Legal
Subprocessors
Last updated: October 4, 2026
Current subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| OVH | Hosting, infrastructure, and database | App data, logs, workspace and client data | Canada |
| Cloudflare | Object storage, image delivery, marketing site hosting, and protection against automated abuse | Uploaded files (progress photos, attachments), waitlist email addresses, request and connection metadata | Western Europe (storage); global network (delivery) |
| Ably | Real-time messaging and push notification delivery | Message and notification content, user identifiers, device push tokens | Global network |
| Apple | Push notification delivery to iOS devices | Notification content, device push tokens | US |
| Superwall | Subscription screens in the iOS app | User identifier, device data, purchase events | US |
| Telegram | Notifications and assistant messages (when a coach links Telegram) | Message content, Telegram chat identifier | Global network |
| Intercom | Customer support chat and support email | Support conversations, user ID, name and email of the person contacting support, device push tokens in the iOS app, and a visitor identifier and pages viewed on the marketing site once cookies are allowed | US |
| Resend | Transactional email | Names, emails, email metadata | US |
| Polar | Straton subscription billing | Billing and subscription metadata | EU / US |
| Stripe | Coach-connected payments (when enabled by coach) | Payment metadata | EU / US |
| PostHog | Product analytics, feature flags, and crash/error reporting | Usage events, crash/error diagnostics, session replay, device data, IP address, user ID, and the name and email of account holders (not of a coach's clients) | EU Cloud |
| Amazon Web Services, OpenAI, and Cloudflare | AI-assisted features, running OpenAI and open models | Selected content needed for AI features (no-training policy) | US |
Analytics requests from your browser are sent to s.straton.fit, an address on our own domain that PostHog operates and forwards to its EU Cloud. Traffic to that address is PostHog analytics, not a separate service.
Notification of changes
When Straton adds or replaces a subprocessor, the change will be reflected on this page with at least 30 days' notice. Customers on subscriber lists will be notified by email.
To receive subprocessor change notifications, subscribe at privacy@straton.fit.
If a customer objects to a new subprocessor for legitimate reasons, contact privacy@straton.fit to discuss.