To run Selfbased, we rely on a set of service providers ("subprocessors") that process data on our behalf. Each one only receives the data it needs to do its job, under its own data-protection terms. This is the complete, current list — every entry here corresponds to a real integration in our codebase, and nothing processes your data that isn't on this page.
Core infrastructure
| Name | What it does | What data it receives | Where it processes | Privacy terms |
|---|---|---|---|---|
| Supabase | Database, authentication, and media storage — the app's backend | Your account details, profile, everything you log in the app, and the photos you upload | United States (AWS us-west-2, Oregon) | supabase.com/privacy |
| Vercel | Hosting for the website, web app, and API, plus anonymous web analytics | Standard request data (IP address, browser info) and aggregated page-view analytics on the web app | United States (global edge network) | vercel.com/legal/privacy-policy |
| Expo (EAS) | Mobile app builds and update delivery | App and build metadata; push notification tokens if you enable notifications | United States | expo.dev/privacy |
| Google (Sign-In & Play) | Google Sign-In, Android app distribution, and Android billing via Google Play | Your basic Google profile (name, email, picture) if you sign in with Google; purchase information on Android | United States | policies.google.com/privacy |
AI and image processing
These providers only ever receive content you actively submit to a specific feature. Nothing runs in the background. We use their developer APIs, not their consumer products.
| Name | What it does | What data it receives | Where it processes | Privacy terms |
|---|---|---|---|---|
| Google Gemini | AI photo analysis: meal photos for intake tracking, wardrobe item naming and checks | The photos you submit to those features, with our processing instructions | United States | policies.google.com/privacy |
| OpenAI | AI image generation for the Virtual Wardrobe (your avatar and outfit previews) | The face and garment photos you submit to the wardrobe, with our instructions | United States | openai.com/policies/privacy-policy |
| Anthropic | AI text analysis: stat assessments, meal descriptions you type, and goal planning | The text you type into those features — never your photos | United States | anthropic.com/legal/privacy |
| remove.bg (Kaleido AI) | Background removal for wardrobe item photos | The garment photo you submit | European Union (Austria) | remove.bg/privacy |
| Brave Search | Web research that grounds the AI goal planner in real sources | The goal text and any optional context you submit to the planner | United States | search.brave.com/help/privacy-policy |
| USDA FoodData Central & Open Food Facts | Food nutrition lookup for intake tracking | Only the food name you search for — no account data | United States / France | openfoodfacts.org/privacy |
Payments and communication
| Name | What it does | What data it receives | Where it processes | Privacy terms |
|---|---|---|---|---|
| Stripe | Payment processing for web subscriptions and donations | Your email and payment details (your card is handled by Stripe, never by us) and transaction records | United States | stripe.com/privacy |
| RevenueCat | Mobile subscription state management | An app user ID and your purchase/entitlement state from the app store | United States | revenuecat.com/privacy |
| Resend | Transactional email — account-deletion requests and bug reports reach us through it | Your email address and the contents of your request (sensitive details are redacted before sending) | United States | resend.com/legal/privacy-policy |
| Google Fonts | Font delivery on this website | Standard web-request data (IP address, browser info) when the fonts load | United States | policies.google.com/privacy |
What's deliberately missing
There are no advertising networks, ad SDKs, data brokers, or third-party marketing trackers in Selfbased — not in the app, not on this website. We don't run Google Analytics, Meta Pixel, or anything like them. If a company isn't on this page, it doesn't process your data.
Keeping this current
As Selfbased grows, this list may change. When we add or remove a subprocessor that handles personal data, we update this page and the date at the top. We recommend checking back here from time to time.
Questions
If you have questions about how any of these providers handle your data, email support@selfbased.app. You can also read how we use each of them in our Privacy Policy.