Subprocessors
Draft. This document is a working draft and has not been reviewed by a lawyer. It needs checking before the site or the app goes live.
Working draft. Regions and the DPA references must be confirmed before launch. See the maintainer’s note at the bottom.
We use a small number of third-party services to run the app and this website. Each of them processes data on our instructions only, under a data processing agreement. None of them is permitted to use your data for their own purposes, and none of them is an advertiser or a data broker.
This page is the current list. It changes rarely, and when it does, the date at the top changes with it.
Currently in use
| Provider | What it handles | Where |
|---|---|---|
| Supabase Inc. (USA) | The database, authentication, and file storage for receipt and property images. This is where your ledger actually lives. | {{TODO: region. Currently Asia-Pacific; an EU region is planned before launch}} |
| Cloudflare, Inc. (USA) | Hosting and delivery of this website. Processes IP addresses transiently for security and abuse prevention. | Global edge network |
| Apple Inc. (USA) | Distribution of the app. | Global |
Planned, not yet in use
Listed here so this page never lags behind reality by more than a release.
| Provider | What it would handle | Status |
|---|---|---|
| {{TODO: analytics provider}} | Cookie-free, aggregate page-view counts for the website. | Not yet enabled |
| {{TODO: newsletter provider}} | Email addresses of newsletter subscribers. | Not yet enabled |
| {{TODO: email provider}} | Transactional email sent from our own domain. Password-reset emails already work today, sent by Supabase’s default sender. This row is about moving them to a dedicated provider. | Not yet enabled |
| Google (AdSense) | Advertising on the website. In the EEA and the UK, only after consent through a certified consent platform. | Not yet enabled |
| {{TODO: Gumroad / Lemon Squeezy}} | Sale of the Excel templates, as merchant of record. | Not yet enabled |
| Apple Inc. (in-app purchases) | Merchant of record for subscriptions. Holds your payment details, which we never see. | Not yet enabled. There is no StoreKit code in the app yet |
| {{TODO: crash reporting, if adopted}} | Crash and error diagnostics from the app. | Not yet enabled. The app currently sends no diagnostics |
What we do not use
No advertising SDK, no analytics SDK and no tracking of any kind inside the app. No data broker. No third party receives your financial records.
Questions
Anything about this list: see the contact page. The privacy policy explains what is collected and why.