Subprocessors
The outside services that handle personal data for the Plyvel app.
The services
These are the outside services that handle personal data for the Plyvel app, what each does, and where. The Privacy policy says what each receives.
| Service | What it does for Plyvel | Where | Data processing agreement |
|---|---|---|---|
| Cloudflare | Runs the app and its API, stores images in private storage, keeps short logs, runs background jobs and Turnstile, its bot check, when free credits are claimed, and makes a 32 by 32 copy of each source or reference uploaded to a free workspace for its fingerprint (Cloudflare Images); also counts page views on plyvel.com, the public site (Web Analytics) | Cloudflare's network; image storage with a location hint of Eastern Europe | Part of its Self-Serve Subscription Agreement; includes the EU's standard contractual clauses |
| Supabase | The database and sign-in | Frankfurt, Germany | Part of its Terms of Service; includes the EU's standard contractual clauses |
| Resend | Sends sign-in emails and, once switched on, the app's notices by email | Ireland | Binding on accepting its terms; includes the EU's standard contractual clauses |
| Google (Gmail) | The inbox that receives support reports | Google's network | None: a consumer account, to be replaced by a business inbox with an agreement once Plyvel has revenue |
| DigiCert, then Sectigo | Time-stamp each version 4 Render Receipt; they receive only a fingerprint of the receipt's signature, nothing personal | Their own services | Not needed: no personal data |
| Apple Push Notification service, Firebase Cloud Messaging (Google) | Only in the store app, once its notices are switched on (they are off) | Apple's and Google's networks | Under their developer terms |
AI model providers: none is in use yet. Each one is added here, with what it receives and where, before it is used. A provider that trains its models on what it is sent is not used.
When this list changes, the date below changes. A new service that receives your images or your words is announced by email at least 30 days before it is used (Privacy policy, section 13).
Last updated: 20 October 2026.