These providers process personal data on our behalf under contracts that require appropriate protection. We update this list when providers change; for material changes we will give notice where the law or a contract requires.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloud hosting and content delivery provider | Hosting, CDN, serverless compute, storage, security | All data in transit; logs; cached app files | Global / U.S. |
| Authentication and database provider | Authentication and primary database | Account, journal, portfolio, learning and app data | U.S. |
| Stripe, Inc. | Payments, subscriptions, invoices | Billing identity, payment details, transactions | U.S. / global |
| Third-party AI model providers | AI inference and routing (when enabled in our provider pool) | Prompt and context of AI requests | U.S. / EU / varies by provider |
| Google LLC | Sign-in with Google; fonts | Sign-in identifiers; IP address | U.S. / global |
| Email delivery provider | Transactional email (sign-in codes and links, alerts, reports); marketing email only if you opt in | Email address, name, email engagement | EU (France) |
| Apple Inc. / Google LLC | Push notifications and app distribution; in-app purchases once the iPhone app offers them | Push tokens, purchase records | U.S. / global |
| Brokerage connection providers (planned, only if you connect) | Brokerage account connection | Data you authorize the broker to share | U.S. |
A current list of named sub-processors is available on request at support@ankushai.org.