These are the companies that process personal data on our behalf to make Blouly work. Each is bound by a contract requiring it to protect your data to a standard equivalent to the one in our Privacy Policy, to act only on our instructions, and to keep it confidential. It is a short list on purpose.
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Supabase |
Hosts our database, our account system and our server functions. This is where Blouly lives. | Your email address and sign-in identity; your display name if you set one; your topic names; your card text and read/saved status; standard server request logs including IP address. | United States — AWS us-west-2 (Oregon) |
| Anthropic |
Generates the text of every card, using the Claude model
claude-sonnet-4-6. |
Only your topic names, plus up to 40 short summaries of cards you have
already read on that topic (or up to 50 topic names when suggesting a new one). No email, no
name, no account identifier, no device identifier. Under our agreement, Anthropic does not train its models on this content and deletes it within 30 days. See Privacy Policy §5 for the exception. |
United States |
| Apple |
Distributes the app, provides Sign in with Apple, and processes all subscription payments. | Whatever Apple already holds as your platform provider. If you use Sign in with Apple, Apple passes us a token and either your email address or a private relay address. Payment details go to Apple and never to us. | Global |
| RevenueCat |
Manages subscriptions. It checks with Apple that a subscription is genuine and still running, and tells our server, so that your subscription works on every phone you sign in on rather than only the one you bought it on. | Your Blouly account identifier — the same random identifier our own database uses, not your email or your name — together with the App Store purchase record for your subscription, and basic app and device details such as the app version and your country. It never receives your topics or your cards. | United States |
| Google |
Provides Sign in with Google — only if you choose that button. If you sign in another way, Google is not involved at all. | Your Google account email address and name, passed to us at sign-in. | Global |
What is not on this list
There is no analytics provider, no crash-reporting provider, no advertising network, no attribution or install-tracking service, and no customer-data platform — because Blouly does not use any.
The app contains exactly one third-party code library: RevenueCat's, listed above, which exists to make subscriptions work. Everything else is built on Apple's own frameworks.
Data that never reaches any of them
Your blocked-app list, how many times a day you open those apps, your grace timers and your daily goal are stored only on your device. No provider on this page receives them, and neither do we. See the Privacy Policy.
Changes
If we add or replace a subprocessor we will update this page and change the date at the top. If the change is significant — a new company receiving your content, or a move to a different region — we will say so in the app or by email.
Questions about anything here: privacy@blouly.com.