Skip to content
Get the appParent sign-in

Legal

Sub-processors

We use a small number of service providers to run Earbunny. They process personal data only on our instructions, under a written contract, and only as far as needed for their task.

Last updated: October 22, 2026EnglishTürkçeDeutschFrançaisEspañolItalianoPortuguês (Brasil)日本語

  1. 1Current sub-processors

    ProviderPurposeDataLocationSafeguard
    Hosting provider in the EUServers, database and encrypted backups for the app and web dashboardAccount, profile, measurement, event and report dataEuropean UnionData processing agreement (GDPR Art. 28); data stays in the EU
    CloudflareEdge network for the website and web dashboard, Turnstile bot protection, storage of contact-form messagesIP address, technical request data, contact messagesGlobal network (US company)Data processing agreement; EU–US Data Privacy Framework or Standard Contractual Clauses
    VercelHosting of this website; cookieless analytics only with your consentIP address, technical request data, aggregated page viewsGlobal network (US company)Data processing agreement; EU–US Data Privacy Framework or Standard Contractual Clauses
    AppleApp Store billing, push notifications (APNs), Sign in with Apple. Apple Health data is read on your device; we do not send it to Apple.Purchase and subscription status, push token and notification content, Apple sign-in identifierUnited States and worldwideApple's developer terms; EU–US Data Privacy Framework or Standard Contractual Clauses
    GoogleFirebase Cloud Messaging for web dashboard notifications; optional Google sign-inPush token and notification content; Google account identifier and email if you use Google sign-inUnited States and worldwideData processing terms; EU–US Data Privacy Framework or Standard Contractual Clauses
    SentryCrash reports from the appApp version, device model, error details and an opaque user ID. No IP address, screenshots or screen layout.United StatesData processing agreement; EU–US Data Privacy Framework or Standard Contractual Clauses
    Email delivery providerSending sign-in codes, reports and service emailsEmail address, name, message contentNamed on requestData processing agreement; Standard Contractual Clauses if outside the EEA
    Better StackServer logs, uptime and metricsTechnical logs (IP address, request details, internal IDs). Sign-in and pairing codes are not logged in production.Named on requestData processing agreement; Standard Contractual Clauses if outside the EEA

  2. 2Processors and independent services

    When you buy through the App Store, sign in with Apple or Google, or use Apple Health, Apple and Google also act as independent controllers under their own privacy policies. Our use of these services is described in the privacy policy.

  3. 3Changes to this list

    We update this page before a new sub-processor starts processing personal data, and change the date at the top. School accounts receive an email at least 30 days in advance and may object, as set out in the school data processing terms. If a change materially affects how your data is used, we tell you in the app or by email.

  4. 4Questions

    For more detail, including the safeguards used for a transfer, write to .