Last reviewed: July 2026
Arkoura relies on a small number of trusted third-party service providers ("sub-processors") to operate. Each one processes only the data required for its specific function, under a data processing agreement. Arkoura uses no advertising, analytics, marketing, or session-replay third parties.
| Sub-processor | Purpose | Data shared | Location |
|---|---|---|---|
| Google Cloud / Firebase | Authentication, encrypted database, file storage, hosting, and PII de-identification (DLP). | Account details, health records, uploaded documents, and contact information. | United States |
| Anthropic | AI assistant that helps you write and understand your health journal. | De-identified journal content only — personal identifiers are removed by Google Cloud DLP first. Not used for model training. | United States |
| Twilio | SMS notifications and phone-number verification. | Phone number and the message content being delivered. | United States |
| Resend | Transactional email delivery. | Email address and the message content being delivered. | United States |
Arkoura contains no advertising, analytics, marketing-pixel, or session-replay trackers. We never sell or share your personal or health data with data brokers or advertisers. Fonts are self-hosted, so your browser makes no third-party font requests.
We keep this page up to date. If we add or replace a sub-processor that handles personal data, we will update this page before the change takes effect. For questions, contact privacy@arkoura.com.