Subprocessors
Draft, to be checked by a lawyer. This page describes what the product does today. It is not legal advice and is not final.
Last updated: 14 November 2026
These companies process data on our behalf. We will update this list before adding a new one. [Locations and agreements to be confirmed.]
| Company | What for | Data | Where |
|---|---|---|---|
| Supabase | Sign-in and accounts | Name, email | EU (Frankfurt) |
| Cloudflare | Hosting, DNS, file storage (R2), share pages | Page requests, uploaded files (sensitive files sealed with our key) | Global edge, EU storage |
| Fly.io | API and database hosting | Trip data, request logs without personal data | EU |
| Anthropic / OpenAI | AI actions you request | The text for that action only; never documents on their own | US |
| Stripe | Web payments | Payment details (held by Stripe, not us), email | US / EU |
| RevenueCat | App Store and Google Play subscriptions | Purchase status, account id | US |
| Postmark | Email: invites, forwarding, notices | Email address, message content | US |
| Sentry | Crash and error reports | Technical error data, no personal data | EU / US |
| PostHog | Product analytics (if you allow it) | Usage events, no trip contents or names | EU |