Alex. Sub-processors and data recipients
Last updated: 30 September 2026
This page lists the service providers ("sub-processors") that process personal data on behalf of GWB Technologies Ltd (Alex.) to run our service, and other organisations that receive data as independent controllers. It forms part of our Privacy Policy and Schedule 1 of our Coach Terms.
Changes: we will update this page at least 15 days before a new sub-processor starts processing personal data, and we will email coaches who use Alex PT. To be told about changes, email hello@getalex.app with the subject "Sub-processor updates".
Sub-processors
| Provider | What they do for us | Personal data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication and file storage | All account and app data, including health data | Primary database hosted in AWS region [London (eu-west-2)]. Support access may be from outside the UK | UK adequacy or (for any access from the USA or elsewhere) EU SCCs with the UK Addendum under Supabase's DPA |
| Vercel Inc. | Website and app hosting, serverless functions | Data passing through our servers, logs, IP addresses | USA and global edge network | UK Extension to the EU–US Data Privacy Framework. SCCs with UK Addendum as back-up |
| Anthropic, PBC (and Anthropic Ireland Ltd) | AI model (Claude) that generates coaching responses | Chat messages and relevant health and coaching context (no name or email) | USA | EU SCCs with the UK Addendum under Anthropic's DPA. No training on our data |
| OpenAI, L.L.C. / OpenAI OpCo, LLC | Text embeddings for knowledge-base search, and backup AI model (GPT-4o mini) when Anthropic is unavailable | Chat message text, and full coaching context in backup mode | USA | EU SCCs with the UK Addendum under OpenAI's DPA. No training on our data |
| Stripe Payments Europe Ltd / Stripe, Inc. | Payment processing for web subscriptions and coach subscriptions | Name, email, billing details, transaction data (we never see full card numbers) | UK/EU and USA | UK Extension to the Data Privacy Framework. SCCs/UK Addendum as back-up |
| Resend (Plus Five Five, Inc.) | Transactional and service emails | Name, email address, email content | USA | UK Extension to the Data Privacy Framework. SCCs/UK Addendum as back-up |
| Twilio Inc. | SMS and WhatsApp messages you choose to receive | Phone number, message content | USA and global | UK Extension to the Data Privacy Framework. Twilio's Binding Corporate Rules and SCCs/IDTA as back-up |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Technical error data, device data, IP address (health data removed before it leaves your device; no session replay) | USA | UK Extension to the Data Privacy Framework. SCCs/UK Addendum as back-up |
| Meta Platforms Ireland Ltd / Meta Platforms, Inc. | Meta Pixel advertising measurement, marketing website only and only with cookie consent | Cookie identifiers, pages visited on our marketing site, IP address. Never health data | USA/Ireland | EU SCCs with the UK Addendum (Meta data transfer terms) |
Independent controllers (not our processors)
These organisations receive personal data but decide for themselves how to use it, under their own privacy policies:
| Organisation | When |
|---|---|
| Apple (App Store, Apple Health, push notifications) | If you use iPhone or connect Apple Health |
| Google (Google Play, Health Connect, push notifications) | If you use Android or connect Health Connect |
| Garmin | If you connect Garmin (including workouts we send at your request) |
| Dexcom | If you connect a Dexcom monitor |
| Abbott (LibreView / LibreLinkUp) | If you connect a FreeStyle Libre monitor |
| Google and Microsoft calendars | If a coach connects their calendar for bookings |
| Stripe (for its own fraud prevention and legal duties, and as payment provider to coaches via Stripe Connect) | When you pay through Stripe |
| Your personal trainer | If you connect a coach (see Privacy Policy section 9) |
| HM Revenue & Customs | Annual reporting of coaches' platform income, where required by law |
Questions: hello@getalex.app.