In short
- Our servers, database, website and web app run on Railway in the Netherlands; files sit in a Railway storage bucket in Amsterdam, operated by Tigris.
- Resend sends sign-in codes by email. Expo, Apple and Google deliver push notifications.
- PostHog is listed for analytics and error reports, but it isn’t turned on yet: no data goes to it today.
- We will post changes here before they take effect, and business customers can object under the DPA.
Who processes data for us
| Company | What for | Data | Where |
|---|---|---|---|
| Railway Corporation (US) | Hosting of the API, the Postgres database, the web app and this website | Everything stored in Pinok, at rest and in transit | Region europe-west4, the Netherlands (EU) |
| Tigris Data, Inc. (US), through Railway Storage Buckets | Storing photos, files, profile photos and workspace logos | File contents and names | Amsterdam, the Netherlands (EU) [to confirm: the bucket’s location type] |
| Resend (US) [legal entity to confirm] | Sending sign-in codes by email, and forwarding contact form messages to us | Email address, the email’s text, delivery details | United States |
| 650 Industries, Inc. (Expo) (US) | Sending push notifications to Apple and Google | Push tokens; notification content in transit (names, task titles, comment text) | United States |
| Apple Inc. (APNs) | Delivering push notifications to iPhones | Device token, notification content | Global |
| Google LLC (Firebase Cloud Messaging) | Delivering push notifications to Android phones | Device token, notification content | Global |
| PostHog, Inc. (US) — not active | Product analytics and error reports, once turned on | A random account id, events without content, scrubbed error reports | [to confirm: US or EU] |
| [to confirm] | The inbox we answer contact form messages from | Messages and email addresses | [to confirm] |
When billing opens, a payment provider will join this list before anyone is charged. Transfers to companies outside the EU rely on Standard Contractual Clauses and, where the company is certified, the EU–US Data Privacy Framework (see the Privacy Policy).
Who isn’t a subprocessor
Some services touch your data because you choose to use them, under their own terms: the calendar you subscribe to your tasks with (Apple Calendar, Google Calendar, Outlook), the email provider of someone you invite, and the App Store or Google Play when you download the apps.
Changes to this list
We will update this page before a new subprocessor starts handling personal data, and change the date at the top. Business customers can object to a new subprocessor under the Data Processing Addendum. [to confirm: notice period, e.g. 30 days, and how to subscribe to changes]
Questions about this page? Write to us and choose the topic that fits. All our policies are on the legal page.