Sub-processors
Last updated: 3 June 2026
To run BetterStep we rely on a small number of trusted service providers ("sub-processors") that process your data on our behalf. Some of that processing happens outside Georgia. This notice lists who they are, what they do, and where your data goes. It supplements, and should be read together with, our Privacy Policy and Consumer Health Data Policy.
Service providers we use
• OpenAI (USA) — our main AI: onboarding/profile analysis, task generation and AI chat. Receives your free text (journal & reflections, chat messages, onboarding answers). • Anthropic (USA) — a legacy AI chat path. Receives chat text. • Terra (USA) — connects your wearables and health platforms (Apple Health, Fitbit, Garmin, Oura, Whoop, etc.). Receives the biometrics you authorise (heart rate, HRV, sleep, steps, calories, SpO2, temperature, body composition). • Sentry (EU — Germany) — error monitoring. Receives crash/diagnostic data and technical metadata. • Google Firebase Cloud Messaging (USA) — push notifications. Receives your device push token. • Google Sign-In / Apple Sign-In (USA) — social login. Receives your email and basic profile. • SendGrid (USA) — transactional email. Receives your email address and message content. • ElevenLabs (USA) — text-to-speech for in-app prompt audio. Receives app/assistant text only — not your voice (we don't record it). • MongoDB & hosting (USA) — our database and servers store and process your data. We do not use product-analytics trackers (Amplitude, Mixpanel, Google Analytics), SMS providers, or any payment SDK. If we ever add a payment provider, it will be listed here first.
Clinicians
If you choose to enrol with a clinician, that clinician can see your name, email, recovery profile (your progress signal / tier and clean days), daily check-ins (mood, stress, cravings, sleep, slip flag) and any clinical notes. Clinicians are external organisation staff in a separate, role-based access realm, with an access audit log. This sharing is a feature you opt into — not a hidden exception.
International transfers
BetterStep's provider is based in Georgia; processing and storage happen in the USA (and the EU for error monitoring). We transfer your data on the basis of your explicit, informed consent, together with data-processing agreements with each provider. • We do not transfer any user data to China. • If you are a US resident, we disclose every recipient of your consumer health data and ask for separate consent to share before your health, journal or voice data leaves to any provider (see the Consumer Health Data Policy).
Keeping this list current
Several regulators (and Apple and Google) require this list to be accurate and up to date. We update it whenever we add or remove an integration. If you have a question about any provider, contact us below.