Skip to main content
Legal

Service providers

Last updated: October 23, 2026

To run SHIFT we use the service providers below. They process personal data on our behalf, only to provide their service to us. Data from devices and apps you connect, such as Garmin Connect, reaches only the providers marked Yes in the last column. AI providers receive only the data each task needs, and only with your AI consent. They are instructed not to use your data to train their models.

  • Vercel Inc.

    Hosts the SHIFT website and app servers, and measures visits (Vercel Analytics) and loading speed (Speed Insights)

    Data it processes
    All account and training data; for the measurements, the pages you open, steps you take such as requesting a plan, your browser and your IP address, without cookies
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes

  • Fly.io, Inc.

    Runs SHIFT's background jobs

    Data it processes
    All account and training data
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes

  • Supabase Inc.

    Database

    Data it processes
    All account and training data
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes

  • Upstash, Inc.

    Cache and job queues

    Data it processes
    Account identifiers and training data in transit
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes

  • Tigris Data, Inc.

    File storage (activity files, profile photos, data exports)

    Data it processes
    Activity files with routes, photos, exports
    Location
    Global
    Device data (e.g. Garmin Connect)
    Yes

  • Cloudflare, Inc.

    Domain name and network protection for incoming connections

    Data it processes
    Data in transit
    Location
    Global network
    Device data (e.g. Garmin Connect)
    Yes (in transit)

  • OpenRouter, Inc.

    Routes AI requests to the AI providers below

    Data it processes
    The data each AI task needs
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • Anthropic, PBC

    AI models (through OpenRouter)

    Data it processes
    The data each AI task needs
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • OpenAI

    AI models (through OpenRouter) and Max Live voice (audio during a session you start)

    Data it processes
    The data each AI task needs; voice audio
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • Amazon Web Services (Amazon Bedrock)

    Runs the AI models for SHIFT's AI requests

    Data it processes
    The data each AI task needs
    Location
    United States, the European Union and other regions
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • Google (Vertex AI)

    Runs the AI models for SHIFT's AI requests

    Data it processes
    The data each AI task needs
    Location
    United States, the European Union and other regions
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • Microsoft (Azure)

    Runs the AI models for SHIFT's AI requests

    Data it processes
    The data each AI task needs
    Location
    United States, the European Union and other regions
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • Voyage AI

    Lets Max search your own SHIFT history (text embeddings)

    Data it processes
    Your messages to Max; summaries of your conversations, sessions and plans; and your profile: name, age, height, weight, training metrics, injuries and notes
    Location
    United States
    Device data (e.g. Garmin Connect)
    Yes, with your AI consent

  • Resend

    Email delivery (account emails and weekly summaries)

    Data it processes
    Email address, name, training summaries
    Location
    United States and Brazil
    Device data (e.g. Garmin Connect)
    Yes (weekly summaries)

  • Google (Firebase)

    Android notifications and Android crash reports

    Data it processes
    Device notification ID, notification text, technical crash data
    Location
    Global
    Device data (e.g. Garmin Connect)
    Yes (notification text)

  • Apple

    iPhone and Apple Watch notifications

    Data it processes
    Device notification ID, notification text
    Location
    Global
    Device data (e.g. Garmin Connect)
    Yes (notification text)

  • Functional Software, Inc. (Sentry)

    Error monitoring

    Data it processes
    Technical error data, without your account details
    Location
    United States
    Device data (e.g. Garmin Connect)
    No

  • Map tile providers: Mapbox, CARTO, OpenStreetMap, CyclOSM, OpenTopoMap, Esri, Apple Maps

    Draw the maps you open

    Data it processes
    The map area you view, and your IP address; on iPhone and iPad, if you open a route in Apple Maps (not offered for routes from Garmin Connect), Apple receives its exact start and finish
    Location
    Global
    Device data (e.g. Garmin Connect)
    The area of a route you view, and its exact start and finish if you open it in Apple Maps (not offered for routes from Garmin Connect)

Services you choose to use. These receive data because you connect or use them: sign-in with Google or Apple; the App Store and Google Play for subscriptions; and the services you choose to share data from. Those are Garmin Connect, Apple Health, Health Connect, Oura, Ultrahuman, and Withings. When you allow it, SHIFT also sends workouts to Garmin Connect.

We update this page when a provider changes.