Gila Subprocessors
Gila operates the Gila mobile app and gila.coach website as a health and wellness controller, offering features such as food vision, habit tracking, nutrition lookups, and journaling.
- Subprocessors
- 14
- Locations
- 1
- Categories
- 9
- Last scanned
| Name | Category | Purpose | Location | Data processed |
|---|---|---|---|---|
| Supabase Inc. | Database | Database, authentication, file storage, edge functions, realtime — the core platform Gila is built on |
 United States
|
All app and account data, including special-category health data (weight, medication, side effects, mood, food, journal, photos) |
| Amazon Web Services, Inc. (AWS) | Cloud Infrastructure | Underlying infrastructure host for Supabase (managed RDS, S3, EBS); sub-processor of Supabase |
United States
|
Same as Supabase, encrypted at rest by AWS-managed keys |
| Vercel Inc. | Cloud Infrastructure | Hosts the gila.coach website + Next.js edge functions + middleware |
United States
|
Request headers, transient IP, edge-function execution traces, form submissions in transit |
| Cloudflare, Inc. | Cloud Infrastructure | Bot protection (Turnstile) on public forms; CDN in front of Supabase project endpoints | Global | Browser challenge tokens, transient IP and request signals during challenge |
| Google LLC | Cloud Infrastructure | Push notifications via Firebase/FCM to iOS and Android; primary AI provider via Gemini API for 13 features including food vision, activity-goal AI, nutrition-goal AI, habit suggestions, onboarding, weekly narrative report, health analysis, weekly briefing, habit-signal agent, community-submission safety review, journal embeddings, QA evaluation judge, and Habit Lab playground co-provider |
United States
|
Device push token, generic push payload; per-request contextual snapshot — profile excerpt, recent activity, optional images. No advertising data. |
| Apple Inc. | Technology | Onward push delivery to iOS devices; sub-processor of Firebase |
United States
|
Push payload in transit |
| Resend, Inc. | Transactional email (welcome, deletion verification, password reset, milestone) and marketing email (with consent) |
United States
|
Email address, first name, locale, template variables | |
| Anthropic, PBC | AI | LLM provider for the Habit Lab playground (Haiku / Sonnet / Opus), internal QA evaluation pipeline (Sonnet judge), and A/B opt-in path inside food vision |
United States
|
Per-request prompts — contextual snippets, no user identifier transmitted. |
| OpenAI, L.L.C. | AI | LLM provider for the food-vision A/B opt-in path only — server-controlled provider param, default off in production |
United States
|
Per-request prompts — image + meal context, no user identifier transmitted. |
| Perplexity AI, Inc. | AI | Source-grounded research (sonar-pro) used by the habit-signal agent for habit citations and as a research fallback path inside food vision for ambiguous foods |
United States
|
Anonymised topical queries only — no user identifier passed by design |
| FatSecret | Data Enrichment | Nutrition database lookups for food search and barcode scan |
United States
|
Food search query strings only — no user identifier passed (OAuth 1.0 HMAC-SHA1) |
| PostHog Inc. | Analytics | Product analytics — screen views, event names, feature-flag exposure |
United States
|
Hashed user identifier; screen and event names; device + OS + locale + app version. Health data, medication strings, calorie values, journal text, email, and name are excluded by design |
| Functional Software, Inc. (Sentry) | Error Tracking | Error tracking and performance monitoring |
United States
|
Hashed user identifier; error message and stack trace; PII-scrubbed breadcrumbs; performance traces. Email, name, and Article 9 attributes are scrubbed |
| RevenueCat, Inc. | Billing | Subscription management — disclosed conditionally because the paywall has not shipped to production yet. Will become an active subprocessor when the in-app paywall enables |
United States
|
Hashed app_user_id; subscription tier, status, dates; store-side transaction identifiers (App Store transaction id, Play Store purchase token). Payment card data is never sent — Apple and Google handle payment |
No subprocessors match your filters.
No changes recorded yet. Changes will appear here after the next scan detects updates.
Summary
14
Total Subprocessors
1
Locations
9
Categories
93%
in United States
Subprocessors by Country
Subprocessors by Category
Biggest overlap with
Other companies using the most of the same subprocessors
Common in your industry
Top subprocessors used by other Health Tech companies