4couple
Sub-processors
The companies that process personal data on our behalf
Last updated: September 14th 2026
What this page is
Our Privacy Policy describes the categories of service providers that process your personal data for us. This page names the current provider in each category, what they receive, where they process it, and the safeguard we rely on when data leaves the European Economic Area. Every provider below is bound by a written data processing agreement that limits them to processing your data only on our instructions and only to provide their service to us.
Our commitment: we will update this page before adding or replacing a provider that processes your personal data. Where the law requires it, we will also notify you in the App or by email, and you may object to the change by contacting us or by withdrawing consent for the affected feature.
Current sub-processors
| Provider | Category | What they receive | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Hosting and infrastructure (App) | All account and app data: database, sign-in, file storage (profile photos, shared-session photos), server functions | Ireland (EU) | None needed (EU) |
| Vercel Inc. | Hosting (Website) | Requests to 4couple.ai and standard server logs, including IP address, browser and the pages requested. No app content. | United States | Standard Contractual Clauses |
| PostHog, Inc. (EU Cloud) | Product analytics and error reporting | User id, email address, first name, feature and screen usage events, crash and error reports. Does not receive conversation, mood or note content. No session recording. | EU | None needed (EU) |
| Cloudflare, Inc. | Bot protection (Website forms) | IP address and technical signals about your browser when you submit the support form, to tell a person from a script. Not used for analytics or advertising. | United States | Standard Contractual Clauses |
| OpenRouter, Inc. | Artificial intelligence (routing) | AI Companion prompts and conversation text, Translate My Emotions input, the context described in section 6 of the Privacy Policy, and text for summaries, insights, suggestions and safety classification | United States | Standard Contractual Clauses |
| Google LLC (Gemini models, via OpenRouter) | Artificial intelligence (model provider) | The same content as OpenRouter, to generate responses. Configured not to use your content for training. | United States | Standard Contractual Clauses (via OpenRouter's sub-processor terms) |
| Groq, Inc. | Speech-to-text | Voice recordings made with voice input, for transcription only | United States | Standard Contractual Clauses |
| Expo (650 Industries, Inc.), with Apple Push Notification service and Google Firebase Cloud Messaging | Push-notification delivery | Device push token and notification text (which may include your partner's first name and the signal sent) | United States | Standard Contractual Clauses; Apple and Google developer agreements |
| Resend, Inc. | Email delivery | Email address and the content of service emails, waitlist emails and support replies | United States | Standard Contractual Clauses |
| RevenueCat, Inc. | Subscription management | App user id, subscription status and history, platform, country | United States | Standard Contractual Clauses |
| Stripe, Inc. | Payment processing (Website purchases) | Email address, purchase and subscription transactions. Card details are entered directly with Stripe and never reach us. Listed ahead of use: purchases on the Website are planned, and until they launch Stripe receives nothing. | United States (with EU entities) | Standard Contractual Clauses; Stripe's own DPA |
| Apple Inc. and Google LLC | App distribution, payments and third-party sign-in | Sign-in identity (where you choose Sign in with Apple or Google), purchase and subscription transactions | United States | Apple and Google developer agreements; their own privacy terms apply to your relationship with them |
Not a sub-processor
The Movie Database (TMDB) supplies film information shown in the Film Chooser. Our servers query it for film details only; it receives no information about you.
Change history
September 6th 2026: first published.
September 14th 2026: the Cloudflare and Resend entries no longer mention the waitlist, which has closed. No provider was added or removed.
© 4couple. Questions about our sub-processors: contact@4couple.ai.