Gila Subprocessors

Gila operates the Gila mobile app and gila.coach website as a health and wellness controller, offering features such as food vision, habit tracking, nutrition lookups, and journaling.

Health Tech gila.coach
Subprocessors
14
Locations
1
Categories
9
Last scanned

14 subprocessors

Name Category Purpose Location Data processed
Supabase Inc. Database Database, authentication, file storage, edge functions, realtime — the core platform Gila is built on United States All app and account data, including special-category health data (weight, medication, side effects, mood, food, journal, photos)
Amazon Web Services, Inc. (AWS) Cloud Infrastructure Underlying infrastructure host for Supabase (managed RDS, S3, EBS); sub-processor of Supabase United States Same as Supabase, encrypted at rest by AWS-managed keys
Vercel Inc. Cloud Infrastructure Hosts the gila.coach website + Next.js edge functions + middleware United States Request headers, transient IP, edge-function execution traces, form submissions in transit
Cloudflare, Inc. Cloud Infrastructure Bot protection (Turnstile) on public forms; CDN in front of Supabase project endpoints Global Browser challenge tokens, transient IP and request signals during challenge
Google LLC Cloud Infrastructure Push notifications via Firebase/FCM to iOS and Android; primary AI provider via Gemini API for 13 features including food vision, activity-goal AI, nutrition-goal AI, habit suggestions, onboarding, weekly narrative report, health analysis, weekly briefing, habit-signal agent, community-submission safety review, journal embeddings, QA evaluation judge, and Habit Lab playground co-provider United States Device push token, generic push payload; per-request contextual snapshot — profile excerpt, recent activity, optional images. No advertising data.
Apple Inc. Technology Onward push delivery to iOS devices; sub-processor of Firebase United States Push payload in transit
Resend, Inc. Email Transactional email (welcome, deletion verification, password reset, milestone) and marketing email (with consent) United States Email address, first name, locale, template variables
Anthropic, PBC AI LLM provider for the Habit Lab playground (Haiku / Sonnet / Opus), internal QA evaluation pipeline (Sonnet judge), and A/B opt-in path inside food vision United States Per-request prompts — contextual snippets, no user identifier transmitted.
OpenAI, L.L.C. AI LLM provider for the food-vision A/B opt-in path only — server-controlled provider param, default off in production United States Per-request prompts — image + meal context, no user identifier transmitted.
Perplexity AI, Inc. AI Source-grounded research (sonar-pro) used by the habit-signal agent for habit citations and as a research fallback path inside food vision for ambiguous foods United States Anonymised topical queries only — no user identifier passed by design
FatSecret Data Enrichment Nutrition database lookups for food search and barcode scan United States Food search query strings only — no user identifier passed (OAuth 1.0 HMAC-SHA1)
PostHog Inc. Analytics Product analytics — screen views, event names, feature-flag exposure United States Hashed user identifier; screen and event names; device + OS + locale + app version. Health data, medication strings, calorie values, journal text, email, and name are excluded by design
Functional Software, Inc. (Sentry) Error Tracking Error tracking and performance monitoring United States Hashed user identifier; error message and stack trace; PII-scrubbed breadcrumbs; performance traces. Email, name, and Article 9 attributes are scrubbed
RevenueCat, Inc. Billing Subscription management — disclosed conditionally because the paywall has not shipped to production yet. Will become an active subprocessor when the in-app paywall enables United States Hashed app_user_id; subscription tier, status, dates; store-side transaction identifiers (App Store transaction id, Play Store purchase token). Payment card data is never sent — Apple and Google handle payment
November 9, 2026
+14 added
  • + Supabase Inc. (Database)
  • + Amazon Web Services, Inc. (AWS) (Cloud Infrastructure)
  • + Vercel Inc. (Cloud Infrastructure)
  • + Cloudflare, Inc. (Cloud Infrastructure)
  • + Google LLC (Cloud Infrastructure)
  • + Apple Inc. (Technology)
  • + Resend, Inc. (Email)
  • + Anthropic, PBC (AI)
  • + OpenAI, L.L.C. (AI)
  • + Perplexity AI, Inc. (AI)
  • + FatSecret (Data Enrichment)
  • + PostHog Inc. (Analytics)
  • + Functional Software, Inc. (Sentry) (Error Tracking)
  • + RevenueCat, Inc. (Billing)