Subprocessors
Third-party service providers that process personal data on behalf of SalahOne to deliver the app, with the hosting region and international-transfer safeguards for each one.
International transfers outside the EU/UK rely on Standard Contractual Clauses (EU SCCs 2021/914) and the UK International Data Transfer Addendum (IDTA) where required. Contact privacy@salahone.com to request the current version of any DPA.
Infrastructure
Supabase
Cloud-hosted PostgreSQL database, authentication, and serverless functions for user data storage and processing.
- Region
- EU (Frankfurt) and US (East) regions
- Safeguard
- Standard Contractual Clauses (EU SCCs 2021/914) and UK IDTA where applicable
- Data
- profile_data, authentication_data, prayer_logs, bookmarks, location_data, usage_analytics, communication_logs, payment_status
Cloudflare
Global content delivery, DDoS protection, edge compute for the app.
- Region
- Global edge network
- Safeguard
- EU SCCs + UK IDTA where applicable
- Data
- ip address, device metadata
Payments
Stripe
Payment processing for web-based Premium subscriptions.
- Region
- US / Ireland
- Safeguard
- EU SCCs + UK IDTA
- Data
- payment details, billing address, email
RevenueCat
Cross-platform subscription management for iOS and Android in-app purchases.
- Region
- US
- Safeguard
- EU SCCs + UK IDTA
- Data
- purchase history, anonymous user id
AI
OpenAI
Powers the OneBot Islamic AI assistant.
- Region
- US
- Safeguard
- EU SCCs; zero data retention on API
- Data
- chat messages you send
Communications
Resend / Postmark
Transactional emails (receipts, password resets, notifications).
- Region
- EU / US
- Safeguard
- EU SCCs
- Data
- email address, notification content
Distribution
This list is kept current in our internal records. Material changes are announced before they take effect.