Service Providers

Cozy Check-ins is a small company, so we rely on a handful of trusted providers to store data, deliver messages, and take payments. This page lists every one of them, what it does for you, and what information it handles. Each provider may use your information only to provide its service to us — never for its own marketing, never to sell. If we add or replace a provider, we update this page and the date above.

• Supabase

  Where: United States

  What it does: Database, sign-in, file storage, and the server functions that schedule reminders and alerts.

  What it handles: All account and check-in data: names, phone numbers, emails, check-in history, consent records, optional photos.

• Twilio

  Where: United States

  What it does: Sends and receives SMS text messages, and places automated wellness calls and masked calls.

  What it handles: Phone numbers, message text, delivery status, call time and duration. Calls are never recorded.

• Meta (WhatsApp Business)

  Where: United States / Meta global infrastructure

  What it does: Delivers check-in reminders and alerts over WhatsApp, mainly to numbers in Mexico.

  What it handles: Phone numbers, message text, delivery status.

• Apple, Google, and Mozilla push services

  Where: United States

  What it does: Deliver push notifications to phones and browsers when you turn them on.

  What it handles: An anonymous device token and the short notification text. No phone numbers.

• Resend

  Where: United States

  What it does: Sends account emails — sign-in links, invitations, alerts by email, and the daily digest for organizations.

  What it handles: Email addresses and the email content.

• Stripe

  Where: United States

  What it does: Processes subscription payments.

  What it handles: Card details and billing information go directly to Stripe. We store only a customer reference and subscription status — never your full card number.

• Cloudflare

  Where: Global edge network

  What it does: Hosts and serves the Cozy Check-ins web app, and protects it from bots and abuse (Turnstile).

  What it handles: Network information such as IP address and browser type while you load a page; app traffic passes through Cloudflare's network.

• Sentry

  Where: United States

  What it does: Tells us when something breaks so we can fix it.

  What it handles: Error reports with technical details. Phone numbers and check-in links are scrubbed before anything is sent.

• PostHog

  Where: United States

  What it does: Basic product analytics — which screens are used, so we can improve them.

  What it handles: Pseudonymous usage events. No session recording, no message content, no advertising identifiers.

• Anthropic

  Where: United States

  What it does: Powers the optional Phone Help assistant (Hometown Plus) that gives a senior step-by-step help with her own phone.

  What it handles: Only what you type or upload into Phone Help: the question, an optional screenshot, the senior's first name, and her phone model. No phone numbers or check-in history.

• Lovable

  Where: United States / European Union

  What it does: The platform we build and deploy the app on. Our Stripe requests are routed through Lovable's managed-payments gateway.

  What it handles: Application code, and the billing requests we send to Stripe (your email, plan, and subscription status). Card numbers are entered directly into Stripe and never pass through Lovable.

What never happens

• We never sell personal information.
• Mobile phone numbers and SMS opt-in or consent data are never shared with third parties or affiliates for marketing or promotional purposes.
• No provider may use your information for its own purposes, for advertising, or to train AI models on your data.
• We do not use advertising networks, ad pixels, or data brokers.

Data location

Your information is stored in the United States. If you live in Mexico, your data is transferred to and stored in the US with your consent, and you can exercise your ARCO rights (access, rectification, cancellation, opposition) through our privacy & data access page.

This page is part of our Privacy Policy.