity, push tokens and notification text | United States | |
| Expo | Delivers phone app updates and push notifications | Push tokens, notification text, app version | United States |
| Anthropic | Runs CoachVana's AI features | Only what the feature needs, never data from a connected device; see AI and Your Data | United States |
| Resend | Sends email: invites, receipts, reminders, digests, support alerts | Recipient email, name and the email's content | United States |
Services people choose to connect
These are not our subprocessors. They receive or send data only because a client or coach connected them, and they handle it under their own terms and privacy policies, which are between that person and the company. Disconnecting stops it.
| Company | What it does | Data | Where |
|---|---|---|---|
| Oura, WHOOP, Fitbit (through Google Health), Garmin where available | Wearable data a client chooses to connect | Sleep, recovery, heart rate, activity and workouts, read from the service | Each company's own systems |
| Apple Health, Health Connect | Health data on the client's own phone | Read with the phone's permission; on iPhone, workouts and nutrition can be written back | On the device |
| Google Calendar and Google Meet | A coach's calendar sync and video links | Session times, titles and Meet links; events in a sixty-day window | |
| Zapier, Manychat, Typeform, Jotform | Tools a coach connects to their own account | What the coach sets up: lead details, and that a client joined, checked in or trained | Under the coach's own account with that company |
| Claude (Anthropic), ChatGPT (OpenAI) | An AI assistant a coach connects to their own account | What the assistant reads to answer the coach; a client's logs only with that client's yes; never device data | Under the coach's own account with that company |
| YouTube, Vimeo, Open Food Facts | Exercise demo videos and some food photos | A request from your device when you play a video or view a photo | Each company's own systems |
Not in use
PayPal is built into CoachVana but switched off. If it is switched on, PayPal will process payments for coaches who connect it, and this page will say so first.
Changes to this list
We update this page before a new subprocessor starts processing personal data, and at least 15 days before for one that will process the data coaches hold about their clients, except where a change is needed urgently to keep the service running or secure. A coach, gym or company that wants to object to a new subprocessor can email support@coachvana.com within that time, as our Data Processing Addendum describes.