Lovable Cloud (Supabase)
- Purpose
- Hosting, database, and account authentication.
- Data handled
- For account holders: email and saved health maps. For anonymous visitors: nothing is stored.
- Region
- United States
- Privacy policy
- supabase.com/privacy
Subprocessors
In development, not yet legally reviewed.
This page lists the third-party services Tender Health uses and what each one handles. It reflects our current setup but has not been reviewed by a lawyer. A finalized subprocessor list will be published before Tender Health opens to the wider public.
What is a subprocessor?
A subprocessor is any outside company we rely on to run Tender Health. Some handle hosting, some handle the AI that builds your health map, some handle email. We keep this list short on purpose and only add a service when it’s necessary.
Current list
Lovable AI Gateway
- Purpose
- Routes our Practice Room debrief request through Lovable's infrastructure to Google's Gemini model, rather than calling Google directly.
- Data handled
- The practice-conversation transcript and your health map's concern names and goals, used only to generate the post-practice debrief. Not used to train Google's models.
- Region
- Not publicly specified.
- Privacy policy
- lovable.dev/privacy
Anthropic (Claude)
- Purpose
- Generates Your Health Map from what you share, and asks gap-filling follow-up questions.
- Data handled
- The text you share to build your health map, plus any follow-up answers. Not used to train Anthropic's models.
- Region
- Not publicly specified.
- Privacy policy
- anthropic.com/legal/privacy
ElevenLabs
- Purpose
- Powers the live voice conversation with Dr. Dean in the Practice Room.
- Data handled
- Your live microphone audio, streamed directly to ElevenLabs for the length of the call. Practice sessions are never saved by Tender Health.
- Region
- Not publicly specified. ElevenLabs operates under the EU-US Data Privacy Framework.
- Privacy policy
- elevenlabs.io/privacy-policy
Lovable Emails (Mailgun)
- Purpose
- Sends stay connected confirmations, account emails, and privacy request replies.
- Data handled
- Your email address and the content of the email being sent.
- Region
- United States
- Privacy policy
- mailgun.com/legal/privacy-policy
Plausible Analytics
- Purpose
- Counts page views so we know which parts of the site are used. Cookieless and does not track you across sites.
- Data handled
- Aggregate only: page URL, referrer, country, browser. No personal information.
- Region
- European Union
- Privacy policy
- plausible.io/data-policy
Changes to this list
If we add or change a subprocessor, we’ll update this page. Once Tender Health opens to the wider public, material changes will be announced by email to account holders.
Questions or requests
You can make a privacy request at any time, or email Ashley at ajones@tenderhealth.ca.
This list describes our current setup and is not legal advice. It has not yet been reviewed by a lawyer. A finalized version will be published before Tender Health is opened to the wider public.