Partners · Subprocessors

The whole
aid station.

Endurance is a team sport — so is software. These are the platforms we pull data from, and the providers we lean on to keep AIDSTATION running. Everyone's listed. No quiet handoffs.

01 / Fitness integrations

Your watch
already knows.

Plug in whatever you already wear. Activities, heart rate, sleep, recovery — the coach reads it all so you don't have to log a thing twice. Connect or revoke any time from Settings → Integrations.

● Live now

Connect today from Settings → Integrations.

Po
● Live

Polar (watches)

Polar Electro — watches & HR straps · Two-way

Activities, splits, and HR land in AIDSTATION; the coach's structured sessions push back to Flow so your watch knows what's on deck before you do.

→ Activities ← Planned sessions
Rw
● Live

Ride with GPS

Routing & activity log · Two-way

Logged rides come in for analysis; AIDSTATION sessions get pushed out as planned rides on the route you already mapped.

→ Activities ← Planned sessions
Co
● Live

COROS

Multisport watches · Two-way

Every recorded activity flows in. Structured workouts push out to your Pace, Apex, or Vertix, ready on the wrist before warm-up.

→ Activities ← Planned sessions
○ In training

Building blocks, not race day yet — these integrations are in development. We announce each one as it goes live — see plans in the meantime.

Gx
In training

Garmin Connect

Fitness device platform · Two-way

Workouts the moment your watch syncs — pace, power, HR/HRV, GPS, and training-load history. Structured sessions push back to your Forerunner, Edge, or Fenix.

→ Activities → HR / HRV ← Planned sessions
St
In training

Strava

Activity platform · Two-way

Pull every activity in for analysis. Push completed AIDSTATION sessions back out so your training calendar stays one source of truth.

→ Activities ← Planned sessions
Wh
In training

Wahoo

Bike computers & trainers

Indoor rides, outdoor rides, and structured intervals from the Elemnt — with power and HR on every file.

→ Activities → Power → HR
Wp
In training

WHOOP

Recovery & biometrics

Strain, recovery score, HRV and sleep quality feed the coach's daily readiness call — the difference between a green-light interval day and an honest extra zone 2.

→ Recovery → HRV → Sleep
AH
In training

Apple Health

iOS health aggregator

One pipe for everything your iPhone collects — workouts, weight, resting HR, sleep, and any third-party app already connected to Health. You pick the categories.

→ Workouts → Vitals → Sleep
SH
In training

Samsung Health

Android health aggregator

The Android counterpart — activity, heart rate, sleep, and stress from your Galaxy Watch or any connected sensor, with the permissions you grant.

→ Workouts → Vitals → Sleep
When you disconnect

Your data doesn't follow.

Revoking an integration stops new data flows immediately. Anything already imported stays in your account — yours to use, export, or delete from Settings → Data. That's it. No re-auth tricks, no shadow sync.

Your relationship with each partner is also governed by their own terms; we never touch a credential, only the data they hand us.

02 / Service providers

The plumbing.

Companies that process data on our behalf to keep AIDSTATION running. Each one signs a Data Processing Agreement before we send them a single byte. They can't repurpose your data — contractually, operationally, full stop.

Provider
Role
Data categories
Hosting
V
Vercelapplication host
Application hosting, serverless compute, content delivery. Also provides aggregate product analytics inside the app.
App data in transit · ephemeral compute state · pseudonymous usage and event data.
US
N
Neonpostgres database
Managed Postgres — the primary application data store.
All persistent service data — account, training, derived data.
US
A
AnthropicAI inference
AI inference for coaching plans, recommendations, and conversation.
Coaching prompts and outputs.
US
Sg
SendGridtwilio · email
Transactional email, plus marketing email when you opt in.
Email address, message content, delivery metadata.
US
W
WordPress.comautomattic · marketing site
Hosts the marketing & information website (this one).
Visitor data — IP, browser/device, page views, contact-form input.
US
P
Polarpolar.sh · merchant of record
Sells your subscription — the seller of record, not a processor acting only on our behalf.
Name, email, billing address & country, payment method — card details stay with Polar; we receive last four & a confirmation.
Per DPA
Se
Sentryerror monitoring
Application error and performance monitoring.
Technical logs and error traces.
United States

Notes worth reading

Polar (polar.sh) — the strongest relationship on this list
Every other provider here processes data on our behalf and cannot use it for their own purposes. Polar is the seller of your subscription: it takes your payment, issues your receipt, and is responsible for sales tax and VAT in your country. For that transaction it acts on its own behalf as well as ours, and keeps its own record of the sale under its own privacy policy. AIDSTATION never stores, processes or transmits your card details.
Polar, if you delete your account
Tax law requires Polar to keep records of money that changed hands, so those records outlive your AIDSTATION account — see Privacy Policy §7 for what is kept and for how long. Everything else about you is erased on the normal schedule.
Two different Polars
Polar (polar.sh) is the payments company that sells your subscription, listed above as a subprocessor. Polar (Polar Electro) is the Finnish watch and HR-strap maker listed under integration partners. Unrelated companies that happen to share a name; we label both everywhere they appear.
Anthropic
Provides inference under their commercial API terms and does not train models on AIDSTATION data. We don't retain raw conversation transcripts long-term — only parsed coaching notes and derived data, per Privacy Policy §4.
WordPress.com
Hosts the marketing site only. The application doesn't run on WordPress. Cookies and analytics on the marketing site are covered in our Cookie Policy.
Vercel + Neon
Host the core application and everything you generate inside it. Both US-based, US regions.
SendGrid
Sends account verification, password resets, billing receipts, service notices, and (if you opt in) marketing email.
03 / How we choose

The bar to make this list.

Every partner is reviewed before we send a byte and re-reviewed on a cadence. For non-US providers, transfers ride on Standard Contractual Clauses or another approved mechanism.

01

Security history

Demonstrated practices, incident response, and a track record we can actually inspect.

02

Contractual fit

DPA terms that meet or beat our own obligations under this policy and applicable law.

03

Certifications

SOC 2, ISO 27001, GDPR documentation — whichever the role calls for, where available.

04

Their own chain

We review the sub-processors they rely on. The chain stops where the trust does.

Changes

When this list moves.

We update this page whenever a partner is added, swapped, or removed. Material shifts — a new category of subprocessor, a change in processing location — also land in the Privacy Policy, with advance notice where required.

Want a heads-up every time? Email help@aidstation.pro and we'll add you to the subprocessor-changes list.

Contact

Talk to a human.