Sub-Processors
Last updated: June 1, 2026
This page lists the sub-processors engaged by KEEZOKU ("Gymkee") to process personal data on behalf of our users, in accordance with our Data Processing Agreement (DPA) and Article 28 of the GDPR.
We will notify data controllers (Coaches) by email at least 30 days before adding or replacing a sub-processor.
List of Sub-Processors
| Sub-processor | Country | Function | Data Processed | Safeguards |
|---|---|---|---|---|
| Amazon Web Services EMEA SARL | EU (Ireland/Paris) | Hosting, storage, infrastructure (HDS certified) | All data | SCC + technical measures |
| MongoDB, Inc. (MongoDB Atlas) | EU | Database | All application data | SCC + encryption |
| Stripe Payments Europe, Ltd. | EU (Ireland) | Payment processing | Payment and billing data | SCC + DPF |
| Cloudflare, Inc. | United States | Website hosting and CDN | Navigation data | SCC + DPF |
| Algolia | EU | Search engine (food, exercises) | Food data, exercises | SCC |
| Google LLC | United States | Analytics (Google Analytics 4, Google Tag Manager) | Anonymized browsing data | SCC + DPF |
| Meta Platforms, Inc. | United States | Advertising measurement (Meta Pixel) | Anonymized conversion data | SCC + DPF |
| Intercom, Inc. | United States | Customer support and messaging | Identification data, messages | SCC + DPF |
| FirstPromoter | Netherlands | Affiliate and referral tracking | Referral data | SCC |
| Twilio Inc. (Segment) | United States | Analytics (server-side) | Anonymized usage data | SCC + DPF |
| Expo (Expo.dev) | United States | Mobile app distribution | Technical data | SCC |
| Anthropic, PBC | United States | AI coaching assistant (Dwayne) | Minimized coaching data (no direct identifiers); retained up to 30 days for security, no model training | SCC |
| OpenAI, L.L.C. | United States | AI content generation | Minimized coaching data (no direct identifiers); no model training on API data | SCC |
| Google LLC (Gemini API) | United States | AI image and content generation | Minimized coaching data (no direct identifiers); no model training on API data | SCC + DPF |
Legend: SCC = Standard Contractual Clauses; DPF = EU-US Data Privacy Framework; HDS = Health Data Hosting
Contact
KEEZOKU, Data Protection 60 rue François Ier, 75008 Paris, France Email: hello@gymkee.com
For more details, see our Data Processing Agreement.
