Current subprocessors
Who we use to operate Bondtrail. We update this page when a provider changes; changing a provider does not change the purposes for which your information may be used.
We use third parties to operate the Services. They process personal information on our instructions only, for the purposes we specify, and they may not use it for their own purposes. We have a written data processing agreement with each provider listed below. This list corresponds to the providers described in section 13.1 of our Privacy Policy.
| Provider | What they receive | Why | Location |
|---|---|---|---|
| Contabo | All categories, including location, SOS records and Emergency Contact numbers | Hosting and database infrastructure | United States. Contabo is a German company operating US datacentres |
| Google — Firebase Cloud Messaging | Push notification tokens and notification content. Notifications do not carry location | Delivering notifications and SOS alerts to Bondtrail users | United States |
| Apple — Push Notification service | Push tokens and notification content, for iOS devices | Relaying notifications to iOS devices | United States |
| Google Maps Platform (Android) and Apple MapKit (iOS), used through Expo MapView | Coordinates required to render a map | Displaying location on a map | United States |
| Google Analytics for Firebase | Analytics events, each carrying a persistent app-instance identifier and an IP address. Advertising identifier collection is disabled on both platforms | Understanding how features are used | United States |
| Twilio | Mobile numbers, and message content including a member's name and precise location in an SOS alert. Also used for phone verification and contact-removal links | SMS delivery | United States |
| Didit | Information an adult submits to verify that they are an adult. We receive only the outcome and a reference, never the identity document | Identity verification before a Guardian Code is issued | United States |
| Apple — App Store Connect, and Google — Play Console | Crash and diagnostic reports, and aggregate install and usage statistics provided to us by the stores | Fixing faults, and understanding downloads and retention | United States |
| Apple and Google in-app purchase | Subscription status and transaction records. We never receive your full card number | Processing and managing subscriptions | United States |
| Resend | Email addresses and message content for account and safety emails | Delivering account, safety and transactional emails to members | United States |
What we do not use a third party for
The one system we chose to keep in-house.
Authentication runs on our own servers. No third party holds your credentials, and passwords are stored hashed rather than in plain text.
Changes to this list
We will tell you before a change matters.
We may change providers. Where we do, we will update this page, and where a change is material to how your personal information is handled we will notify you in the App or by email at least thirty (30) days beforehand, as set out in section 1.4 of our Privacy Policy.
Providers may in turn use their own subprocessors. Where they do, they remain responsible to us for that processing under our agreement with them.
Questions
Ask us anytime which provider touches which category.
Contact our Privacy Officer at legal@bondtrail.app. You can ask at any time where a particular category of information is processed.
Bondtrail Technologies Inc. · 2-38 Leighside Lane, Saint John, New Brunswick, Canada E2K 2R6 · legal@bondtrail.app