Sub-processors

Last updated: 27 September 2026

To run vitasync.io, our waitlist and the VitaSync app we rely on a small number of trusted third-party providers ("sub-processors"). Each one receives only the minimum data needed for its task, under a data processing agreement. We do not sell or share your data for marketing. See our Privacy Policy and Security pages for more.

The website and waitlist

In use today.

Cloudflare, Inc.

Purpose
Website hosting, CDN, and the serverless functions behind the waitlist
Data
IP address, request metadata, submitted waitlist email
Location
Global network (EU/US)

Resend (Plus Five Five, Inc.)

Purpose
Waitlist contact storage, double opt-in confirmation, and transactional email including sign-in codes
Data
Email address
Location
EU (Ireland)

Supabase, Inc.

Purpose
Database holding the record that you confirmed your waitlist subscription
Data
Email address, confirmation time, confirming IP address
Location
EU/US, under a data processing agreement

Plausible Analytics

Purpose
Privacy-friendly, cookieless website analytics
Data
Aggregated, anonymised usage (no cookies, no personal data)
Location
EU (Germany)

Cloudflare Web Analytics

Purpose
Cookieless website analytics, run alongside Plausible
Data
Aggregated page views and performance timings. No cookies, no local storage, no personal data
Location
Global network (EU/US)

The app

For the VitaSync app, which starts its Android beta in 2026. The app is local first: what you log stays on your phone unless you turn on cloud backup.

Supabase, Inc.

Purpose
Account sign-in and the optional cloud backup of your entries and settings
Data
Email address (if you link one), account identifier, and the entries you chose to back up, including health and financial data
Location
EU/US, under a data processing agreement

Functional Software, Inc. (Sentry)

Purpose
Crash and error diagnostics
Data
Error type, stack trace and app version. Logged values, free text and identifiers are stripped before sending
Location
EU/US, under a data processing agreement

PostHog, Inc.

Purpose
Product analytics, only if you opt in
Data
A fixed list of event names and timings, for example how long a log took to save. Never the values you logged
Location
EU/US, under a data processing agreement

Expo (650 Industries, Inc.)

Purpose
Building the app and delivering over-the-air updates
Data
Device and build metadata when the app checks for an update. No logged data
Location
US, under a data processing agreement

Open Food Facts

Purpose
Looking up foods and barcodes when you search the food database
Data
The search term or barcode you enter. No account identifier is sent
Location
EU (France)

Payment processing will be added here when paid plans launch, and any provider behind a future integration will appear before it goes live. Where a provider processes data outside the UK, we rely on appropriate safeguards such as the UK addendum to the standard contractual clauses.

Questions

For questions about our sub-processors, contact us at hello@vitasync.io.