Subprocessors
Version 2026-08-18 · Companion to the Privacy Policy
This page lists every company that processes your data on our behalf. It is dated separately from the Privacy Policy so a provider change is a page update rather than a re-consent event.
Everything below was verified against live systems on 2026-08-17 and 2026-08-18.
One thing worth knowing first
Your device never contacts any of these companies directly. The app talks only to our server; our server talks to them. None of them receives your IP address or your device identifiers — they see our server in Germany. This falls out of how the app is built rather than being a promise we maintain.
Turning your voice into text
ElevenLabs — United States. Receives your audio recording and returns a transcript.
This is the only company we contract with directly, and it is the only step in the chain where we have no ability to route elsewhere.
- Training: we have opted out of model training at the account level. Confirmed active 2026-08-18. Their terms make the opt-out non-retroactive.
- Retention: ElevenLabs keeps voice-derived data for up to three years after your last interaction with them. Read that clock carefully — it runs from the last interaction, not from the recording, so for an active account it does not start.
- Zero-retention mode: we send a zero-retention flag with every request. It only takes effect on service tiers we do not currently hold, so today it has no effect. We ship it because it becomes correct the moment the tier changes, not because it protects you now.
- Other uses: even with training disabled, their terms reserve use of data for security, fraud prevention, support, and analytics.
- Recorded discrepancy: their CCPA notice states they do not collect Sensitive Personal Information, while their privacy policy describes collecting biometric information for certain services. Those two statements are hard to reconcile. We believe the biometric collection applies to voice-cloning features we do not use, but their documents do not say so, and we would rather record the gap than assume.
- Sale of data: ElevenLabs discloses sharing online identifiers with advertising vendors, which counts as a "sale" under California law. That sharing happens through website cookies. Our requests are server-to-server with no browser and no cookies, so your recordings and transcripts are not part of it.
Understanding, indexing, and answering
Three steps — extracting structure from your transcript, building the search index, and answering your questions — are reached through a routing service rather than contracted directly.
OpenRouter — United States. Routes each request to the provider we have pinned.
We are contracted with OpenRouter. We are not contracted with the three companies below; they are OpenRouter's providers, not ours. What we can promise about them is what OpenRouter enforces and what it reports:
- Enforced: OpenRouter will not route our requests to any provider that trains on request data, publishes prompts, or stores request data. This is set at our account level, not per request, so it is a floor rather than a preference.
- Reported: each provider's retention terms are OpenRouter's account of that provider's own policy. OpenRouter states plainly that it does not change what a provider stores.
We do not claim the three companies below are contractually bound to us. They are not. All three are United States companies and process in the United States.
| Step | Provider | Training | Retention |
|---|---|---|---|
| Extracting structure | DeepInfra | No | No |
| Search indexing | Google Vertex AI | No | No |
| Answering questions | Novita | No | No |
Each step is pinned to exactly one provider, and the app checks which provider actually served every request. Providers that store request data — including several that previously served us — are now blocked at the account level and cannot be reached at all.
One honest limitation: the record of which provider served a particular request lives only in our server logs, which are kept for a limited period. We cannot tell you six months later which provider handled a specific memory.
Delivering reminders
Google (Firebase Cloud Messaging) — United States. Delivers reminder notifications to your device.
Google holds a registration for your device, and the messaging library creates an installation identifier. We can delete our copy of the device registration; we cannot reach Google's. The reminder text itself passes through this service in order to appear on your screen.
Hosting
Hetzner — Falkenstein, Germany. Runs the server that stores your account, your memories, and your recordings. Hetzner does not process your data for its own purposes; it provides the machine.
Encrypted backups are held on Hetzner storage in Germany for up to eight weeks.
What is not here
No analytics provider. No crash-reporting provider. No advertising network. No customer support platform. No email service. If a company is not on this page, it does not receive your data.
Changes
2026-08-18 — first published.