Data Processors
Last updated: October 21, 2026 · Back to Privacy Policy
This is a complete list of third-party services that process your data on Amplify's behalf. Each vendor's role, the data they receive, and their retention policy is listed below. When we add a new processor or a vendor materially changes their policy, we update this page and — for material changes — notify you by email.
We do not sell your data, and we don't train AI models on it. Anthropic, OpenAI and Deepgram don't either; Google may use what Gemini receives to improve its models.
| Vendor | What they do | Data shared | Retention |
|---|---|---|---|
Supabase Supabase, Inc. Privacy policy → | Database, authentication, real-time services | All your Amplify account data (goals, projects, tasks, events, habits, AI conversations, preferences) | Until you delete your account |
Vercel Vercel Inc. Privacy policy → | Application hosting and serverless function execution | HTTP request logs (no account content) | 30 days for logs |
Stripe Stripe, Inc. Privacy policy → | Payment processing and subscription management | Name, email, billing address, card details (collected directly by Stripe — never touches our servers) | Per Stripe's retention policy |
Google Gemini Google LLC Privacy policy → | AI text and voice reasoning; a weekly suggestion for people who used Amplify that week | Your AI messages, relevant account context (goals, projects, upcoming events), a weekly summary of goals, habits and calendar; in web voice conversations this reaches Gemini through Deepgram | Per Google's API terms. Google may use what it receives to improve its products and train its AI models. |
Anthropic Claude Anthropic PBC Privacy policy → | Weekly planning, goal restructuring and schedule setup requests; answers a text request when Gemini returns an error | Your AI messages, relevant account context | 30 days default for abuse monitoring. Not used for training. |
Deepgram Deepgram, Inc. Privacy policy → | Voice speech-to-text and text-to-speech; runs the web voice conversation and passes it to Google Gemini | Voice audio, the assistant's replies, and in web voice conversations the account context the assistant uses | Only as long as it takes to process each request. We opt out of its Model Improvement Program on every request, so it doesn't train on your data. |
Google Calendar Google LLC Privacy policy → | Two-way calendar synchronization (opt-in) | Calendar events you explicitly authorize | While the integration remains connected |
Microsoft Outlook Microsoft Corporation Privacy policy → | Read-only import of your Outlook or Microsoft 365 calendars (opt-in) | Nothing is sent to Microsoft beyond the sign-in grant; we read your calendars and your account's name and email while connected | Imported events and the encrypted tokens are kept while connected, and deleted when you disconnect or delete your account |
Apple Calendar (iCloud) Apple Inc. Privacy policy → | Read-only import of your iCloud calendars (opt-in) | Your Apple ID email and the app-specific password you created, sent to iCloud to sign in; we read your calendars while connected | Imported events and the encrypted password are kept while connected, and deleted when you disconnect or delete your account |
Resend Resend, Inc. Privacy policy → | Transactional email delivery (receipts, password resets, security alerts) | Your email address, message content | Per Resend's retention policy |
OpenAI OpenAI, L.L.C. Privacy policy → | Live voice mode (speech in, speech out), only when it is turned on for your account | Your voice while a live session is open, the assistant's replies, relevant account context for the conversation | Per OpenAI's API data policy; not used for training |
WHOOP WHOOP, Inc. Privacy policy → | Wearable data (opt-in): recovery, sleep, strain and workouts feed the daily score and check-in | Nothing is sent to WHOOP beyond the OAuth grant; we read your data from WHOOP while connected | Stored while the integration is connected; revoked and deleted with your account |
Apple Push Notification service Apple Inc. Privacy policy → | Wakes the iPhone companion app when your blocking schedule or focus session changes | A device push token; the notification carries no account content | Token only while the app is installed |
Web push (your browser's push service) Apple, Google or Mozilla, depending on your browser Privacy policy → | Browser notifications for reminders and the daily brief, if you turn them on | A push endpoint and the notification text | Until you turn notifications off or delete your account |
Google Analytics Google LLC Privacy policy → | Page-view counts on our public pages, only if you allow cookies | Pages visited, browser and device details, an analytics cookie ID; nothing from inside the app | Per the data retention setting of our Google Analytics property |
Meta Pixel Meta Platforms, Inc. Privacy policy → | Ad measurement on our public pages (not sign-in or checkout), only if you allow cookies | Pages visited, browser and device details, a Meta cookie ID; nothing from inside the app | Per Meta's privacy policy |
Google Maps Distance Matrix Google LLC Privacy policy → | Travel-time estimates between event locations, so the schedule leaves room to get there | The two locations being compared | Per Google's API terms |
Questions? Email privacy@amplifyproductivity.com.