List of subprocessors
The providers that process data on behalf of CheckerFit. Cells marked “being verified” are completed by reading each provider’s current terms and filing the agreement; nothing here is from memory.
Providers
| Provider | Function | Data it receives | Region | Provider retention | Agreement |
|---|---|---|---|---|---|
| Supabase | Database, photo storage | Everything: identity, check-ins, photos, records | USA (project region) | While the data exists; backups being verified | Click-through, being filed |
| Anthropic | AI reading (vision and text) | Photos (face pixelated, no metadata), measurements, habits, substances; opaque client id | USA | API input/output retention being verified | Commercial terms and DPA, being filed |
| Railway | Hosting of the bot, the API and the website | Traffic in transit, logs (no photos except in transit) | USA | Logs, being verified | Being verified |
| Cloudflare | DNS for the domain; private mirror of the photo storage (R2) | DNS lookups; copies of the check-in photos | USA (R2 region: eastern North America) | Mirror copies expire 30 days after erasure | Click-through, being filed |
| n8n Cloud | Workflow orchestration | Everything that passes through the workflows, in transit; failed runs are kept and erased on a schedule | Being verified | Failed runs only, erased on a schedule; being verified | Click-through, being verified |
| CloudConvert | PDF and composite generation | Report HTML with embedded photos | Being verified (EU or USA) | States files are deleted within 24 h; being confirmed | Being verified |
| Stripe | Payments | Coach payment data; never client data | USA | According to tax obligations | Stripe DPA, being filed |
| Resend | Transactional email | Email, name, notice content (no photos; authenticated links) | USA | Sending logs, being verified | Being verified |
| Discord | Optional mirror channel | Messages, IDs and notices with links to checkerfit.com. No photo or comparison image is posted there: they open on checkerfit.com. The PDF report is neither attached nor linked as a file: the notice links to the client’s space, where it opens. Check-in photos are not accepted through Discord: a file a user posts there anyway is received by Discord as sent, and the bot removes it without processing it; Discord keeps it under its own policy | USA | According to Discord; not controllable | Developer Terms (no DPA) |
Erasure on request
When CheckerFit erases a client, it erases the data in Supabase and the mirror in Cloudflare R2 itself. For providers that keep copies under their own retention (Anthropic, CloudConvert, Resend), the erasure request is passed on to them as their terms allow; Discord does not guarantee erasure and is not an official copy of anything.
Not on this list
Krea (visual generation for the website) does not receive client data. If it were ever used on real photos, it would join this list and the sharing consent would be updated first.
Changes
A new provider is announced 30 days before it starts processing data. This page is the list of record; its version and date are shown at the top.
Operated by Roman & Goderich Investment LLC, Florida, United States. Questions about these documents: legal@checkerfit.com. Privacy requests: privacy@checkerfit.com.