Tadween
Subprocessors
Version of 19 October 2026 · in force
A working draft, to be replaced by lawyer-reviewed wording. When it is, you'll be asked to read and accept the new version.
Who processes data for Tadween
These companies process personal data on our behalf to run Tadween. Gym admins are told before one is added or replaced.
| Company | What for | Data it receives | Where |
|---|---|---|---|
| Vercel | Hosting, edge network and scheduled jobs | Everything in transit; request logs (IP addresses, paths) | Global edge; functions near the database |
| Neon | Database and backups | All stored data | Chosen at set-up |
| Resend | Recipient email and name; the email's text | US/EU | |
| Sentry | Error tracking (optional) | Error type, a scrubbed message, the stack and the route; no request bodies, users or IP addresses | US/EU (chosen) |
| Anthropic | AI features (off for each gym unless an admin turns them on) | No-sale reasons and report figures, with names masked and emails and numbers removed; nothing stored | US |
| Browser push services (Google, Mozilla, Apple, Microsoft) | Push notifications | An encrypted notification, readable only by the device | Global |
Coming changes
None announced.
Gym admins are told at least 30 days before a change takes effect, and may object before then.
All versions
- 19 October 2026 · minor change: First version.