AEGIN
← Back to privacy policy// PROTOCOL · RECIPIENTS

Every vendor, named.

Every third party that processes personal data on Aegin's behalf, what each one receives, and the agreement that governs the relationship. The list is versioned in our codebase, so any addition or removal ships as a public commit and what it said on any past date can be checked.

It is current, not permanent. We add, remove, and substitute providers as the product changes, and we update this page rather than announcing each change on its own.

LAST UPDATED · 14 AUG 2026

// INFRASTRUCTUREInfrastructure

Supabase

View DPA →

Hosts the PostgreSQL database of record for all stored personal data, plus account authentication and session management.

DATA
IDENTITYBEHAVIORALDEVICE INVENTORYCOMMUNICATIONSBIOMETRICINFERREDTECHNICALTRANSACTIONAL
JURISDICTIONUnited States · region-selectable
TRANSFERStandard Contractual Clauses

Hosts the aegin.live website and every server-side API route the app calls. Personal data passes through compute while a request is being handled and is not durably stored there.

DATA
IDENTITYBEHAVIORALDEVICE INVENTORYCOMMUNICATIONSBIOMETRICINFERREDTECHNICALTRANSACTIONAL
JURISDICTIONUnited States · global edge
TRANSFERStandard Contractual Clauses

// AI_PROCESSORAI processors

Runs the large-language-model tier behind assistant replies, decisions, and written reports. Receives the text of your message and a pseudonymized behavioral summary, never your account identifiers. Acts as our processor and is contractually barred from training its foundation models on what we send.

DATA
BEHAVIORALCOMMUNICATIONSINFERRED
JURISDICTIONUnited States
TRANSFERStandard Contractual Clauses, plus zero-training contractual terms

// PAYMENTPayment and subscription receipts

Merchant of record for subscriptions bought on the web outside India. Handles card capture, fraud screening, tax remittance, and refund settlement.

DATA
IDENTITYTRANSACTIONAL
JURISDICTIONUnited Kingdom · United States · European Union
TRANSFERStandard Contractual Clauses, plus the UK IDTA

Razorpay

View DPA →

Payment processor for subscriptions billed in Indian rupees. Handles UPI, Indian cards, and net banking, and remits refunds where they are due.

DATA
IDENTITYTRANSACTIONAL
JURISDICTIONIndia

RevenueCat

View DPA →

Validates receipts and keeps subscription state in sync for purchases made inside the app through the Apple App Store and Google Play. Receives the store receipt and the pseudonymous user identifier we supply, and acts as our processor.

DATA
IDENTITYTRANSACTIONAL
JURISDICTIONUnited States
TRANSFERStandard Contractual Clauses

// OAUTHAuthentication

Sign in with Apple, where you choose to use an Apple ID.

DATA
IDENTITY
JURISDICTIONUnited States · global
TRANSFERStandard Contractual Clauses + adequacy where applicable

Sign in with Google, where you choose to use a Google account.

DATA
IDENTITY
JURISDICTIONUnited States · global
TRANSFERStandard Contractual Clauses

// EMAILEmail and transactional messaging

Sends transactional and account email on our behalf: verification, password reset, billing receipts, and account notices. Acts as our processor under written terms and uses account data for nothing of its own.

DATA
IDENTITY
JURISDICTIONUnited States · region-selectable EU
TRANSFERStandard Contractual Clauses

// PUSHPush notification delivery

Delivers push notifications, relaying each one to Apple (APNs) or Google (FCM). Receives your device push token and the text of the notification, which can refer to your recent activity.

DATA
BEHAVIORALTECHNICAL
JURISDICTIONUnited States
TRANSFERStandard Contractual Clauses

// MONITORINGApplication monitoring and crash reporting

Receives crash reports, unhandled exceptions, and performance traces from both the mobile app and the website so we can find and fix faults. Default personal-data capture is switched off and only the pseudonymous user identifier is attached.

DATA
TECHNICAL
JURISDICTIONUnited States · region-selectable EU
TRANSFERStandard Contractual Clauses
// REQUESTS

To request the specific recipients of personal data relating to your account (as opposed to the list above, which describes the recipient relationships), email support@aegin.live from the account email of record. We respond within the timeframes set out in the Privacy Policy.