Sub-processors
Last updated: 15 October 2026.
The service providers below help us run MySymplyApp. We keep the list short on purpose, record outstanding security and data protection checks, and publish it here so you can audit it at any time.
| Provider | Status | Purpose | Region | Data | Transfers outside the EEA | Retention |
|---|---|---|---|---|---|---|
| Lovable (hosting, managed backend and AI gateway) | Active | Hosts and runs the app, operates the managed backend below, and routes document-reading requests when you choose to use MySymplyApp Scan. It is not used for voice transcription. | Backend in the European Union (Frankfurt, Germany); gateway region being confirmed | Application data held in the backend; documents you choose to have read, in transit | Under the provider's terms; contractual documentation being finalised | Deleted on our instruction; platform backup periods being confirmed in writing |
| Supabase Inc. (backend infrastructure) | Active | Database, sign-in (including verification and password-reset emails) and private file storage | European Union (Frankfurt, Germany) | All application data at rest — profiles, health records, voice recordings, files; your email address for account emails | Stored in the EU. Support and operational access may take place from outside the EEA; DPA and standard contractual clause documentation require review | Deleted on your instruction. Copies may remain in platform backups until the backup window rolls over |
| Cloudflare, Inc. (via our hosting provider) | Active | Runs the app's server code at the network edge, content delivery, protection against attacks | Global edge network | Request metadata and IP addresses; your data passes through encrypted in transit | Provider data processing terms and standard contractual clauses require review; global edge processing is not EU-only | Edge request logs per the provider's own defaults |
| OpenAI, L.L.C. (via the Lovable AI gateway) | Active / optional, user-initiated | An active but optional reading model, used only when you enable MySymplyApp Scan and choose a document to be read. It is not used for voice transcription. | United States | Only documents you choose to have read. No voice recordings. | DPA and standard contractual clause evidence require review; our transfer impact assessment is still incomplete | Per the provider's API data policy; we are obtaining written confirmation of retention and no-training terms |
| Hugging Face | Active | Serves the speech-model files your browser downloads so transcription can run on your own device | Global content delivery network | No health information or recordings are sent. Like any download, your IP address and browser type are visible to the host. | No personal data is sent to the host beyond normal connection details | Connection logs per the host's own terms |
| Google Fonts | Active | Supplies the typefaces the app displays | Global | No health information is sent. Your IP address and browser type are visible when fonts load. | No personal data is sent beyond normal connection details | Per Google's own terms |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Optional / not enabled | Dormant billing infrastructure retained during the product pilot. Participant payment and billing flows are disabled; this listing is not an offer or request to pay. | Ireland (European Union), with access from the United States | If ever switched on: email address and billing details only. Never health information. | Stripe's data processing agreement incorporating standard contractual clauses | Not applicable while switched off |
| Sentry (Functional Software, Inc.) | Optional / not enabled | Error monitoring; only enabled if we configure it. Currently switched off. | European Union | Error stack traces and request URLs, scrubbed of health content | Sentry's data processing agreement with standard contractual clauses | Not applicable while the integration is switched off |
Active means the provider supports the app's current services; model and font downloads expose connection details, not health content. Active / optional, user-initiated means Scan is available but document content is sent only when you enable it and request analysis. Optional / not enabled means the integration exists in the codebase but is switched off by default; we will update this page before turning it on.
Data processing agreements (DPAs), standard contractual clauses (SCCs), our transfer impact assessment (TIA), retention and no-training evidence, and legal review remain incomplete. This list does not establish data protection approval.
We will give reasonable prior notice — through this page and in-app notice for signed-in users — before adding a new sub-processor that will process personal data.
What we do not use
MySymplyApp uses no advertising networks, no behavioural or product analytics, no third-party trackers and no cross-site cookies. We do not operate a marketing mailing list.
A note on “EU-only”
Your records are stored in the European Union (Frankfurt, Germany). We do not claim that MySymplyApp is “EU-only”, because two things can happen outside the EEA: a document you choose to have read by MySymplyApp Scan is processed by an AI provider in the United States, and some providers’ support teams may access systems from outside the EEA; contractual safeguards remain under review. Global edge processing and connection metadata can also involve non-EU infrastructure. Standard voice transcription runs on your own device using a downloaded Whisper model; private audio storage in the EU is a separate flow, not third-party transcription. Leaving Scan switched off avoids the document-analysis transfer, but does not make all app processing EU-only.