Subprocessors
Life Maintenance · lifemaintenance.io
Effective September 7, 2026 · Version 1.0
The short version: these are the companies that handle any part of your data on our behalf, what each one receives, and where they process it. Anything marked optional only applies if you use the feature it belongs to.
Companies that process your data
Each of these acts on our instructions under a written agreement, and only for the purpose named. They are not permitted to use your data for their own purposes. This list is the same data the summary table in the Privacy Policy renders, so the two cannot disagree.
| Company | Purpose | What they receive | Where |
|---|---|---|---|
| Supabase (on AWS) | Database, authentication, file storage, and background jobs | All account and application data, stored in their infrastructure | United States |
| Vercel | Website and web application hosting | Requests to the site, including IP address and browser type | United States |
| Stripe | Payments and subscriptions on the web | Your email address and subscription status. Stripe collects card details directly; we never receive them. | United States |
| Apple Optional | In-app purchases and Sign in with Apple | Purchase receipts and, if you use Sign in with Apple, your name and email address | United States |
| Google Play Optional | In-app purchases on Android | Purchase tokens and subscription status | United States |
| Resend | Sending email | Your email address and the content of the emails we send you | United States |
| Twilio Optional | Sending text message reminders | Your phone number and the content of the reminder | United States |
| Expo | Mobile app infrastructure and push notifications | Your device push token and the content of the notification | United States |
| Anthropic Optional | The in-app assistant | Your messages to the assistant, any photo you attach, and the parts of your data needed to answer. Anthropic does not use it to train their models. | United States |
| Google (Sign-In and Calendar) Optional | Optional sign-in, and optional two-way calendar sync | For sign-in, your name, email, and profile picture come to us. For calendar sync, the maintenance events you choose to sync go to your Google Calendar. | United States |
| PostHog Optional | Product analytics | Page views, feature interactions, device type, and a random identifier. No item content, health information, or payment data. | United States |
| Sentry | Crash and error reporting | Diagnostic reports: the error, the app state, and device details. Not intended to include your content. | United States |
| Google (Analytics, Ads, Tag Manager) Optional | Website analytics and measuring whether an ad led to a signup | Website page views, and on conversion a one-way hash of your email address. Only when you accept analytics or advertising cookies. | United States |
| Meta Optional | Measuring whether an ad led to a signup | On conversion, a one-way hash of your email address. Only when you accept advertising cookies. | United States |
| Nextdoor Optional | Measuring whether an ad led to a signup | Website page views and signup events. Only when you accept advertising cookies. | United States |
| HERE and OpenStreetMap Optional | Address and business lookup while you type | The address text you type into a lookup field | United States and European Union |
| Pl@ntNet Optional | Identifying a plant from a photo | The plant photo you submit for identification | European Union |
Reference lookups that receive no personal information
The Service queries these to fill in product and reference details. They receive information about a product, never about you: no account identifier, no name, no email address. They are listed here for completeness rather than because they process personal data.
| Service | Purpose | What is sent |
|---|---|---|
| Best Buy and UPCitemdb | Product details and images for an item you are adding | The brand and model number of the product |
| NHTSA (vPIC and recalls) | Decoding a vehicle and checking for open recalls | A vehicle identification number, or a make, model, and year |
| Consumer Product Safety Commission | Checking for product recalls | A brand and model number |
| NPI Registry | Looking up a healthcare provider by name | The provider's name and location, never the patient's |
| RxNorm | Recognising a medication name you typed | The medication name alone, with no person attached |
Changes to this list
We update this page when we add or remove a company that processes your data. If you would like to be told in advance of a change, write to privacy@lifemaintenance.io and we will add you to the notice list.
Data processing agreements
If you need a data processing agreement, for example because you use Life Maintenance in a business or an institution, write to privacy@lifemaintenance.io and we will send one.
Revision history
- 2026-09-07 · Version 1.0
First published version.