Sub-processors
Effective 18 October 2026 · Last updated 23 October 2026
These companies process personal data on our behalf to run Spotter. Each is bound by a contract with data protection and security commitments.
1. Current sub-processors
| Company | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting (Lambda, CloudFront), file storage (S3), email (SES), queues and scheduled jobs, logs | All Spotter data | Singapore (ap-southeast-1); email (SES) in US East (N. Virginia); CDN edge locations worldwide |
| Neon, Inc. | Managed Postgres database | All database records | AWS Singapore region |
| Clerk, Inc. | Sign-in, accounts and sessions | Name, email, password hash, profile photo, sign-in IP and device | United States |
| Stripe, Inc. and Stripe Payments Europe, Ltd. | Coach subscription payments, invoices, Customer Portal | Coach name, email, billing details, payment method | United States, European Union |
| Anthropic, PBC | AI features (Pro, Elite and Spotter Plus): reading workout plan files, generating plans from a short brief, and answering questions about a workout plan | Plan files a coach or member uploads; generator briefs (goal, days, equipment, level, injuries or limits); questions and answers in the plan chat, with the client's first name, goal, current workout plan and last 2 weeks of logged workouts. Not used to train AI models | United States |
| RevenueCat, Inc. | Spotter Plus in-app subscriptions: checks App Store and Google Play purchases and tells Spotter the subscription status | Spotter account id, store purchase and subscription records (product, dates, status, country, store transaction ids). No card details | United States |
| Apple Inc. and Google LLC | App Store and Google Play: sell and bill Spotter Plus subscriptions, cancellations and refunds (they are the merchant of record) | Your store account and payment details stay with Apple or Google; Spotter gets subscription status only | United States and worldwide |
2. Services you choose to connect
- Google Calendar, Apple Calendar or any other calendar app: only if you subscribe to your own Spotter calendar feed. That app then fetches your session times, names and locations. They act under your agreement with them, not ours.
- WhatsApp: buttons open WhatsApp with a ready-made message. Spotter sends no data to WhatsApp.
- YouTube, Vimeo: videos a coach embeds on their page load from those services when played.
- wger.de: a few library exercises have a demo video hosted by wger.de, which loads from their servers only when you press play. See credits.
3. Changes
We update this page before a new sub-processor starts handling personal data. Coaches who want notice of changes can email dev@nexuf.io to subscribe and may object as described in our data processing terms.