Subprocessors
Every company that handles your data on our behalf, and what for.
Updated 2026-09-07
Fly.io (Frankfurt, Germany)
Runs the server. Sees every request the app makes and the logs it writes; the logs carry no names, addresses or trip contents.
Neon (Frankfurt, Germany)
Hosts the Postgres database that holds everything the privacy policy lists, in AWS eu-central-1.
Apple
Sign in with Apple, which is how an account exists; push notifications (APNs), which is how a phone learns that a trip changed; and Maps, which draws the map and answers a pin's address on the phone itself, not through our server.
frankfurter.dev
The European Central Bank's exchange rates, fetched by the phone once a day so a trip in another currency reads in yours. The request carries the two currency codes and nothing else.
Brevo (France)
Sends every letter this server writes — invitations, sign-in codes and the preview list's confirmations — from fra@getndemo.com. Brevo sees the address a letter goes to and what the letter says: for an invitation the inviter's name and the trip's name, for a sign-in the code, for the preview list the two links. Nothing else; the letter is plain text with no tracking.