Version 2026-05-13
Subprocessors
Current status
This list describes current and planned processors/subprocessors. Exact legal roles and transfer safeguards must be confirmed before production launch.
Processor categories
TO BE CHANGED: Hosting provider - app hosting, logs, network traffic, and infrastructure metadata.
TO BE CHANGED: PostgreSQL database provider - account, profile, activity, social, consent, and planning records.
TO BE CHANGED: Object storage/S3 provider - raw FIT files, profile images, generated map previews, and export archives.
Authentication provider - authentication, sessions, email confirmation, password reset, and identity records.
AI provider - minimized AI prompts and outputs when AI consent is enabled.
External training providers - workout, activity, and threshold import/export when enabled by the user.
TO BE CHANGED: Map/tile provider - map tiles/style requests and possible route rendering context.
TO BE CHANGED: Email provider - transactional account and privacy emails.
TO BE CHANGED: Payment provider/app stores - only if paid plans launch.
Changes
Aelyra will update this list before adding a provider that processes production personal data.
Related documents
- Imprint
- Terms of Service
- Privacy Policy
- Cookie Notice
- Open Source Notices
- Pricing
- Cancellation
- Withdrawal Information
- Community Guidelines
- DSA Notice and Action
- AI Notice
- Accessibility Statement
- Subprocessors
- Data Retention
- Security
Draft for legal review. Replace all TO BE CHANGED values before production launch.