Subprocessors
Effective 1 September 2026. Version 2026-09-01.
The companies below process personal data on behalf of Trailwise. Each one is bound by a data-processing agreement, processes data only for the purpose stated, and is listed with its location and the transfer safeguard where data leaves the European Economic Area. We update this page before adding a subprocessor; if you want to be told by email, write to privacy@trailwise.coach.
| Subprocessor | Purpose | Location of processing | Transfer safeguard |
|---|---|---|---|
| Google Cloud (Google Ireland Ltd) | Hosting, database, storage and backups for the whole service | European Union | Not applicable (data stays in the EU); Standard Contractual Clauses for remote support access |
| Anthropic PBC | The language model behind Trailly; receives the data needed for each answer; contractually barred from training on it; inputs and outputs retained only as long as needed, with limited retention for trust and safety | United States | EU-US Data Privacy Framework certification and Standard Contractual Clauses |
| Stripe Payments Europe Ltd and Stripe Inc | Payments, invoices, subscription management; holds card details so that Trailwise never does | European Union and United States | EU-US Data Privacy Framework certification and Standard Contractual Clauses |
| Resend Inc | Sending transactional email: sign-in links, confirmations, digests, alerts | United States | Standard Contractual Clauses |
| Backblaze Inc | Encrypted off-site copies of the database backups, kept on a daily, weekly and monthly rotation; every copy is encrypted before upload with a key Backblaze never holds | United States | Standard Contractual Clauses |
| Google Ireland Ltd (Google Analytics 4) | Usage statistics on the website and in the app, only if you accept analytics cookies; IP anonymised, advertising features off | European Union and United States | EU-US Data Privacy Framework certification |
| Linear Orbit Inc | Support cases and bug reports you send us, with the technical context you attach | United States | Standard Contractual Clauses |
| MapTiler AG | Map tiles for the weather and route pages; receives your IP address and the map area viewed | Switzerland | EU adequacy decision for Switzerland |
| OpenWeather Ltd | Precipitation map layer and forecasts; receives your IP address and the map area or place requested | United Kingdom | EU adequacy decision for the United Kingdom |
| Open-Meteo | Weather forecasts and place search for the location you choose; receives the coordinates or place name | Switzerland and European Union | EU adequacy decision for Switzerland |
| OpenStreetMap Foundation (Nominatim) | Converting a race location name into coordinates; receives the place name only | United Kingdom and European Union | EU adequacy decision for the United Kingdom |
| Apple Distribution International Ltd | Distribution of the iOS app and push notifications on iPhone | European Union and United States | EU-US Data Privacy Framework certification |
| Google Ireland Ltd (Google Play) | Distribution of the Android app and push notifications on Android | European Union and United States | EU-US Data Privacy Framework certification |
Services you connect (not subprocessors)
Garmin, Strava, Polar, Whoop, Oura, Withings, Fitbit, Intervals.icu, Apple Health, Google Health Connect, Google Calendar, iCloud Calendar and RunSignup are not subprocessors: they send data to Trailwise on your instruction, under their own terms and privacy notices, and Trailwise sends nothing back except calendar events you ask us to create. You can disconnect any of them at any time.
Last updated 1 September 2026.