Legal
Subprocessors
The companies that handle personal data so that WhereDidItGo can work, and exactly what each one gets.
Last updated 30 September 2026.
1.Who handles your data for us
These providers handle personal data on our behalf, or, where marked, decide for themselves how to handle what you do with them. We use each only for the purpose stated, and under an agreement that limits it to that. Your data is stored in Belgium, in the European Union; see the Privacy Policy for how transfers outside the EEA are safeguarded.
| Provider | What it does | Personal data it receives | Its privacy information |
|---|---|---|---|
| Google CloudGoogle Cloud EMEA Limited | Hosts the service and its database in Belgium (europe-west1, European Union), keeps our secrets, builds and runs the software, and keeps encrypted backups. | Everything you store in the service, encrypted at rest, and the operational logs described in the privacy policy. | cloud.google.com/terms/data-processing-addendum |
| Cloudflare | Sits in front of the website and its API: it ends the encrypted connection, filters abusive traffic, caches public files, and shows us how much traffic there is. Every request to wherediditgo.eu passes through it. | Everything a request and its answer carry while they pass through: the address you connect from, the page requested, your browser’s description, your session cookie and what the page shows you. It keeps request details (address, page, browser, country) to show us traffic and stop abuse. It stores nothing of yours for us. | www.cloudflare.com/privacypolicy/ |
| Salt Edge | Reads your bank accounts and transactions, read-only, when you connect a bank. You sign in at your own bank; we never see your bank login. | A random identifier for your household (never your name or email), the bank you choose, the accounts you share, and the balances and transactions the bank returns. | www.saltedge.com/pages/privacy_policy |
| StripeStripe Payments Europe, Limited | Takes payments on the website and manages subscriptions, invoices and the customer portal. | Your email address, the billing details and payment method you give at checkout (which Stripe holds; we never see a card number) and your household’s subscription. | stripe.com/privacy |
| Resend | Sends our emails: sign-in links and codes, security notices, invitations, and confirmations. | Your email address, your name, and the content of the message it sends you. | resend.com/legal/privacy-policy |
| RevenueCat | Records purchases made in the iOS and Android apps and tells us which plan is active. | A random identifier for your household and the store’s purchase records. Never your name, your email or any of your money data. | www.revenuecat.com/privacy |
| AppleApple Inc. / Apple Distribution International LimitedActs independently | Sells subscriptions in the iOS app, and signs you in with Sign in with Apple if you choose it. Apple decides for itself how it handles what you do with it. | For sign-in: your name, your email address (or Apple’s relay address) and whether Apple verified it. For a purchase: what the App Store needs to bill you. | www.apple.com/legal/privacy/ |
| GoogleGoogle Ireland LimitedActs independently | Sells subscriptions in the Android app, and signs you in with Google if you choose it. Google decides for itself how it handles what you do with it. | For sign-in: your name, your email address and whether Google verified it. For a purchase: what Google Play needs to bill you. | policies.google.com/privacy |
2.AI providers
No AI provider receives any personal data today. Categorization runs on your own rules. If we engage one, it is added to this list, and the privacy policy updated, before any personal data is sent to it.
3.How this list changes
A provider is added to this list, and the privacy policy updated where it matters, before it receives any personal data. A change that affects how your data is used is a material change to the privacy policy and you are asked to acknowledge it. The date below is the last time this list changed.
Questions, or a request for a copy of the safeguard behind a transfer: [email protected].