Subprocessors
We use a small number of third-party services to run the app and this website. Each of them processes data on our instructions only, under the terms we have accepted with them. None of them is permitted to use your data for their own purposes, and none of them is an advertiser or a data broker.
Where the paperwork stands. Formal data processing agreements with these providers are being put in place and are not all signed yet. Saying so is better than the alternative: a page claiming agreements that do not exist is a written statement that turns out to be false, which is exactly the failure this list is meant to prevent.
This page is the current list. It changes rarely, and when it does, the date at the top changes with it.
Currently in use
| Provider | What it handles | Where |
|---|---|---|
| Supabase Inc. (USA) | The database, authentication, and file storage for receipt and property images. This is where your ledger actually lives. | Asia-Pacific |
| Cloudflare, Inc. (USA) | Hosting and delivery of this website. Processes IP addresses transiently for security and abuse prevention. | Global edge network |
| Apple Inc. (USA) | Distribution of the app. | Global |
Planned, not yet in use
Listed here so this page never lags behind reality by more than a release.
| Provider | What it would handle | Status |
|---|---|---|
| A dedicated email provider, not yet chosen | Transactional email sent from our own domain. Password-reset emails already work today, sent by Supabase’s default sender. This row is about moving them to a dedicated provider. | Not yet enabled |
| Google (AdSense) | Advertising on the website. In the EEA and the UK, only after consent through a certified consent platform. | Not yet enabled |
| Apple Inc. (in-app purchases) | Merchant of record for subscriptions. Holds your payment details, which we never see. | Not yet enabled. There is no StoreKit code in the app yet |
| A crash-reporting provider, if one is ever adopted | Crash and error diagnostics from the app. | Not yet enabled, and none is planned. The app contains no such SDK and sends no diagnostics |
What we do not use
No advertising SDK, no analytics SDK and no tracking of any kind inside the app. No data broker. No third party receives your financial records.
Questions
Anything about this list: see the contact page. The privacy policy explains what is collected and why.