Gila Subprocessors
Gila operates the Gila mobile app and gila.coach website as a health and wellness controller, offering features such as food vision, habit tracking, nutrition lookups, and journaling.
- Subprocessors
- 14
- Locations
- 1
- Categories
- 9
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Supabase Inc. | Database | Database, authentication, file storage, edge functions, realtime — the core platform Gila is built on |
 United States
|
All app and account data, including special-category health data (weight, medication, side effects, mood, food, journal, photos) |
| Amazon Web Services, Inc. (AWS) | Cloud Infrastructure | Underlying infrastructure host for Supabase (managed RDS, S3, EBS); sub-processor of Supabase |
United States
|
Same as Supabase, encrypted at rest by AWS-managed keys |
| Vercel Inc. | Cloud Infrastructure | Hosts the gila.coach website + Next.js edge functions + middleware |
United States
|
Request headers, transient IP, edge-function execution traces, form submissions in transit |
| Cloudflare, Inc. | Cloud Infrastructure | Bot protection (Turnstile) on public forms; CDN in front of Supabase project endpoints | Global | Browser challenge tokens, transient IP and request signals during challenge |
| Google LLC | Cloud Infrastructure | Push notifications via Firebase/FCM to iOS and Android; primary AI provider via Gemini API for 13 features including food vision, activity-goal AI, nutrition-goal AI, habit suggestions, onboarding, weekly narrative report, health analysis, weekly briefing, habit-signal agent, community-submission safety review, journal embeddings, QA evaluation judge, and Habit Lab playground co-provider |
United States
|
Device push token, generic push payload; per-request contextual snapshot — profile excerpt, recent activity, optional images. No advertising data. |
| Apple Inc. | Technology | Onward push delivery to iOS devices; sub-processor of Firebase |
United States
|
Push payload in transit |
| Resend, Inc. | Transactional email (welcome, deletion verification, password reset, milestone) and marketing email (with consent) |
United States
|
Email address, first name, locale, template variables | |
| Anthropic, PBC | AI | LLM provider for the Habit Lab playground (Haiku / Sonnet / Opus), internal QA evaluation pipeline (Sonnet judge), and A/B opt-in path inside food vision |
United States
|
Per-request prompts — contextual snippets, no user identifier transmitted. |
| OpenAI, L.L.C. | AI | LLM provider for the food-vision A/B opt-in path only — server-controlled provider param, default off in production |
United States
|
Per-request prompts — image + meal context, no user identifier transmitted. |
| Perplexity AI, Inc. | AI | Source-grounded research (sonar-pro) used by the habit-signal agent for habit citations and as a research fallback path inside food vision for ambiguous foods |
United States
|
Anonymised topical queries only — no user identifier passed by design |
| FatSecret | Data Enrichment | Nutrition database lookups for food search and barcode scan |
United States
|
Food search query strings only — no user identifier passed (OAuth 1.0 HMAC-SHA1) |
| PostHog Inc. | Analytics | Product analytics — screen views, event names, feature-flag exposure |
United States
|
Hashed user identifier; screen and event names; device + OS + locale + app version. Health data, medication strings, calorie values, journal text, email, and name are excluded by design |
| Functional Software, Inc. (Sentry) | Error Tracking | Error tracking and performance monitoring |
United States
|
Hashed user identifier; error message and stack trace; PII-scrubbed breadcrumbs; performance traces. Email, name, and Article 9 attributes are scrubbed |
| RevenueCat, Inc. | Billing | Subscription management — disclosed conditionally because the paywall has not shipped to production yet. Will become an active subprocessor when the in-app paywall enables |
United States
|
Hashed app_user_id; subscription tier, status, dates; store-side transaction identifiers (App Store transaction id, Play Store purchase token). Payment card data is never sent — Apple and Google handle payment |
No subprocessors match your filters.
No changes recorded yet. Changes will appear here after the next scan detects updates.