Sub-processors
We use the following providers to operate Yedeni. A data processing agreement under Art. 28 GDPR is in place with each of them. This list forms part of the Privacy notice and is updated whenever it changes.
We give notice of new or replaced providers before they process personal data — for material changes additionally in the app. We answer questions about individual providers at datenschutz@yedeni.com.
Overview
| Provider | Purpose | Location | Requires consent |
|---|---|---|---|
| Supabase, Inc. | Registration and sign-in (Auth), primary PostgreSQL database | EU (Frankfurt am Main, Germany) | No |
| Vercel Inc. | Operating the backend API (serverless functions) and serving these legal pages | EU (Frankfurt am Main, region fra1) | No |
| Microsoft Ireland Operations Ltd. (Microsoft Azure) | Storing media (Blob Storage), delivery via the content-delivery network (Front Door, cdn.yedeni.com), media processing (Azure Functions: audio and frame extraction, video transcoding) | EU (West Europe region, Netherlands) | No |
| OpenAI Ireland Ltd. / OpenAI, L.L.C. | All AI features: coach chat, photo and label analysis, recipe generation and import, nutrition estimation, speech transcription, translation, semantic search (embeddings) and content moderation | United States | No |
| Upstash, Inc. | Technical cache: request rate limiting, usage allowances for AI features (daily or weekly), short-lived caching | EU | No |
| Functional Software, Inc. (Sentry) | Crash and error diagnostics, performance regression detection | EU (German region, ingest.de.sentry.io) | No |
| PostHog Ltd. | Product analytics and app improvement | EU (Frankfurt am Main, eu.i.posthog.com) | Yes |
| RevenueCat, Inc. | Subscription management: purchase validation, term and cancellation status, purchase restoration | United States | No |
| Google Ireland Ltd. (AdMob, User Messaging Platform) | Serving ads on the free tier and obtaining the required consent | EU and United States | Yes |
| Google Ireland Ltd. (Anmeldung mit Google) | Sign-in via a Google account, if you choose that option | EU and United States | No |
| Apple Distribution International Ltd. | Sign in with Apple, App Store purchases, push delivery (APNs), access to Apple Health after you allow it | Ireland (EU) | No |
| Google Ireland Ltd. (Health Connect, Google Play) | Access to Health Connect after you allow it, Google Play purchases, push delivery (FCM) | EU and United States | No |
| 650 Industries, Inc. (Expo / EAS) | Sending push notifications and delivering app updates | United States | No |
| Apify Technologies s.r.o. | Technically retrieving publicly available Instagram posts from partners who expressly permitted us to use their content | Czech Republic (EU) | No |
| Secret Industries Pty Ltd (FatSecret Platform API) | Supplementary food and barcode database when a product is found neither locally nor in Open Food Facts | Australia | No |
| GitHub, Inc. | Running the nightly database backup (the backups themselves are stored in Azure's EU storage) and triggering internal load tests (control parameters only, no personal data) | United States | No |
| Brevo SAS | Delivery of system and information emails, plus performance measurement | France and Germany (EU) | No |
Details
Supabase, Inc.
| Field | Value |
|---|---|
| Purpose | Registration and sign-in (Auth), primary PostgreSQL database |
| Data | Email address, password hash, sign-in timestamps, all content and health data stored in the app |
| Processing location | EU (Frankfurt am Main, Germany) |
| Basis | Processed inside the EU/EEA — no third-country transfer The provider is US-based; data is stored exclusively in the EU region. Standard contractual clauses additionally cover support access from the US. |
| Requires consent | No — required to operate the service |
Vercel Inc.
| Field | Value |
|---|---|
| Purpose | Operating the backend API (serverless functions) and serving these legal pages |
| Data | IP address, timestamp, requested endpoints and the full contents of each request while it is processed |
| Processing location | EU (Frankfurt am Main, region fra1) |
| Basis | Processed inside the EU/EEA — no third-country transfer The execution region is pinned to Frankfurt. The provider is US-based; standard contractual clauses cover administrative access. |
| Requires consent | No — required to operate the service |
Microsoft Ireland Operations Ltd. (Microsoft Azure)
| Field | Value |
|---|---|
| Purpose | Storing media (Blob Storage), delivery via the content-delivery network (Front Door, cdn.yedeni.com), media processing (Azure Functions: audio and frame extraction, video transcoding) |
| Data | Uploaded photos and videos, profile pictures, voice recordings; CDN requests additionally involve IP address and timestamp |
| Processing location | EU (West Europe region, Netherlands) |
| Basis | Processed inside the EU/EEA — no third-country transfer |
| Requires consent | No — required to operate the service |
OpenAI Ireland Ltd. / OpenAI, L.L.C.
| Field | Value |
|---|---|
| Purpose | All AI features: coach chat, photo and label analysis, recipe generation and import, nutrition estimation, speech transcription, translation, semantic search (embeddings) and content moderation |
| Data | The contents of each request: chat messages, meal and label photos, voice recordings, recipe text and the slice of nutrition goals, daily balance, allergies and preferences needed for the answer — including health data. No account or user identifier is transmitted. |
| Processing location | United States |
| Basis | Adequacy decision (Art. 45 GDPR, EU-U.S. Data Privacy Framework) plus standard contractual clauses Data submitted through the API is contractually excluded from model training. This is the only processor handling health data outside the EU — the transfer therefore relies on your explicit consent under Art. 9(2)(a) in conjunction with Art. 49(1)(a) GDPR. |
| Requires consent | No — required to operate the service |
Upstash, Inc.
| Field | Value |
|---|---|
| Purpose | Technical cache: request rate limiting, usage allowances for AI features (daily or weekly), short-lived caching |
| Data | Pseudonymous identifiers (user ID or IP address) and counters; no content or health data |
| Processing location | EU |
| Basis | Standard contractual clauses (Art. 46(2)(c) GDPR) The provider is US-based; standard contractual clauses cover access from there. |
| Requires consent | No — required to operate the service |
Functional Software, Inc. (Sentry)
| Field | Value |
|---|---|
| Purpose | Crash and error diagnostics, performance regression detection |
| Data | Error messages, stack traces, app and device version, pseudonymous user ID. Email addresses, passwords, tokens and comparable values are stripped automatically before transmission. |
| Processing location | EU (German region, ingest.de.sentry.io) |
| Basis | Processed inside the EU/EEA — no third-country transfer |
| Requires consent | No — required to operate the service |
PostHog Ltd.
| Field | Value |
|---|---|
| Purpose | Product analytics and app improvement |
| Data | Pseudonymous device/user identifier, screens viewed, actions triggered, device class, OS and app version. No screen recordings, no health data, no plain-text content. |
| Processing location | EU (Frankfurt am Main, eu.i.posthog.com) |
| Basis | Processed inside the EU/EEA — no third-country transfer |
| Requires consent | Yes — only runs after your consent |
RevenueCat, Inc.
| Field | Value |
|---|---|
| Purpose | Subscription management: purchase validation, term and cancellation status, purchase restoration |
| Data | Pseudonymous user ID, app-store purchase receipts, product and term data, country. No payment details — those stay with Apple and Google. |
| Processing location | United States |
| Basis | Adequacy decision (Art. 45 GDPR, EU-U.S. Data Privacy Framework) plus standard contractual clauses |
| Requires consent | No — required to operate the service |
Google Ireland Ltd. (AdMob, User Messaging Platform)
| Field | Value |
|---|---|
| Purpose | Serving ads on the free tier and obtaining the required consent |
| Data | Device advertising ID, IP address, coarse location (country), ad interactions, consent status |
| Processing location | EU and United States |
| Basis | Adequacy decision (Art. 45 GDPR, EU-U.S. Data Privacy Framework) plus standard contractual clauses Personalised ads only after explicit consent. Without consent only non-personalised ads are served. Health data is never used for or transmitted for advertising. |
| Requires consent | Yes — only runs after your consent |
Google Ireland Ltd. (Anmeldung mit Google)
| Field | Value |
|---|---|
| Purpose | Sign-in via a Google account, if you choose that option |
| Data | Email address, name, Google account identifier |
| Processing location | EU and United States |
| Basis | Adequacy decision (Art. 45 GDPR, EU-U.S. Data Privacy Framework) plus standard contractual clauses |
| Requires consent | No — required to operate the service |
Apple Distribution International Ltd.
| Field | Value |
|---|---|
| Purpose | Sign in with Apple, App Store purchases, push delivery (APNs), access to Apple Health after you allow it |
| Data | Apple account identifier, forwarded or anonymised email address where applicable, purchase receipts, push token |
| Processing location | Ireland (EU) |
| Basis | Processed inside the EU/EEA — no third-country transfer Apple Health data is read on your device only and forwarded to our backend as aggregated daily values — we send no health data back to Apple. |
| Requires consent | No — required to operate the service |
Google Ireland Ltd. (Health Connect, Google Play)
| Field | Value |
|---|---|
| Purpose | Access to Health Connect after you allow it, Google Play purchases, push delivery (FCM) |
| Data | Google account identifier, purchase receipts, push token. Health Connect data is read locally on the device only. |
| Processing location | EU and United States |
| Basis | Adequacy decision (Art. 45 GDPR, EU-U.S. Data Privacy Framework) plus standard contractual clauses |
| Requires consent | No — required to operate the service |
650 Industries, Inc. (Expo / EAS)
| Field | Value |
|---|---|
| Purpose | Sending push notifications and delivering app updates |
| Data | Device push token, notification content, app and runtime version when fetching updates |
| Processing location | United States |
| Basis | Standard contractual clauses (Art. 46(2)(c) GDPR) Notification texts contain reminders and may carry a meal suggestion with portion and calorie figure; your weight, goals and diary values are not transmitted. Delivery runs through Expo and the device vendor's service (Apple or Google). |
| Requires consent | No — required to operate the service |
Apify Technologies s.r.o.
| Field | Value |
|---|---|
| Purpose | Technically retrieving publicly available Instagram posts from partners who expressly permitted us to use their content |
| Data | Public post content and the partner's handle. No Yedeni user data is transmitted. |
| Processing location | Czech Republic (EU) |
| Basis | Processed inside the EU/EEA — no third-country transfer |
| Requires consent | No — required to operate the service |
Secret Industries Pty Ltd (FatSecret Platform API)
| Field | Value |
|---|---|
| Purpose | Supplementary food and barcode database when a product is found neither locally nor in Open Food Facts |
| Data | Only the search term or barcode number. No user identifier, no health data. |
| Processing location | Australia |
| Basis | No personal data transmitted |
| Requires consent | No — required to operate the service |
GitHub, Inc.
| Field | Value |
|---|---|
| Purpose | Running the nightly database backup (the backups themselves are stored in Azure's EU storage) and triggering internal load tests (control parameters only, no personal data) |
| Data | The backup stream is processed during execution and not retained there. |
| Processing location | United States |
| Basis | Adequacy decision (Art. 45 GDPR, EU-U.S. Data Privacy Framework) plus standard contractual clauses |
| Requires consent | No — required to operate the service |
Brevo SAS
| Field | Value |
|---|---|
| Purpose | Delivery of system and information emails, plus performance measurement |
| Data | Email address, salutation/name, subject and body of the message, delivery and open events, IP address when images are loaded |
| Processing location | France and Germany (EU) |
| Basis | Processed inside the EU/EEA — no third-country transfer Health data is never processed by marketing email — this is enforced in code, not merely intended. The provider holds no contact list; it receives only the single recipient and the finished message per send. |
| Requires consent | No — required to operate the service |
Not used
For clarity, because we are often asked: we use no ad networks other than the one named, operate no cross-device tracking, sell no data to data brokers, and use no service that would analyse health data for advertising purposes.