Sub-processors

Last updated September 26, 2026

These are the service providers that process personal data on our behalf to run Peak Mind Coach. Each one receives only the data needed for its purpose. How AI providers may use and retain data is described in Section 5 of our Privacy Policy: cloud AI providers do not use our users’ data to train their models and may keep API inputs and outputs for up to 30 days for abuse monitoring.

ProviderPurposeData involved
SupabaseDatabase, authentication, file storage and server functionsAccount and profile data, all app data you create, stored files
PowerSync (JourneyApps)Syncing your data between the app on your device and our databaseApp data you create, in transit
VercelHosting of the web app and websitesWeb requests, including IP address and pages visited
OpenAICloud AI: coaching replies, reads and assessments, and voice transcriptionThe text or audio sent for that request, with the context needed to answer it
AnthropicBackup cloud AI provider for generated responsesThe text sent for that request, with the context needed to answer it
CartesiaVoice synthesis of the coach’s spoken repliesThe reply text to be spoken
Cloudflare (R2)Storage and delivery of the on-device AI model fileDownload requests (IP address); no personal content
StripePayments for web subscriptions and certificationsName, email, billing details, purchase history (card numbers are held by Stripe, not us)
RevenueCatManaging App Store and Google Play subscriptionsAccount identifier, purchase and subscription status
Apple / GoogleApp distribution, in-app purchases, push notification delivery, and optional Sign in with Apple / GooglePurchase records, device push tokens, sign-in identifiers
Expo (650 Industries)App updates and push notification routingDevice push token, notification content, app version
ResendTransactional email (sign-in, password reset, reminders)Email address and the email content
SentryCrash and error diagnosticsTechnical error details, device and app version, account identifier; scrubbed of personal content

Services you choose to connect

These are only involved if you turn them on, and you can disconnect them at any time.

ProviderPurposeData involved
Apple Health (HealthKit) / Health ConnectReads the health signals you allow (e.g. heart-rate variability, resting heart rate, sleep)Stays under your control in your device settings; never used for advertising
Oura, WHOOPImports readings from a wearable you connectThe readings that service shares with us, until you disconnect
SpotifyOptional music playback in visualization sessionsYour Spotify sign-in token and chosen tracks

We don’t embed advertising SDKs and we don’t sell identified personal data. We update this page before a new provider starts processing personal data. Questions: Info@Peakmindmechanics.com.