Subprocessors
Every third party that touches service data, and why. Updated 7 July 2026.
Active
| Provider | Purpose | Location | Data involved |
|---|
| Supabase | Database, authentication, deletion function | EU — AWS eu-west-1 (Ireland) | Account data and the content you enter |
| Vercel | Hosting of this website | Global CDN | No personal data stored; standard operational logs |
| Namecheap | Domain registration and email forwarding for @duelynoted.app | US/global | Emails you send to our addresses (in transit) |
Planned — will be announced here before activation
| Provider | Purpose | Status |
|---|
| Apple App Store / Google Play | Payment processing if the Pro tier launches — we never see card details | Not active |
| RevenueCat | Subscription entitlement management for Pro | Not active |
| Sentry | Crash reporting to fix bugs faster | Not active |
| PostHog (EU hosting) | Privacy-respecting product analytics | Not active |
We keep this list deliberately short. Adding a subprocessor requires a real
product need, a data processing agreement, and an update to this page first.