Current subprocessors
Who we use to operate Bondtrail. We update this page when a provider changes; changing a provider does not change the purposes for which your information may be used.
We use third parties to operate the Services. They process personal information on our instructions only, for the purposes we specify, and they may not use it for their own purposes. We have a written data processing agreement with each provider listed below. This list corresponds to the providers described in section 13.1 of our Privacy Policy.
| Provider | What they receive | Why | Location |
|---|---|---|---|
| Contabo | All categories, including location, SOS records and Emergency Contact numbers | Hosting and database infrastructure | United States. Contabo is a German company operating US datacentres |
| Google — Firebase Cloud Messaging | Push notification tokens and notification content. Notifications do not carry location | Delivering notifications and SOS alerts to Bondtrail users | United States |
| Apple — Push Notification service | Push tokens and notification content, for iOS devices | Relaying notifications to iOS devices | United States |
| Google Maps Platform (iOS and Android), used through React Native Maps | Coordinates required to render a map | Displaying location on a map | United States |
| PostHog | Allow-listed product events and properties from signed-in adults only. Names, contact information, dates of birth, precise location, free text and backend record identifiers are excluded. Person profiles, session replay, persistent SDK storage, advertising identifiers and provider geolocation are disabled | Privacy-filtered product analytics and improvement for adults | United States |
| Twilio | Mobile numbers, and message content including a member's name and precise location in an SOS alert. Also used for phone verification and contact-removal links | SMS delivery | United States |
| Apple — App Store Connect, and Google — Play Console | Crash and diagnostic reports, and aggregate install and usage statistics provided to us by the stores | Fixing faults, and understanding downloads and retention | United States |
| Apple and Google in-app purchase | Subscription status and transaction records. We never receive your full card number | Processing and managing subscriptions | United States |
| Resend | Email addresses and message content for account and safety emails | Delivering account, safety and transactional emails to members | United States |
What we do not use a third party for
The one system we chose to keep in-house.
Authentication runs on our own servers. No third party holds your credentials, and passwords are stored hashed rather than in plain text.
Changes to this list
We will tell you before a change matters.
We may change providers. Where we do, we will update this page, and where a change is material to how your personal information is handled we will notify you in the App or by email at least thirty (30) days beforehand, as set out in section 1.4 of our Privacy Policy.
Providers may in turn use their own subprocessors. Where they do, they remain responsible to us for that processing under our agreement with them.
Questions
Ask us anytime which provider touches which category.
Contact our Privacy Officer at legal@bondtrail.app. You can ask at any time where a particular category of information is processed.
Bondtrail Technologies Inc. · 2-38 Leighside Lane, Saint John, New Brunswick, Canada E2K 2R6 · legal@bondtrail.app