The companies that process personal data on our instructions (Art. 28 GDPR). This page is the current list; the Privacy Policy points here, and material changes are notified in the app.
| Processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Supabase Inc. | Database, authentication, storage, edge functions | USA / EU regions | SCCs (Module 2) + EU-US Data Privacy Framework |
| Stripe, Inc. | Payment processing | USA | SCCs + EU-US Data Privacy Framework |
| Google LLC | Federated sign-in (optional) | USA | SCCs + EU-US Data Privacy Framework |
| Apple Inc. | Federated sign-in (optional) | USA | SCCs + EU-US Data Privacy Framework |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | USA / EU regions | SCCs |
| Email delivery providerProvider not yet fixed | Transactional email | EU / USA | SCCs |
Each processor is bound by a Data Processing Agreement and processes data only on our instructions. We do not sell or share personal data for cross-context behavioural advertising.
This list is referenced from the Privacy Policy (version 2.6)