Sub-Processor List

1 About This List

Kahunas FZE uses the sub-processors listed below to provide, operate, secure, and improve the Kahunas Platform and Services. This list tells customers which third parties may process customer or end-user data, the category of service each provides, the region in which each operates where known, and the categories of data each may process.

Each sub-processor operates under a data processing agreement and meets Kahunas' data protection standards. Kahunas maintains a current sub-processor register and notifies affected customers of material changes in accordance with the Privacy Policy and Business User Terms.

Wearable and content integrations a user chooses to connect (for example Apple Health, Google Fit, Garmin, Fitbit, Oura, Polar, Whoop, YouTube, Vimeo) are third-party services governed by their own terms. They are authorised directly by the user and are not sub-processors engaged by Kahunas; they are therefore not listed below.

2 Current Sub-Processors

3 Adding or Removing a Sub-Processor

Kahunas follows a defined process when engaging a new sub-processor or removing an existing one, so that the register stays accurate and customers are notified where required.

1. Assess — The document owner reviews the proposed vendor's security and data protection posture, confirms a data processing agreement is in place, and records the service purpose, data categories, and processing region.
2. Approve — The change is approved by the document owner before the vendor is engaged.
3. Update register — The vendor entry is added to or removed from this list, the version number is incremented, and the effective date is updated.
4. Notify customers — Affected customers are notified of material changes via email, in-app notification, or website notice, in line with the Privacy Policy and Business User Terms. Notice is given in advance of a new sub-processor going live where the change is material.
5. Publish — The updated list is published and made available to customers, including on request to compliance@kahunas.io.

4 Customer Objections

Customers who object to a new sub-processor on reasonable data protection grounds may raise the objection with compliance@kahunas.io before the change takes effect. Kahunas will work in good faith to address the concern; where it cannot be resolved, the customer's contractual termination rights under the Business User Terms apply.

5 Ownership and Refresh

This Sub-Processor List supports the Kahunas Privacy Policy and Business User Terms. Where this list and the sub-processor table in the Privacy Policy differ, this list governs as the authoritative register of sub-processors.

Appendix A — Version History

The table below records material changes to the Kahunas Sub-Processor List. Minor editorial corrections and formatting updates are not recorded.

For questions regarding changes between versions, contact compliance@kahunas.io