Euphia
Sub-processors
To run Euphia we rely on the trusted service providers (sub-processors) below. Each processes data only to provide the Service and on our instructions. This page is part of the Privacy Policy.
| Sub-processor | Purpose | Location / notes |
|---|---|---|
| Supabase | Backend: anonymous authentication, database, cloud backup, edge functions. | EU — Frankfurt, Germany (eu-central-1). |
| Anthropic (Claude) | Generates AI interpretations from your chart / text — only when you enable AI. Data is forwarded to the provider via Euphia's backend. | United States. Processed under Anthropic's commercial terms and Data Processing Agreement (DPA); API inputs/outputs are not used to train Anthropic's models. |
| Groq | AI inference for interpretations — same trigger and flow as above. | United States. Processed under Groq's terms and Data Processing Agreement (DPA); API data is not used to train models. |
| Google Firebase | Usage analytics (only with consent), crash reporting (Crashlytics), and push delivery (Cloud Messaging). | Google infrastructure; may process outside the EEA / Türkiye. |
| RevenueCat | Manage subscriptions / entitlements (receives an anonymous app user ID + purchase status). | RevenueCat infrastructure; may process outside the EEA / Türkiye. |
| Apple / Google | App distribution, in-app purchases / billing, and push transport (APNs / FCM). | Per Apple / Google terms. |
International transfers
Some of the providers above may process personal data outside the EEA / Türkiye (e.g. in the United States). The safeguards are the providers' Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs). A lawyer should confirm the correct transfer mechanism under KVKK.
Changes
We update this list when we add or change a provider. Questions: euphiaapp@gmail.com.
This document is a draft and is not legal advice. Provider regions, DPA, and retention status should be confirmed before publication.