DuelySubprocessors
Active
| Provider | Purpose | Location | Data involved |
|---|---|---|---|
| Supabase | Database, authentication, Row Level Security, and the account-deletion function | EU — AWS eu-west-1 (Ireland) | Account information and the app content you enter |
| Resend | Sends our automated authentication emails (sign-up confirmation, magic link, password reset, account-deletion confirmation) from auth.duelynoted.app | EU — eu-west-1 (Ireland) | Recipient email address and the message content of those automated emails |
| Zoho Mail | Human support and business mailboxes/aliases for @duelynoted.app (support, privacy, hello) | EU data centre | Emails you send us: sender address, message content, attachments and correspondence history |
| Vercel | Hosting and CDN delivery of this website | Global infrastructure | Operational and security logs (IP address, request time, browser/device details, requested URL); no app content |
| Namecheap | Domain registration and DNS | US/global | Domain/DNS configuration only; no app content or mailbox content |
Some providers may process information outside the EEA. Where required, we rely on the safeguards made available by the relevant provider and applicable data-protection law.
Planned — will be announced here before activation
| Provider | Purpose | Status |
|---|---|---|
| Apple App Store / Google Play | Payment processing if the Pro tier launches — we never see card details | Not active |
| RevenueCat | Subscription entitlement management for Pro | Not active |
| Sentry | Crash reporting to fix bugs faster | Not active |
| PostHog (EU hosting) | Privacy-respecting product analytics | Not active |
We keep this list deliberately short. Adding a subprocessor requires a real product need, a data processing agreement, and an update to this page first.