Sub-processors
Last updated: October 10, 2026
About This List
"NomyNoms" uses third-party service providers (sub-processors) to help deliver our service. This page provides transparency about who these providers are and what data they may process on our behalf.
For more details about how we handle your data, please see our Privacy Policy.
Current Sub-processors
| Provider | Purpose | Location | Data Processed | Privacy |
|---|---|---|---|---|
| Supabase | Database, sign in and photo storage | United States | Account, profile, food, weight, training and Health Connect data, photos | View |
| Vercel | Server and website hosting | United States | Request logs, which can include your user id | View |
| Anthropic | AI features (coach, recipe import, nutrition, scans, daily summaries) | United States | What each feature needs: questions, food, weight, training and Health Connect day summaries, recipe pages, scan photos | View |
| Voyage AI | Search index for recipes and exercise search | United States | Recipe text and exercise search words | View |
| Sign in with Google, speech for voice commands, ML Kit for barcode scans, Android backup | United States | Email, name and picture (sign in), voice (speech), device and app information with an install id (ML Kit), app data (backup, if on) | View | |
| PostHog | Product analytics for recipe imports | United States | User id and the recipe import event | View |
| Withings | Smart scale connection (only if you connect it) | France | Weight and body measurements | View |
| Resend | United States | Email address, name, email content | View | |
| Upstash | Cache and rate limits | United States | User id in rate limit keys, short lived cached plans and lists | View |
| Sentry | Server error reports | United States | Error details, which can include your user id | View |
| Instacart | Shopping list hand off (only when you choose it) | United States | Shopping list items | View |
Data Processing Agreements
We have Data Processing Agreements (DPAs) or equivalent contractual arrangements with all sub-processors to ensure they handle your data in accordance with applicable data protection laws, including GDPR.
International Data Transfers
All our sub-processors are based in the United States. For users in the European Economic Area (EEA), UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for your data.
Changes to Sub-processors
We may update this list from time to time as we add or remove sub-processors. Material changes will be communicated via:
- Email notification to registered users
- Update to this page with a new "Last updated" date
If you have concerns about a new sub-processor, please contact us within 30 days of the notification.
Your Rights
You have the right to:
- Know which sub-processors handle your data
- Object to new sub-processors (subject to our policies)
- Request information about data processing activities
- Exercise your data subject rights as outlined in our Privacy Policy
Contact
Questions about our sub-processors? Email us at hello@nomynoms.com