Sub-processors
Every third party that touches personal data on our behalf. Nothing is left off this list.
Last updated: August 18, 2026
1. Current sub-processors
| Provider | Purpose | Data handled | Region | Health data | Privacy policy |
|---|---|---|---|---|---|
| Supabase | Application database, authentication, file storage, edge functions | Account data, client records, progress photos, measurements, messages, session notes | United States | Yes | View |
| Cloudflare | Website hosting, CDN, edge functions, DDoS protection | IP addresses, request metadata, cached page content | Global edge network | No | View |
| Stripe | Subscription billing, and payment processing between coaches and their clients | Billing name, email, payment card details (held by Stripe, never by FitFloww) | United States, Ireland | No | View |
| PostHog | Product analytics — only loaded after you accept analytics cookies | Pseudonymous usage events, device and browser type, coarse location | United States | No | View |
| Resend | Transactional and marketing email delivery | Email address, name, message content, delivery and open events | United States | No | View |
| Crisp | Live chat support widget — only loaded after you accept optional cookies | Chat messages, email address, name, phone number, avatar, and the pages you viewed before opening the chat | European Union | No | View |
| Anthropic | AI text generation for content and marketing tooling | Prompt text submitted to the feature. Client health records are not sent to this service. | United States | No | View |
Each processes personal data only on our instruction, under a written contract with terms no less protective than our own commitments.
2. Which of them see health data
Body measurements, progress photos, injury notes, and nutrition records reach only the providers marked “Yes” above. In practice that is our database and storage provider — health data is not sent to our analytics, email, chat, or AI providers.
Details are in the Consumer Health Data Privacy Notice.
3. What we deliberately do not use
No advertising or data-broker relationships
No advertising networks, retargeting pixels, conversion trackers, data brokers, or affiliate tracking. We do not sell personal data or share it for cross-context behavioural advertising.
4. Notice of changes
- We give at least 30 days’ notice before adding or replacing a sub-processor that handles customer personal data.
- Notice is published here with an updated date, and emailed to account owners.
- You may object on reasonable data-protection grounds within those 30 days.
- If we cannot resolve an objection, you may terminate the affected service and receive a pro-rata refund of any prepaid unused period.
To receive change notifications at an address other than the account owner’s — a security or compliance mailbox, say — email privacy@fitflowwcrm.com.