Skip to main content

Sub-Processors

Last updated: April 2026

Kelo relies on a small number of third-party service providers ("sub-processors") to operate the application. The table below lists every sub-processor that may handle personal information about Kelo users, the purpose of the engagement, the categories of data shared, and the region where the data is processed.

This page is published in support of California Civil Code §1798.130(a)(5) and aligned with the standard sub-processor disclosures published by other consumer software companies.

VendorPurposeData categoriesProcessing region
AnthropicAI message generation (chat, weekly summaries, agent reasoning)Prompt content (no PHI), pseudonymous user ID. Zero Data Retention requested.United States
TelnyxSMS delivery and phone-number verificationPhone number, message content, delivery statusUnited States
Google Cloud (GCP)Application hosting, managed database, scheduled jobsAccount identifiers, practice metrics, application logsUnited States
Google Cloud StorageEncrypted storage of user-uploaded media and exportsUser-uploaded files, exports of personal dataUnited States
CloudflareDNS, CDN/edge proxy, and managed video streamingIP address, request metadata, video playback eventsGlobal edge network
Sentry (Functional Software, Inc.)Error monitoring and performance tracingStack traces, request URLs, pseudonymous user ID, performance spansUnited States
Google (OAuth)Google sign-in (OAuth identity provider)Email, name, profile picture URL, provider account IDUnited States

Legal basis. Each sub-processor is engaged under a written contract that restricts the use of personal information to the purposes listed above. None of these vendors are authorized to use Kelo user data for advertising, profiling for marketing, or any unrelated commercial purpose.

We notify users by SMS or in-app at least 30 days before adding a new sub-processor that handles personal information.

Kelo does not sell or share personal information for cross-context behavioral advertising. There is no Do Not Sell action you need to take.

Back to Privacy Policy

Back to home