4couple
Sub-processors
The companies that process personal data on our behalf
Last updated: September 24th 2026
What this page is
Our Privacy Policy describes the categories of service providers that process your personal data for us. This page names the current provider in each category, what they receive, where they process it, and the safeguard we rely on when data leaves the European Economic Area. Every provider below is bound by a written data processing agreement that limits them to processing your data only on our instructions and only to provide their service to us.
Our commitment: we will update this page before adding or replacing a provider that processes your personal data. Where the law requires it, we will also notify you in the App or by email, and you may object to the change by contacting us or by withdrawing consent for the affected feature.
Current sub-processors
| Provider | Category | What they receive | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase, Inc. | Hosting and infrastructure (App) | All account and app data: database, sign-in, file storage (profile photos, shared-session photos), server functions | Ireland (EU) | None needed (EU) |
| PostHog, Inc. (EU Cloud) | Product analytics and error reporting | User id, email address, first name, feature and screen usage events, crash and error reports and, if you accept analytics on the Website, the steps you take in the quiz, at checkout and on your membership page, and recordings of your Website visits with what you type masked. Does not receive conversation, mood or note content, or your quiz answers. | EU | None needed (EU) |
| Cloudflare, Inc. | Hosting and bot protection (Website) | Requests to 4couple.ai and standard server logs, including IP address, browser, the pages requested and the approximate location Cloudflare derives from your IP address; everything you send through the Website, such as your quiz answers, account details and membership-page actions, passes through it on the way to us. For bot protection, IP address and technical signals about your browser when you submit the support form. Not used for analytics or advertising. | United States | Standard Contractual Clauses |
| OpenRouter, Inc. | Artificial intelligence (routing) | AI Companion prompts and conversation text, Translate My Emotions input, the context described in section 6 of the Privacy Policy, and text for summaries, insights, suggestions and safety classification | United States | Standard Contractual Clauses |
| Google LLC (Gemini models, via OpenRouter) | Artificial intelligence (model provider) | The same content as OpenRouter, to generate responses. Configured not to use your content for training. | United States | Standard Contractual Clauses (via OpenRouter's sub-processor terms) |
| Groq, Inc. | Speech-to-text | Voice recordings made with voice input, for transcription only | United States | Standard Contractual Clauses |
| Expo (650 Industries, Inc.), with Apple Push Notification service and Google Firebase Cloud Messaging | Push-notification delivery | Device push token and notification text (which may include your partner's first name and the signal sent) | United States | Standard Contractual Clauses; Apple and Google developer agreements |
| Resend, Inc. | Email delivery | Email address and the content of service emails, including the subscription emails the Website sends (renewal reminders, annual and price notices, cancellation confirmations), waitlist emails and support replies | United States | Standard Contractual Clauses |
| RevenueCat, Inc. | Subscription management | App user id, subscription status and history, platform, country. For a subscription bought on the Website, RevenueCat reads it from Stripe with your app user id, so the App can unlock it. | United States | Standard Contractual Clauses |
| Stripe, Inc. | Payment processing (Website purchases) | Email address, app user id, card or wallet details (entered directly with Stripe; they never reach us), billing postcode and country, purchase and subscription transactions, the reason and comment you give when you cancel, and device and IP information Stripe uses to prevent fraud | United States (with EU entities) | Standard Contractual Clauses; Stripe's own DPA |
| Apple Inc. and Google LLC | App distribution, payments and third-party sign-in | Sign-in identity (where you choose Sign in with Apple or Google), purchase and subscription transactions | United States | Apple and Google developer agreements; their own privacy terms apply to your relationship with them |
Not a sub-processor
The Movie Database (TMDB) supplies film information shown in the Film Chooser. Our servers query it for film details only; it receives no information about you.
Meta Platforms Ireland Ltd receives information about your visit to the Website, and about sign-ups and purchases there, but only if you choose “Accept all” in our cookie banner. Meta uses it for its own advertising services, so it is not our processor: for collecting the information and sending it to Meta, Meta and we are joint controllers, and Meta's own terms and privacy policy govern the rest. Section 11 of our Privacy Policy lists exactly what it receives.
Change history
September 6th 2026: first published.
September 14th 2026: the Cloudflare and Resend entries no longer mention the waitlist, which has closed. No provider was added or removed.
September 23rd 2026: Cloudflare replaced Vercel as the Website's host. Stripe now processes payments on the Website, which launched them, and the Stripe, Resend, PostHog and RevenueCat entries describe what they receive from it. Meta is described under “Not a sub-processor”.
© 4couple. Questions about our sub-processors: contact@4couple.ai.