Subprocessors
This page lists the third-party companies (“subprocessors”) that process data on Auserene’s behalf to operate the app. We send each one the minimum data it needs, and we choose providers for our most sensitive data based on their data-handling terms. For how this fits into our overall data practices, see our Privacy Policy.
A core principle: your raw journal entries and conversations are sent only to our language-model and embedding providers, which are contractually prohibited from training on your content. Our text-to-speech providers receive only the short generated meditation script — never your raw journal text. Our analytics, subscription, and sign-in providers never receive any note, voice note, mood entry, or conversation content.
Language model & embedding providers
These receive your journal/conversation content (decrypted in our secure server environment only to build each request) to generate the companion’s responses, reflections, and the searchable memory that gives the companion continuity. All are contractually prohibited from training on your content and delete inputs on short retention schedules (approximately 30 days or sooner).
| Provider | Purpose | Data received |
|---|---|---|
| Fireworks AI | Generates the companion’s responses, reflections and meditations, and the embeddings used for memory and recall | Session and journal content and derived context — under zero-data-retention terms: not stored after the response is generated |
Speech-to-text provider
This receives the audio of a voice note, returns the transcript, and keeps nothing. It processes audio under zero-data-retention terms, and we do not store the audio either. It never receives your written journal or conversation history.
| Provider | Purpose | Data received |
|---|---|---|
| Groq | Transcribes voice notes | Voice-note audio, transiently; zero data retention |
Image provider
For Premium Art of the day, this receives a short scene description written from the feeling of your day, with no names, people, private places, dates, or words, plus the art style you chose, and returns a picture. It never receives your journal, notes, conversations, voice, or anything that identifies you. Because nothing personal is sent, it is not used under zero-data-retention terms; the description and the image may be kept under the provider’s own policies. It may not use them for training.
| Provider | Purpose | Data received |
|---|---|---|
| Together AI(running Black Forest Labs’ FLUX model) | Paints Art of the day (Premium) | A scene description and the chosen art style; no personal content |
Text-to-speech providers
These receive only the short, generated meditation script to turn into audio. They never receive your raw journal text or conversations.
| Provider | Purpose | Data received |
|---|---|---|
| ElevenLabs | Voices generated meditation scripts | Short generated script text only |
| Inworld AI | Voices generated meditation scripts | Short generated script text only |
Analytics, subscriptions & sign-in providers
These receive an internal user identifier and event or device data. None of them receives any note, mood, or conversation content.
| Provider | Purpose | Data received |
|---|---|---|
| PostHog | Product analytics — optional, off via Settings → Share anonymous usage. Crash and error reports — on by default, off via Settings → Send crash reports | Action events only (note saved, session started, meditation completed), internal user id, app version, device type. No advertising identifier, no cross-app tracking. Crash reports: error type, code location, app version, device model and OS, internal user id; no error messages, notes, chats, voice, or screenshots |
| Superwall | Subscription and paywall service | Internal user id, purchase and subscription events from the App Store, device attributes for paywall display (model, OS and app version, locale, screen size) |
| Apple | App Store, StoreKit, Sign in with Apple, App Attest | Purchases and subscriptions under Apple’s terms; sign-in identifier if you use Sign in with Apple; a device attestation that the app is genuine (no personal data) |
| Resend (Resend, Inc.) | Email delivery | Your email address and a one-time sign-in code, if you sign in with email |
| Google (Google LLC) | Google Sign-In | Sign-in identifier and Google account email, if you use Google Sign-In |
Infrastructure & security providers
| Provider | Purpose | Data received |
|---|---|---|
| Google Firebase (Google LLC) | Authentication (email, phone, Apple, Google), App Check, database, file storage, and server functions — our core hosting | All stored app data (encrypted at rest where sensitive) |
| Google Cloud KMS (Google LLC) | Holds the master key that protects each user’s encryption key | Encryption key material only — no user content |
Changes to this list
We may add, remove, or change subprocessors as the app evolves. When we do, we update this page and the date above. For material changes, we’ll also note it in the app where appropriate.
Questions: support@auserene.com