Subprocessors
The short version: these are the infrastructure providers we rely on to run Biojrnl. Each one only processes the data needed for its function, under a data-processing agreement. We do not sell your data or share it with anyone outside this list.
Biojrnl Ltd (the data controller) uses the following third-party subprocessors. We keep this page current; see our Privacy Policy for how your data is handled overall.
Pre-launch notice: Biojrnl is in private beta. The list below reflects the processors we currently use or have contracted with. It will be reviewed and finalised before public launch, and material changes will be reflected in the Privacy Policy.
| Subprocessor | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication and encrypted cloud backup & file storage. Receives any data you opt to sync to the cloud. | EU West |
| RevenueCat | Subscription & in-app purchase management. Receives a hashed user ID and subscription state. No health data, no email address. | US |
| Resend | Transactional email (sign-in links, waitlist confirmation, account notices). Receives your email address only. | EU / US |
| Sentry | Crash & error reports. Captured automatically when the app runs into an error, and sent to us only while "Help improve Biojrnl" is switched on in Settings, which is off unless you turn it on. Configured with PII scrubbing and no health-data capture. | EU |
| Cloudflare | Website hosting (Cloudflare Pages), DNS and content delivery. Receives standard request metadata (IP, country, user agent). Also stores the pre-launch waiting list in Workers KV: your email address, the date you signed up, the date we last saw you, and the IP address the signup came from. | Global / EU |
| Microsoft 365 | Business email (biojrnl.com mailboxes) for support, GDPR enquiries and security correspondence. Receives only what you email us. | EU (UK tenancy) |
| Apple | iOS App Store distribution and in-app purchase billing. | Global |
| Google Play distribution and in-app purchase billing. | Global |
Where a subprocessor is located outside the UK/EEA, the transfer is protected by appropriate safeguards (such as Standard Contractual Clauses).
Changes
If we add or change a subprocessor, we'll update this page. Material changes will also be reflected in the Privacy Policy.
Contact
Questions about our subprocessors? Email gdpr@biojrnl.com.