Sub-processors
Last updated: July 2026
Vaiya Labs uses the third-party services below to operate the app. Each processes only the data listed, and only to provide its service to us, under a Data Processing Agreement. We do not sell your data. This page is the single, maintained list of the vendors that handle your data — our Privacy Policy and Consumer Health Data Privacy Policy point here.
| Sub-processor | What it does | Data it processes | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account, profile, routines, check-ins, allergens & medications, progress photos | US |
| Anthropic | Powers the Sophie AI assistant & label scanning | Your first name, skin profile, and — only if you consent to AI sharing — your allergens & medications and chat messages | US |
| Stripe | Payment processing (web subscriptions) | Email, payment details, subscription status | US |
| RevenueCat | In-app purchase management (iOS) | App user ID, purchase/subscription status | US |
| Apple | App Store in-app purchases (iOS) | Purchase & subscription data | US |
| Resend | Transactional & waitlist email | Email address | US |
| Open-Meteo, BigDataCloud, OpenStreetMap Nominatim | UV/weather forecast and turning coordinates into a place name (only if you enable UV/SPF alerts) | Approximate location / coordinates | Varies |
We maintain a Data Processing Agreement with each sub-processor that handles personal data on our behalf, requiring them to protect it and use it only to provide their service to Vaiya. Our AI provider does not use your data to train its models.
Changes to this list
We keep this register current: any new service that receives your data is added here, and we put a Data Processing Agreement in place with it, before it goes live. When the list changes, we update the date above.
Contact
Questions about our sub-processors? Contact: hello@vaiyalabs.com
Data locations reflect each provider's primary processing region and may change as the provider operates; we list them in good faith. This register supplements our Privacy Policy.