Surplus — Sub-processors Log (v2.0)
Effective Date: 29 October 2026
This page lists third-party processors and certain independent controllers we rely on to provide the Service. We update this list when we add or replace a sub-processor.
A) Processors (act on our instructions)
| Vendor | Purpose | Data types | Storage/processing regions | Key terms |
|---|---|---|---|---|
| Google Cloud / Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Scheduler, Secret Manager, Hosting, Remote Config, App Check, Crashlytics, Analytics, Cloud Messaging) | Hosting, data storage, file storage (optional PDF uploads until parsed, data export files), sign-in and sign-in link emails, scheduled jobs (retention purges, reminders, invitation expiry), configuration, abuse protection, crash reports (consent), analytics (consent), push notifications | Account data, household data, imported transactions, uploaded PDFs, export files, diagnostics (consent), push tokens, analytics events (consent) | At rest: europe-west1 (Belgium); some services (sign-in, crash, analytics, messaging) may process in other regions | DPA & SCCs |
| Google reCAPTCHA Enterprise (web App Check) | Verify that web requests come from the genuine app | Request/device signals, IP | Google global infrastructure | DPA & SCCs |
| RevenueCat | Subscription entitlements (no card data) | Pseudonymous user id, purchase receipts/identifiers, entitlement state | United States | DPA with EU SCCs |
| Resend | Email: household invitations, newsletter confirmation and newsletter issues | Recipient email address, message content | EU (Ireland) | DPA & SCCs |
| Google Workspace | Support mailbox; beta feedback form (Forms, Sheets) | Email content & metadata; feedback form answers | EU/US (per provider architecture) | DPA & SCCs |
B) Independent controllers (provide their own services)
| Vendor | Purpose | Data types | Notes |
|---|---|---|---|
| Apple (App Store, Sign in with Apple, App Attest, APNs) | Purchases, optional sign-in, app attestation, push delivery | Purchase records, Apple ID relay email (if chosen), device attestation | Own controller for store purchases and Apple sign-in |
| Google (Google Play, Sign in with Google, Play Integrity) | Purchases, optional sign-in, app attestation | Purchase records, Google account profile (if chosen), device integrity signals | Own controller for store purchases and Google sign-in |
| Apple App Store and Google Play (in-app review and in-app update prompts) | Showing the store's rating prompt and update prompt inside the app | Handled by the store on your device | Own controller; we receive no data from these prompts |
Removed since v1
Google AdMob / AdSense, Google Analytics 4 on the website, Stripe: no longer used. No AI provider is used.
Notifications
- We provide reasonable advance notice before replacing or adding processors that materially affect your data, except where urgent for security or compliance.
- Questions: support@surplus-app.com