Data Processors
TOBY shares limited data with the following sub-processors to run the service.
| Processor | Purpose | Location | Privacy policy |
|---|---|---|---|
| Google LLC | Sign-in (OAuth), AI assistant, app push notifications, and Android app purchases through Google Play (as seller) | United States / EU | https://policies.google.com/privacy |
| Apple Distribution International Ltd. | Sign in with Apple and push notifications on iOS | Ireland | https://www.apple.com/legal/privacy/ |
| Cloudflare, Inc. | Hosting, CDN, file storage, bot protection | United States / EU | https://www.cloudflare.com/privacypolicy/ |
| Stripe Payments Europe, Ltd. | Payments, subscriptions, billing | Ireland | https://stripe.com/privacy |
| Hetzner Online GmbH | Hosting | Germany | https://www.hetzner.com/legal/privacy-policy/ |
| Amazon Web Services EMEA SARL | Newsletter email delivery and encrypted database backups | Germany (eu-central-1) | https://aws.amazon.com/privacy/ |
| Hosting Concepts B.V. (Openprovider) | Domain registration & email hosting (WHOIS registrant contact, mailboxes) | Netherlands | https://www.openprovider.com/legal/privacy-policy |
Contact-form messages: a message a visitor sends through a customer's contact form is delivered to that customer by email and, on their behalf, also stored encrypted on our platform, so that it is not lost if the email cannot be delivered. We delete it automatically after at most 12 months, and immediately on the customer's instruction.