Sub-processors

Every third party we rely on.

Under GDPR Art. 28, every sub-processor that handles personal data on our behalf is listed here — what we share, why, and where it lives. We notify customers of changes before they take effect.

Last updated: 2026-09-29

  • Supabase Inc.

    Privacy policy ↗
    Purpose
    Database, authentication, cloud storage, realtime signalling, AI proxy Edge Functions.
    Data shared
    Account email, hashed user ID, synced canvas content (encrypted in transit via TLS and at rest on EU infrastructure — not end-to-end encrypted; accessible to Fluera as data controller, never sold or used for advertising), sync metadata.
    Region
    Stockholm, EU (eu-north-1) — production. Dublin, EU (eu-west-1) — staging.

  • Google Cloud (Google Ireland Ltd.)

    Privacy policy ↗
    Purpose
    Vertex AI (Gemini models) for Socratic mode, Ghost Map, LaTeX OCR, and exam-session generation.
    Data shared
    Selected canvas content submitted only when AI features are consented and used — text portions and rendered PNG images of individual handwriting-cluster regions. Never the full notebook.
    Region
    European Union only — europe-west4 (Netherlands) primary, europe-west1 (Belgium) failover. No transfer of canvas content outside the EU for AI inference.

  • Google LLC

    Privacy policy ↗
    Purpose
    Sign in with Google authentication (identity provider).
    Data shared
    Google account email and account identifier. No canvas data.
    Region
    US; SCC + EU-US DPF.

  • Apple Inc.

    Privacy policy ↗
    Purpose
    Sign in with Apple authentication; App Store in-app purchases on iOS and macOS.
    Data shared
    Apple ID email relay, receipt identifiers. No canvas data.
    Region
    US; SCC + EU-US DPF.

  • RevenueCat Inc.

    Privacy policy ↗
    Purpose
    Subscription management and receipt validation across iOS, Android, and web.
    Data shared
    Anonymised RevenueCat user ID, subscription status, receipt metadata. No payment card data.
    Region
    US; SCC + EU-US DPF.

  • Functional Software Inc. (Sentry)

    Privacy policy ↗
    Purpose
    Crash reporting and error monitoring.
    Data shared
    Stack traces, OS version, device model, app version. sendDefaultPii is explicitly disabled and IP addresses are not stored — no user content.
    Region
    European Union (Frankfurt) — the production DSN ingests into Sentry's EU data region. Processor entity is US-incorporated; SCC + EU-US DPF.

  • Deno Land Inc.

    Privacy policy ↗
    Purpose
    Hosting of share.fluera.dev: the web catalogue, card pages, the report form and the AI assistant connector.
    Data shared
    IP address and request data of visitors (technical logs). Reports sent through the form pass through here on their way to Supabase. No cookies.
    Region
    Global edge; company based in the US. DPA incorporated in the Deno Deploy terms; SCC.

fluera.dev itself is hosted on GitHub Pages. GitHub Inc. is not a sub-processor: it records the technical data of visits (IP address, time, page) to secure its own service, as an independent controller under its own privacy statement. The same applies to the typefaces that share.fluera.dev loads from fluera.dev. GitHub privacy statement ↗

Changes and notifications

We update this list whenever a sub-processor is added, changed, or removed. Education and enterprise customers receive email notice at least 30 days before the change takes effect, per Art. 28(2) GDPR.

To subscribe to sub-processor change notifications, email lorenco@fluera.dev from the address on your account.