Sub-processors
We use a limited number of carefully selected Sub-processors to deliver the Services. Each Sub-processor is engaged under a Data Processing Addendum (DPA) or equivalent written data-protection terms that require it to protect your Personal Information at least to the standard required by applicable law. Our current Sub-processors are:
Effective from 09.07.2026 · Version 2.2
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic, PBC | AI coaching language model (primary) | United States |
| OpenAI, L.L.C. | AI language model — fallback for short structured tasks | United States |
| Google LLC (Gemini API / Google Cloud) | AI language model — second fallback for short structured tasks (paid tier) | United States |
| ElevenLabs, Inc. | AI voice synthesis (text-to-speech) | United States |
| Supabase Inc. | Database, authentication, file storage, backend | United States, EU (multi-region) |
| RevenueCat, Inc. | Subscription management | United States |
| Stripe, Inc. | Web subscription payment processing | United States, EU, AU |
| Apple Inc. | iOS payment processing, Sign in with Apple | United States, EU, AU |
| Google LLC | Android payment processing, Sign-In with Google | United States, EU, AU |
| Sentry (Functional Software, Inc.) | Crash and error reporting | United States |
| Expo (650 Industries, Inc.) | Push notification delivery | United States |
| Loops, Inc. | Lifecycle and transactional email | United States |
| Terra API | Wearable and health data aggregation | United States, EU |
| Oura Health Oy | Oura device data | EU (Finland) |
| Vercel Inc. | Web hosting | United States, EU |
| Cloudflare, Inc. | Content delivery network, DDoS protection, and Turnstile bot/abuse prevention | Global edge |
We maintain an up-to-date list of Sub-processors at pxmembership.com/sub-processors. We will provide reasonable advance notice of any new Sub-processor we add that processes Personal Information. Some of our Sub-processors are located outside your country of residence. Where we transfer your Personal Information internationally, we rely on appropriate safeguards as described in Section 9. We use Cloudflare Turnstile, a privacy-preserving alternative to CAPTCHA, to confirm that visitors are human and to protect the Services from automated abuse and fraud. Turnstile may run invisibly, without requiring you to complete a visible challenge. Cloudflare's collection and processing of information in connection with Turnstile is described in the Cloudflare Turnstile Privacy Addendum, linked below.