Subprocessors
These are every third party that processes data on Tvara's behalf, or that your phone contacts directly. The list is complete as of the date above — we would rather name a small vendor than let it hide inside a category.
Processors we engage
Each of these handles data for us under a data processing agreement.
| Processor | What it does | What it receives | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage, server functions | Everything you log and everything synced — the full account | European Union (Frankfurt) |
| OpenAI | AI coach answers, food photo and voice recognition | Only with your explicit consent: your question, and a summary of recent training, sleep, weight and nutrition. GLP-1 data only under a second, separate opt-in. Photos and voice clips for food logging | United States |
| RevenueCat | Subscription state and receipt validation | Your account id, purchase and renewal events. No health data | United States |
| Google (Firebase) | Usage analytics and push notification delivery | Anonymised app events and a device push token. Never a health value | United States and global |
| Sentry | Crash and error reporting | Stack traces, device model and OS version, and an opaque user id. Health values, query strings and navigation parameters are stripped before sending | Germany (EU) |
| Apple | App distribution, Sign in with Apple, subscription billing, push delivery | Your purchase record and, if you use it, your Apple sign-in identity | Global |
| Google Play | App distribution and subscription billing on Android | Your purchase record | Global |
Contacted directly by your phone
These two do not go through our servers. Your device connects to them itself, which means each sees your IP address. We list them because a request leaving your phone is a disclosure whether or not we are in the middle of it.
| Service | When | What it sees | Location |
|---|---|---|---|
| Open Food Facts | Each time you scan a barcode that isn't in our own food database | The barcode you scanned, and your IP address | France (non-profit) |
| MapTiler | Whenever a cardio route map is drawn | Map tile requests, which reveal the geographic area of your recorded runs, and your IP address | Switzerland |
Where the food data comes from
Our food database is built from public national datasets and hosted by us, and text search runs against it first. When it comes up short, our server queries USDA FoodData Central (United States, a public government database) and Open Food Facts (France) live — those requests carry the search text only, from our server's address, never your identity or IP. Sources and their licences are on the licences page.
Not used
For the avoidance of doubt, Tvara has no advertising SDK, no third-party tracker, no data broker relationship, and no social login beyond Apple and Google. We do not sell personal data under any definition, including the CCPA's.
Changes to this list
We update this page when a processor is added or removed. If you have a data processing agreement with us, material changes are notified in advance so you can object. To be told when this page changes, email hello@tvara.health.