CoachAI Sub-processors

Last Updated: 04/05/2026

CoachAI Technologies FZE ("CoachAI", "we", "us") engages a small set of trusted third-party service providers ("sub-processors") to deliver the CoachAI mobile application and related services (the "Services"). This page lists those sub-processors and the categories of Customer Data each one processes.

This page is referenced from Section 11 (AI-Powered Services) of our Terms of Use and our Privacy Policy. Capitalised terms not defined here have the meaning given in the Terms of Use.

What a sub-processor is

A sub-processor is a third party we authorise to process personal data or other Customer Content on our behalf to operate, secure, or improve the Services. Every sub-processor on this list is bound by a written agreement that includes confidentiality, security, and (where applicable) data-protection terms at least as protective as those we owe you under our Terms of Use, our Privacy Policy and, where relevant, the GDPR / UK GDPR Standard Contractual Clauses or equivalent transfer mechanism.

Our standing commitments

No model training on your content. Per Section 11.3 of the Terms of Use, we do not permit any AI sub-processor on this list to use your AI Assistant inputs or outputs, your meal photos, or the nutritional analysis derived from them, to train their foundation models. Where required, we have confirmed this position contractually.

No biometric identifiers from workouts. Per Section 3 and Section 11, motion-tracking feedback is generated from on-device movement data; CoachAI does not record or store video, photos, or biometric identifiers from workout sessions, and our sub-processors do not receive any.

Regional routing where feasible. Per Section 11.6, we route AI Assistant and meal-analysis traffic through EU-region endpoints for users in the EEA and UK where supported by the underlying provider.

De-identification before any internal review. Per Section 11.4 and Section 11.5, any human review of AI Assistant conversations or meal photos uses de-identified content and is limited to quality, safety, and abuse-prevention.

Current sub-processor list

The following table lists the sub-processors currently authorised to process Customer Data in connection with the Services.

Supabase, Inc.

  • Service Provided: Backend platform (Postgres database, authentication, storage, edge functions)

  • Data Processed: Account identifiers, profile data, workout and nutrition records, AI conversations, meal photos, nutritional metadata, device tokens

  • Location: United States (with regional replicas)

Apple Inc.

  • Service Provided: App Store distribution, Sign in with Apple, in-app purchases, push notifications, optional HealthKit

  • Data Processed: App Store account ID, transaction data, device tokens, optional HealthKit summary data

  • Location: United States / global infrastructure

Google LLC

  • Service Provided: Google Play distribution and billing

  • Data Processed: Play Store account ID, transaction data, device tokens

  • Location: United States / global infrastructure

RevenueCat, Inc.

  • Service Provided: Subscription management and receipt validation

  • Data Processed: Anonymised user ID, subscription status, purchase events, transaction identifiers

  • Location: United States

OpenAI, L.L.C.

  • Service Provided: AI model inference (assistant, fitness guidance, meal analysis)

  • Data Processed: AI prompts/responses, meal photos, nutritional outputs (inference only, not used for training)

  • Location: United States / EU endpoints (where available)

Anthropic, PBC

  • Service Provided: AI model inference (assistant, fitness guidance, meal analysis)

  • Data Processed: AI prompts/responses, meal photos, nutritional outputs (inference only, not used for training)

  • Location: United States / EU endpoints (where available)

PostHog Inc.

  • Service Provided: Analytics, feature flags, event tracking

  • Data Processed: Pseudonymous user ID, device/OS data, in-app events (no AI content or meal photos)

  • Location: EU (Frankfurt) for EEA/UK, United States otherwise

Functional Software, Inc. (Sentry)

  • Service Provided: Error tracking and performance monitoring

  • Data Processed: Crash data, stack traces, device/OS data, pseudonymous user ID (no AI content or meal photos)

  • Location: United States

OneSignal, Inc.

  • Service Provided: Push notifications

  • Data Processed: Push token, pseudonymous user ID, notification metadata

  • Location: United States

Shake d.o.o.

  • Service Provided: In-app bug reporting

  • Data Processed: Screenshots, device state, pseudonymous user ID

  • Location: European Union

Notice of changes

Per Section 11.1 and Section 16 of the Terms of Use, we will give reasonable advance notice before adding or replacing a sub-processor that materially changes how your Customer Content is processed. Notice will be given through one or more of: an in-app notification, an email to the address associated with your account, or an update to this page. The "Last updated" date at the top of this page reflects the most recent change.If you object to a new sub-processor, you may stop using the Services and request account deletion in line with Section 17 (Termination) of the Terms of Use. Where applicable consumer-protection or data-protection law gives you stronger rights, those rights are preserved per Annex A of the Terms of Use.

Contact

Questions about this page, our sub-processors, or our data-protection practices:
Email:privacy@coachai.tech
Notice of Dispute:support@coachai.tech (subject line "Notice of Dispute"), per Section 18.2 of the Terms of Use 
Postal: CoachAI Technologies FZE, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates

CoachAI is a trading name of CoachAI Technologies FZE. This page is for informational purposes and is incorporated by reference into the Terms of Use and Privacy Policy.