ProofMe Subprocessors and Service Providers

This page identifies providers named by the current Main-repository privacy source and Cloud implementation. Providers receive data only for the role needed to provide a feature you use. Cloud processing is conditional; the public release does not enable Cloud for every user.

Providers

Supabase

Authentication, the Postgres database, account/profile metadata, backend/Edge Functions, and Cloud metadata when Cloud is enabled. The data path can include account data, usage/support records, and conditional Cloud metadata.

Cloudflare

Public web pages and Cloudflare R2 object storage for conditional Cloud media; Workers/Functions support public or Cloud endpoints. The data path can include public web requests and, when Cloud is enabled, video/thumbnail objects and related request metadata.

Google

Google sign-in and Google Play Store billing for Android subscriptions. Google handles the sign-in identifiers or Store purchase/entitlement information involved in those features.

Apple

Sign in with Apple and App Store billing for iOS subscriptions. Apple handles the sign-in identifiers or Store purchase/entitlement information involved in those features.

We do not publish a separate fixed list of every infrastructure subprocessor, data-residency location, or retention period here. Those details can change with the service configuration and should be confirmed for a specific Cloud or Team arrangement.

Cloud processing terms

Cloud/Team processing terms, including any DPA or enterprise terms, require review and contact before a contractual commitment. This page is not a finalized DPA and does not create a separate contract. Contact [email protected] for current provider or processing questions.

See the Privacy Policy, Data Retention Policy, and Legal & contact pages for the user-facing context.

Effective / publication date: August 22, 2026 · 2026-08-22
Publication version: landing-2026-08-22.2
Source repository: https://github.com/ThanabordeeN/ProofMe
Source path(s): compliance/prepare-to-upload/PRIVACY_POLICY_EN.md; src/cloud; supabase/functions
Source commit: 3c62195e7d1392b1cfa860be62637f934134a330
Publication source type: derived-provider-disclosure
Publication override: Owner-approved Landing publication override; the referenced Main source commit retains its prior contact value.
Content SHA-256: 4bafc2aa2c461062f1bace3c689b333d3e374cdafd23c41c977f1643dc55ac45