Ultima revisione: 2026-10-23

Sub-responsabili del trattamento

Queste terze parti possono trattare dati personali per conto di Murmurly. Ogni voce indica quali dati vedono, dove vengono trattati e quale accordo di trattamento dei dati regola il rapporto.

Catena delle notifiche push

Apple Inc.

APNs delivery

Dati
device push tokens, payload in transit
Regione
US
Base del DPA
Apple Developer Program License Agreement, Schedule 2 + Attachment 1 (Apple Push Notification Service), auto-accepted on enrollment Vedi accordo

Google LLC

FCM delivery

Dati
device push tokens, payload in transit
Regione
US + EU
Base del DPA
Firebase Data Processing and Security Terms, auto-accepted on Firebase project creation Vedi accordo

Expo Inc.

Expo Push relay

Dati
device push tokens, payload in transit (~5 min storage)
Regione
US (AWS us-east)
Base del DPA
Expo Terms of Service §3.2 (GDPR — Standard Contractual Clauses, clauses 9, 11, 13, 17, 18) Vedi accordo

Infrastruttura

Supabase Inc.

Database, auth, storage

Dati
authentication, encrypted journal data
Regione
AWS ap-southeast-2 (Sydney)
Base del DPA
Supabase Terms of Service Data Processing Addendum (auto-accepted) Vedi accordo

Vercel Inc.

App hosting + CDN

Dati
request metadata, application logs
Regione
ap-southeast-2 (Sydney) compute; global edge CDN
Base del DPA
Vercel Terms of Service Data Processing Addendum (auto-accepted) Vedi accordo

Stripe Inc.

Payment processing (billing)

Dati
cardholder name, payment-method tokens, billing email
Regione
US
Base del DPA
Stripe Terms of Service Data Processing Addendum (auto-accepted) Vedi accordo

Resend Inc.

Transactional and sign-in email: sign-in links, verification codes, circle invitations, data-request receipts and security alerts

Dati
recipient email address, transactional email body
Regione
US
Base del DPA
Resend Terms of Service Data Processing Addendum (auto-accepted) Vedi accordo

Sub-responsabili IA

Amazon Web Services, Inc.

Runs the Coach AI model (Anthropic Claude) via Amazon Bedrock for coach inference and session-summary generation, and turns text into speech with Amazon Polly when a user talks with Coach in the Murmurly iPhone or Android app: Coach replies, and, in a circle, the other members' messages

Dati
conversation text, system prompts, and AI-generated replies during inference, processed inside Australia, not retained (zero data retention), and not shared with Anthropic; for speech, the text of each Coach reply and, in a circle, the text of the other members' messages read aloud to each listener (sometimes with the sender's name), never anyone's voice (the phone turns speech into text on the device), not stored and not used to improve AWS services
Regione
Australia only: inference in Sydney (ap-southeast-2) and Melbourne (ap-southeast-4), via the Amazon Bedrock Australia geographic inference profile; speech in Sydney (ap-southeast-2) only
Base del DPA
AWS Customer Agreement and AWS Data Processing Addendum (Standard Contractual Clauses incorporated), auto-accepted on account use Vedi accordo

Ogni responsabile nuovo o modificato in modo sostanziale passa da una verifica sulla privacy prima di essere attivato. Torna all'informativa sulla privacy.