Subprocessors
Periodical uses the following third-party services to operate the platform. This list supports transparency for clubs, parents, and compliance reviews (SOC 2 Privacy / Confidentiality).
See also our Privacy Policy.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Google Cloud Platform | Application hosting (Cloud Run), build/deploy | Account email, session tokens in transit, app logs | United States (us-west1 / us-central1) |
| Google (OAuth / Identity) | Sign-in with Google | Email, name, profile image from Google account | United States |
| Supabase / GoTrue (self-hosted on TSAI infrastructure) | Authentication, MFA, session management | Credentials, MFA factors, JWT sessions | TSAI-operated (DGX Spark); proxied via Tailscale |
| Tailscale | Secure network connectivity (Funnel / tailnet) | Connection metadata; no journal content | United States |
| Resend (when email enabled) | Transactional email (password reset, admin notifications) | Email address, message content | United States |
| Google Gemini API (optional AI features) | Coach's read / insights narration when enabled | Aggregated journal signals sent to model; no raw passwords | United States |
Last updated 2026-08-28. © 2026, Transcendental Sports AI. These documents are provided for transparency during beta; formal legal review is in progress.