Last updated: 13 August 2026
Caire engages the following entities to provide processing activities for user data as defined in our Privacy Policy. These subprocessors assist in delivering our services securely and reliably.
| Sub-processor | Purpose of Processing | Location of Processing |
|---|---|---|
| Supabase | Cloud infrastructure and authentication | EEA |
| PostHog | Service analytics | EEA |
| Cloudflare | Network services | Global |
| Vercel | Application hosting | Global |
| OneSignal | Communication services | United States |
| Resend | Communication services | United States |
| Cloudinary | Content delivery | Global |
| Authentication services | United States |
We also use providers in the following categories to support our infrastructure.
| Category | Purpose of Processing | Location of Processing |
|---|---|---|
| Infrastructure Security Provider | Security services | United States |
| Mobile Distribution Provider | Application distribution | United States |
Analytics data is collected in aggregate form and does not include conversation content or personally identifiable information. We use privacy-focused analytics with EU-based data residency.
Primary user data is stored in the United Kingdom. Some subprocessors may process data in the US, UK, or EU, subject to contractual and legal safeguards for cross-border transfers including Standard Contractual Clauses where applicable.
We may update this list from time to time as we add or change subprocessors. Material changes will be reflected in the "Last updated" date above. For questions about our subprocessors, contact us at privacy@caire.dev.