Trust
Trust & sub-processors
Our commitments
- No training on your data by our AI sub-processors, and no resale of your data — ever.
- AI sub-processors are pinned to zero-retention endpoints.
- Your material stays yours: we do not share one customer’s data with another.
- Export or delete your data at any time.
Detail: security & data · privacy policy.
Sub-processors
Any third party that touches customer data. We give notice before adding one that touches your data.
| Sub-processor | Purpose | Data | Location | Transfer |
|---|---|---|---|---|
| Hetzner Online GmbH | Hosting (app + database) | All app data | Nuremberg, DE (EU) | EU/EEA |
| Cloudflare, Inc. | CDN + email routing | Traffic metadata; static assets | Global edge | SCCs |
| ElevenLabs, Inc. | Voice loop (TTS + conversational AI) | Roleplay audio, prompts, turns | US | SCCs + zero-retention |
| OpenRouter, Inc. | Model inference | Prompts, transcripts (no audio) | US | SCCs + zero-retention |
| Supabase (self-hosted) | Auth + database (we run it) | Accounts, sessions, profile | On Hetzner (EU) | n/a — we operate it |
| Stripe, Inc. | Payments (when live) | Billing details (cards held by Stripe) | US | SCCs |
Changes & contact
We publish material changes here and give 30 days’ notice before a new sub-processor touches your data. Questions: [email protected].