Sub-processors
We use a limited number of carefully selected third-party providers to deliver the Services. Providers that process Personal Information on our behalf (Sub-processors) are engaged under a Data Processing Addendum (DPA) or equivalent written data-protection terms that require them to protect your Personal Information at least to the standard required by applicable law. A few of the services listed below are contacted directly by your device (for example, to look up a barcode) and act as independent controllers of the limited data they receive — the query itself and your device’s IP address; these are marked “direct from your device”. Our current providers are:
Effective from 22 September 2026 · Version 2.5
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic, PBC | AI coaching language model and image/document reading (primary) | United States |
| OpenAI, L.L.C. | AI language model — fallback for short structured tasks (currently switched off in production) | United States |
| Google LLC (Gemini API / Google Cloud) | AI language model — second fallback for short structured tasks (paid tier; currently switched off in production) | United States |
| ElevenLabs, Inc. | AI voice synthesis (text-to-speech) — receives only the reply text to be spoken | United States |
| Supabase Inc. | Database, authentication, file storage, backend functions | United States, EU (multi-region) |
| RevenueCat, Inc. | Subscription management, purchase-event processing and partner attribution attributes | United States |
| Apple Inc. | iOS payment processing, Sign in with Apple | United States, EU, AU |
| Apple Inc. (WeatherKit) | Weather data for weather-aware planning — receives your coordinates and time zone through our weather service | United States |
| Google LLC | Android payment processing, Sign-In with Google | United States, EU, AU |
| Google LLC (YouTube) | Exercise and meditation video embeds in privacy-enhanced mode — direct from your device | United States |
| Google LLC (Google Analytics) | Website analytics — cookieless measurement | United States |
| Microsoft Corporation | Outlook calendar sign-in (OAuth) — handled on your device only; PX’s servers never receive your calendar | United States |
| Sentry (Functional Software, Inc.) | Crash and error reporting | United States |
| PostHog, Inc. | Product analytics — in-app usage events and subscription state; no health data | United States |
| Expo (650 Industries, Inc.) | Push notification delivery | United States |
| Loops, Inc. | Lifecycle and transactional email — receives your email address, first name, locale and the coaching details shown in each email | United States |
| Branch Metrics, Inc. | Deferred deep linking for partner links on iOS — receives link-click and app-open events; no advertising identifier | United States |
| Terra API | Wearable and health data aggregation | United States, EU |
| Open-Meteo | Fallback weather and air-quality data — receives coordinates rounded to roughly 1 km, through our weather service | Europe |
| OpenStreetMap Foundation (Nominatim) | Place search in the location picker — direct from your device; receives your search text and approximate location | United Kingdom, EU |
| Open Food Facts | Barcode and food lookup — direct from your device; receives the barcode or search term | France (EU) |
| USDA FoodData Central | Food database lookup — direct from your device; receives the barcode or search term | United States |
| Unsplash, Inc. | Recipe imagery — direct from your device; receives image requests only | Canada, United States |
| Vercel Inc. | Web hosting for pxmembership.com and share pages | United States, EU |
| Cloudflare, Inc. | Content delivery network, DDoS protection, Turnstile bot/abuse prevention, and the edge service that serves share links | Global edge |
We maintain an up-to-date list of Sub-processors at pxmembership.com/sub-processors. We will provide reasonable advance notice of any new Sub-processor we add that processes Personal Information, and we record each change to this list, with its date, in Section 19. Some of our Sub-processors are located outside your country of residence. Where we transfer your Personal Information internationally, we rely on appropriate safeguards as described in Section 9. We may use Cloudflare Turnstile, a privacy-preserving alternative to CAPTCHA, on sign-in and sign-up screens to confirm that visitors are human and to protect the Services from automated abuse and fraud. Turnstile may run invisibly, without requiring you to complete a visible challenge. Cloudflare's collection and processing of information in connection with Turnstile is described in the Cloudflare Turnstile Privacy Addendum, linked below.