Trust
Subprocessors
These are every third party that can touch personal data on our behalf. Each is bound by a data processing agreement, and each is listed with the safeguard we rely on for any transfer outside the UK, EEA or India.
Current subprocessors
| Provider | Purpose | Data handled | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase (via Lovable Cloud) | Application database, authentication and file storage | Account details, profiles, sport data, media, messages | EU / regional cloud regions | Standard Contractual Clauses / UK IDTA |
| Cloudflare | Application hosting, edge delivery, DDoS protection and network security | Request metadata, IP addresses | Global edge network | Standard Contractual Clauses / UK IDTA |
| Resend | Transactional and notification email delivery | Name, email address, message content | United States / EU | Standard Contractual Clauses / UK IDTA |
| Stripe | Payment processing and subscription billing | Billing contact, payment metadata (no card data reaches us) | United States / EU | Standard Contractual Clauses / UK IDTA |
| Lovable AI Gateway | AI-assisted assessment summaries, triage and recommendations | Sport profile and assessment content submitted for analysis | United States / EU | Standard Contractual Clauses / UK IDTA |
Changes to this list
We publish new subprocessors here before they start processing member data. If you would like advance notice by email, tell us at privacy@striide.app. See also the privacy commitments for our processing register.