Sub-processors
Last updated: 2026-10-28
To run NOYU we rely on a small number of trusted third-party services ("sub-processors") that process personal data on our behalf. Each is bound by a data protection contract and may only use your data on our instructions and for the purpose shown below.
Where a sub-processor is outside the UK or EEA, transfers are protected by appropriate safeguards (such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or an adequacy decision), as described in our Privacy Policy.
AI providers
OpenAI
United StatesAI models used to provide or improve NOYU's AI features.
Data: Pseudonymised Health Data and Member Content, when you use NOYU's AI features.
Google (Gemini)
United StatesAI models used to provide or improve NOYU's AI features.
Data: Pseudonymised Health Data and Member Content, when you use NOYU's AI features.
Microsoft
United StatesAI models used to provide or improve NOYU's AI features.
Data: Pseudonymised Health Data and Member Content, when you use NOYU's AI features.
Anthropic
United StatesAI models used to provide or improve NOYU's AI features.
Data: Pseudonymised Health Data and Member Content, when you use NOYU's AI features.
Amazon Web Services (Bedrock)
United StatesHosts the open-weight AI models used to provide or improve NOYU's AI features.
Data: Pseudonymised Health Data and Member Content, when you use NOYU's AI features.
Baseten
United StatesHosts the open-weight AI models used to provide or improve NOYU's AI features.
Data: Pseudonymised Health Data and Member Content, when you use NOYU's AI features.
Hosting and storage
Neon
European UnionManaged database that stores your account and health data.
Data: All member data held at rest.
Amazon Web Services (AWS)
United KingdomStores raw data from connected sources and files you upload (such as food photos).
Data: Wearable payloads, uploaded images, and documents.
Vercel
United States (with EU edge)Hosts our website and app, and routes our requests to the AI providers above (AI Gateway).
Data: App infrastructure; transient routing of AI requests.
Mapbox
United StatesShows maps of your workouts on the web.
Data: The map area around a workout, and your IP address.
Wearables and connections
Terra
United States / European UnionConnects the wearables and health apps you choose to link.
Data: Sleep, activity, heart, body, and workout metrics from your connected devices.
Google (Sign-in and Calendar)
United StatesSign in with Google, and, if you connect your calendar, lets NOYU take upcoming races and events into account.
Data: Authentication token, and calendar event titles, dates, times, and locations.
Apple
United StatesSign in with Apple, push notifications to your iOS device, and the weather for your workouts (WeatherKit).
Data: Authentication token, device push tokens, the text of notifications NOYU sends you, and a workout's approximate location and time.
Payments
Stripe
United States / European UnionTakes payment for memberships bought on our website.
Data: Name, email address, NOYU account ID, payment details, and membership plan.
Communications
Resend
United StatesSends account emails, the messages NOYU sends you by email, and, if you opt in, marketing emails.
Data: Email address, name, and the content of those emails.
Analytics and operations
PostHog
European UnionProduct analytics to help us understand and improve NOYU.
Data: Usage events and interactions. Not your Health Data.
Slack
United StatesInternal team alerts and handling of member feedback.
Data: Operational alerts and any feedback you choose to send us.
Changes to this list
We will update this page before adding any new sub-processor that handles your personal data. If you have questions about a sub-processor or a transfer safeguard, email hello@noyu.health.