Roles and international processing
This register includes processors acting on 
’s instructions and independently controlled services such as app stores, health platforms and connected wearable accounts. They are not all legally “subprocessors”. A provider’s role and transfer mechanism depend on the actual service and contract.
Providers may operate in Australia, the EU and the United States. The operator’s Australian address does not locate every database, log or support function in Australia. The primary Supabase project region was verified as eu-west-1 (Ireland, EU) on 15 September 2026. This does not establish EU-only processing for every provider or support service. Contractual safeguards and provider retention still require confirmation. Contact us for details of the safeguards applying to your information.
Provider register
| Service | Purpose and information | When used |
|---|---|---|
| Supabase | Primary project in Ireland (EU, eu-west-1); authentication, database, private storage and server functions; account, activity, health-derived records and uploaded content. | For account-based services. |
| Google Gemini (inactive) | Gemini does not process current AI requests. Any future use would require updated eligibility and privacy notices. | No active inference under the current Gemma configuration. |
| Cloudflare Workers AI | Intelligence, text plans, food-photo and plan-image analysis using hosted Gemma 4; generated meal/exercise illustrations using FLUX.2 [klein] 4B. Inputs include selected photos/documents or descriptive prompts, depending on the function. | Only the relevant AI flow; no Australia-only or EU-only inference location is established by the current integration. |
| Stripe Connect (existing eligible creator payout flows) | Hosted payout verification and transfers. The provider collects identity/bank information; retains account, eligibility and transfer references. | Only where the corresponding creator payout flow is available and used; not a promise of open programme enrolment. |
| RevenueCat | Store subscription identifiers, purchase events and entitlements; not full card information or fitness diaries. | Purchase and entitlement management. |
| Resend | Email address, language and transactional/support workflow messages. | Verification and service communications. |
| IONOS support mailbox / website host | Support messages sent by email; website network requests and operational logs handled by the hosting services. | Ordinary website use and correspondence you choose to send; not advertising tracking. |
| Apple and Google | Sign-in, purchases, push delivery, operating-system health services and optional platform diagnostics; Google Maps on supported Android routes. | According to platform and features used. |
| Expo | Push tokens, notification title/body and data payload for delivery to Apple/Google; payload can contain personalised fitness/briefing context. Also build/update and supported authentication infrastructure. | Notifications and services enabled in the installed configuration. |
| Telegram Bot API (optional operations) | Service availability alerts and technical error detail for the operator when the bot notifier is configured. This is distinct from a user messaging feature. | Conditional on operator configuration; minimise/redact any personal information in error details. |
| WHOOP and Oura | Authorised provider data, connection tokens and import/sync information. | Only for an available connection you authorise. |
| Legacy social verification (YouTube / TikTok / Instagram) | Account/channel identity and authorised verification data for the corresponding flow. | Creator OAuth and the three provider switches are currently disabled; prior records, if any, remain subject to privacy rights. |
| Food services and datasets | Food queries, barcodes, product information and regional composition data. Local bundled datasets do not receive a request just because their values are displayed. | Food search, lookup and attribution; see the food-source notice. |
| Country lookup services (ipwho.is / ipapi.co) | IP-based country detection when device or profile information is insufficient. | Only for the relevant fallback. |
AI hosting, licences and storage
Cloudflare is the inference service for the deployed Gemma/FLUX routes; Google and Black Forest Labs are the respective model authors. The reviewed Cloudflare path does not itself transmit an inference request to those authors. Current AI requests are not sent to Gemini. Model licences, provider processing terms and legal transfer safeguards address different obligations.
Generated catalogue artwork is stored by and can be reused across accounts. Original user-uploaded images are not copied into that shared cache by the reviewed generation path. See the image notice.
Provider contractual scope
Cloudflare’s standard subscription agreement incorporates its DPA where applicable; a separate wet signature is not automatically required. Keep evidence of the applicable account/contract and assess actual transfers. Its standard terms restrict HIPAA-defined protected health information without written permission. Consumer wellness data and HIPAA PHI are not interchangeable classifications. See the agreement and DPA.
Unavailable and legacy connections
Direct Garmin cloud connection is hidden in the current release configuration and is not offered as an active connection. A future integration would require an updated notice and the applicable authorisation.
The current interface hides the legacy Creator Circle application. Existing creator-verification records, including a YouTube channel ID and verification status, may still need to be maintained or deleted. The one-time YouTube ownership flow reads channel identity and revokes its grant; it is not presented as a public video or audience-data collection service.
Questions and requests
Write to strenqo-support@strenqo.eu to ask about a service provider, transfers, retention or a disconnection request. Read the Google Privacy Policy, YouTube terms and Google connected-app controls for any legacy YouTube authorisation.