Service Providers

Cozy Check-ins is a small company, so we rely on a handful of trusted providers to store data, deliver messages, and take payments. This page lists every one of them, what it does for you, and what information it handles. Each provider may use your information only to provide its service to us — never for its own marketing, never to sell. If we add or replace a provider, we update this page and the date above.

• Supabase

  Where: United States

  What it does: Database, sign-in, file storage, and the server functions that schedule reminders and alerts.

  What it handles: All account and check-in data: names, phone numbers, emails, check-in history, consent records, optional photos.

• Backblaze

  Where: United States

  What it does: Keeps our nightly backup copies in a locked vault, so the service can be restored after an attack or an outage.

  What it handles: An encrypted copy of the database and uploaded photos. It is locked with a key only we hold, kept offline, so Backblaze cannot read it. Each copy is deleted automatically within 35 days.

• Twilio

  Where: United States

  What it does: Checks whether a phone number is an internet-only number (like Google Voice) before a free trial starts. WhatsApp delivery of check-in reminders and alerts (coming soon), and the replies to them.

  What it handles: Phone numbers, message text, delivery status.

• Telnyx

  Where: United States

  What it does: Sends and receives SMS text messages, and places the automated phone calls: daily phone-call check-ins, reminder calls after a missed check-in, and masked calls for organizations.

  What it handles: Phone numbers, message text and delivery status; for calls, the key pressed (1 or 9), call time and duration, and the result. Calls are never recorded.

• Meta (WhatsApp Business)

  Where: United States / Meta global infrastructure

  What it does: Hosts our WhatsApp support inbox (the number you message for help). Once WhatsApp check-ins start (coming soon), it also runs the WhatsApp network that carries them.

  What it handles: Phone numbers, message text, delivery status; for the support inbox, what you write to us.

• Apple, Google, and Mozilla push services

  Where: United States

  What it does: Deliver push notifications to phones and browsers when you turn them on.

  What it handles: An anonymous device token and the short notification text. No phone numbers.

• Resend

  Where: United States

  What it does: Sends account emails — sign-in links, invitations, alerts by email, and the daily digest for organizations.

  What it handles: Email addresses and the email content.

• Stripe

  Where: United States

  What it does: Processes subscription payments.

  What it handles: Card details and billing information go directly to Stripe. We store only a customer reference and subscription status — never your full card number.

• Cloudflare

  Where: Global edge network

  What it does: Hosts and serves the Cozy Check-ins web app, and protects it from bots and abuse (Turnstile).

  What it handles: Network information such as IP address and browser type while you load a page; app traffic passes through Cloudflare's network.

• Sentry

  Where: United States

  What it does: Tells us when something breaks so we can fix it.

  What it handles: Error reports with technical details. Phone numbers and check-in links are scrubbed before anything is sent.

• PostHog

  Where: United States

  What it does: Counts visits to our public pages: which page, where the visit came from (for example Google), and how long the page stayed open.

  What it handles: Page address with codes removed, the site the visit came from, browser and device type, and time on page. Nothing stored on your device, no profiles, no recordings, no typed text, and nothing from signed-in pages or the app.

• Anthropic

  Where: United States

  What it does: Powers the Phone Help helper for family members, and the AI assistants Cozy staff use to triage support tickets and watch the service.

  What it handles: Phone Help: only what you type — the question, the senior's first name and phone model. Staff assistants: support ticket text and service status. No check-in history.

• Google (Gemini, via Lovable's AI gateway)

  Where: United States

  What it does: Powers the senior's own optional Phone Help assistant (Hometown Plus) that gives step-by-step help with her phone, including reading a screenshot she chooses to send.

  What it handles: Only what she types or uploads into Phone Help: the question, an optional screenshot, her first name, and her phone model. No phone numbers or check-in history. The request passes through Lovable's AI gateway on its way to Google.

• Lovable

  Where: United States / European Union

  What it does: The platform we build and deploy the app on. Our Stripe requests are routed through Lovable's managed-payments gateway, and the senior's Phone Help requests through Lovable's AI gateway to Google.

  What it handles: Application code; the billing requests we send to Stripe (your email, plan, and subscription status); and the senior's Phone Help question and optional screenshot on their way to Google. Card numbers are entered directly into Stripe and never pass through Lovable.

What never happens

• We never sell personal information.
• Mobile phone numbers and SMS opt-in or consent data are never shared with third parties or affiliates for marketing or promotional purposes.
• No provider may use your information for its own purposes, for advertising, or to train AI models on your data.
• We do not use advertising networks, ad pixels, or data brokers.

Data location

Your information is stored in the United States. If you live in Mexico, your data is transferred to and stored in the US with your consent, and you can exercise your ARCO rights (access, rectification, cancellation, opposition) by writing to support@cozycheckins.com; a family owner can also make requests on our privacy & data access page. Our Privacy Policy explains how requests work.

This page is part of our Privacy Policy.