Anido Subprocessors
These are the companies that help us run Anido and may process personal information for us. They may use it only to provide their service to us, under a written contract. We'll update this page before we add or replace a subprocessor that handles health information. We update this page at least 30 days before a new subprocessor starts handling your information, and we tell account holders in the app. To also get an email, write to privacy@anidoapp.com.
Anido's data is stored in the United States. If you live elsewhere, your information is transferred to the United States. See Privacy Policy, section 11.
01Subprocessors
| Vendor | Purpose | Data | Location | Transfer mechanism | Status |
|---|---|---|---|---|---|
| Vercel Inc. | Web hosting and serverless functions | All web app traffic, including health information in transit | United States | EU-U.S. Data Privacy Framework; Standard Contractual Clauses (SCCs) | Confirmed |
| Supabase Inc. | Database and sign-in | All account and care circle data, including health information | United States | SCCs | Confirmed |
| Supabase Inc. (Storage) | File storage for documents and photos | Scanned documents, photos | United States | SCCs | Proposed |
| Resend Inc. | Service emails: sign-in codes, daily digest, notices | Email address, name, email content (no lab values or diagnoses) | United States | EU-U.S. Data Privacy Framework; SCCs | Confirmed |
| Vercel AI Gateway (Vercel Inc.), which sends the request to Anthropic PBC (Claude) | AI summaries, only if you allow them | Document content, without the elder's profile details | United States | SCCs | Proposed |
| Calyx Analytics operated by Orchid Media LLC | Product analytics, only if you opt in | Pseudonymous usage events, no health information | Confirmed (location and contract to confirm) | ||
| Calyx Analytics (our own tool, operated by Orchid Media LLC) (Amplitude or Mixpanel) | Product analytics, only if you opt in | Pseudonymous usage events, no health information | To be selected | ||
| Sentry (Functional Software, Inc.) | Crash reports | Technical details of the crash, with personal and health details removed | To be selected | ||
| Apple Inc. (Apple Push Notification service) | Push notifications on iPhone | Push token, short notification text | United States | Confirmed | |
| Google LLC (Firebase Cloud Messaging) | Push notifications on Android | Push token, short notification text | United States | EU-U.S. Data Privacy Framework; SCCs | Confirmed |
| on-device text recognition (Apple Vision on iOS, Google ML Kit on Android) | Reading text from scanned documents | Document images | On your device (no transfer) | To be selected | |
| Google Workspace (Gmail), our email inbox | Answering support emails | Your messages and anything you attach | To be selected |
02Services you choose to use
These companies are not our subprocessors. They act under their own privacy policies when you choose to use them.
| Company | What happens | Status |
|---|---|---|
| Apple (Sign in with Apple) and Google (Google Sign-In) | They confirm who you are when you choose to sign in with them | Confirmed |
| Apple Maps and Google Maps | They receive a visit's address when you tap it to open a map | Confirmed |
| App Store and Google Play | They handle downloads and app reviews | Confirmed |
| Meta, Google and TikTok (only on our public marketing website, after cookie consent) | They receive install, first open and account created events with a device ID and IP address, only if you turn on Ad measurement. Never health information. | To be selected |
03What "status" means
- Confirmed: we use this company today.
- Proposed: we plan to use this company; we'll confirm before it handles your data.
- To be selected: we haven't chosen the company yet. We'll name it here before it handles your data.