Sub-processors
Last updated: January 2026
About This List
"What's for Dinner?" uses third-party service providers (sub-processors) to help deliver our service. This page provides transparency about who these providers are and what data they may process on our behalf.
For more details about how we handle your data, please see our Privacy Policy.
Current Sub-processors
| Provider | Purpose | Location | Data Processed | Privacy |
|---|---|---|---|---|
| Supabase | Database, Authentication & Storage | United States | Account data, recipes, meal plans, settings | View |
| Vercel | Website Hosting & Edge Functions | United States | Request logs, performance metrics | View |
| Stripe | Payment Processing | United States | Payment details, billing address, email | View |
| Anthropic | AI Features (Recipe Parsing, Suggestions) | United States | Recipe content sent for AI processing (not retained) | View |
| Resend | Transactional Email | United States | Email address, email content | View |
| Upstash | Caching & Rate Limiting | United States | Anonymized request patterns, cache keys | View |
| OAuth Login & Calendar Integration | United States | Email (for login), calendar events (if connected) | View | |
| Sentry | Error Monitoring & Performance | United States | Error logs, anonymized usage data | View |
Data Processing Agreements
We have Data Processing Agreements (DPAs) or equivalent contractual arrangements with all sub-processors to ensure they handle your data in accordance with applicable data protection laws, including GDPR.
International Data Transfers
All our sub-processors are based in the United States. For users in the European Economic Area (EEA), UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection for your data.
Changes to Sub-processors
We may update this list from time to time as we add or remove sub-processors. Material changes will be communicated via:
- Email notification to registered users
- Update to this page with a new "Last updated" date
If you have concerns about a new sub-processor, please contact us within 30 days of the notification.
Your Rights
You have the right to:
- Know which sub-processors handle your data
- Object to new sub-processors (subject to our policies)
- Request information about data processing activities
- Exercise your data subject rights as outlined in our Privacy Policy
Contact
Questions about our sub-processors? Email us at wfd.beta@gmail.com