Processors and outside services
| Provider | Purpose | Data | Location / transfer basis | DPA | In v1 |
|---|---|---|---|---|---|
| Hetzner Online GmbH | server hosting | everything stored by the service | Germany (EU) | [ ] accepted on [date] | yes |
| Sendinblue SAS (Brevo) | transactional email | email address, name, email content | EU | [ ] | yes (release B) |
| Google (Firebase Cloud Messaging, App Check) | push delivery, app integrity | push token, notification text, device integrity signal | EU/US, Data Privacy Framework | [ ] Firebase terms | yes (release C) |
| Cloudflare, Inc. (DNS, proxy, Turnstile) | DNS, TLS and network proxy for the web app and the API; bot check on sign-up and demo | IP address, request metadata and content in transit, browser signals | US, Data Privacy Framework | [ ] | yes |
| Apple Inc. (App Store, TestFlight) | app distribution | per Apple's terms | Apple | n/a (independent controller) | yes |
| Google LLC (Google Play) | app distribution | per Google's terms | n/a (independent controller) | yes | |
| GitHub, Inc. | source code, container images (no user data) | none | US | n/a | yes |
| Functional Software (Sentry) | error reports | device and request metadata, user id | EU (Frankfurt) | [ ] | after v1 |
| Backblaze, Inc. (B2) | encrypted off-site backups | encrypted database dumps | EU (Amsterdam) | [ ] | after v1 or end of release B |
| Stripe | payments (test mode) | — | — | — | later |
Owner's own GDPR pack (finding 25, release A–B): a one-page record of processing, this list with signed dates, a breach runbook and register (docs/ops/RUNBOOKS.md), a retention schedule matching the privacy policy, an inactivity rule for accounts (proposal: 12 months, warned by email first).