This page lists every third-party service that handles any part of your data when you use Weight Commit. Each is bound by contract to use the data only on our instructions, to retain it no longer than needed, and to apply industry-standard security controls. We do not share your data with any party not listed here.
Provider
Purpose
Data category
Jurisdiction
Vercel
Application hosting and edge compute
IP address, request headers, transient request payloads
United States (US East region only, pinned)
Supabase
Database and authentication
All account data, profile fields, health log entries, consent records
United States
Resend
Transactional email delivery
Email address, message contents, delivery metadata
United States
Sentry
Error and exception monitoring
Stack traces and request context. PII is scrubbed before send (no user_id, no form values).
United States
PostHog
Product analytics and feature usage
Anonymous event names, page views, session metadata. PII is masked on capture (no input values, allowlisted property keys only).
United States
Cloudflare
DNS and domain email routing
DNS queries, email envelope metadata for the support address
United States
What we never share
We do not share your data with data brokers, advertising networks, AI training services, social media platforms, or any party outside the list above. We do not sell your data. We do not share it for cross-context behavioral advertising.
Changes to this list
If we ever add or remove a processor, this page updates within seven days. Material changes (a new category of processor, or a processor handling a new category of data) are notified to active users in-product. Continued use after notice constitutes acceptance of the updated processor list.