Oikos ConnectSubprocessors
Why this page exists. Most family apps say "trusted service providers" and stop there. We name ours. These are the companies that process data on our behalf to run Oikos Connect — what each does, which data it touches, and where it runs. Each processes data only under contract, only to provide its service to us, and none may use your family's data for its own purposes. When this list changes materially, we update this page and note it in the app.
Current subprocessors
| Provider | Purpose | Data categories processed | Location of processing | When |
|---|---|---|---|---|
| Supabase (Supabase Inc.) |
Primary database (PostgreSQL), authentication, and file storage | Account data (name, email, hashed password), all family content you store (calendar, chores, lists, meals, goals, prayers & faith entries, photos), child-profile data created by parents | United States (AWS us-east region) | Always |
| Cloudflare (Cloudflare, Inc.) |
Website & app hosting (Pages), content delivery, security/DDoS protection, cookieless web analytics, waitlist storage (Workers KV) | Technical/request data (IP address, user agent); waitlist email addresses you submit on this site | Global edge network; primary US | Always |
| PowerSync (JourneyApps Platform Inc.) |
Offline-first sync engine between your devices and our database | The family content that syncs to your devices (mirrors the Supabase categories for your family) | United States / cloud regions co-located with our database | Always |
| Google (Google LLC — OAuth & Calendar API) |
Optional sign-in with Google and two-way Google Calendar sync | Your Google account identity (name, email) if you sign in with Google; calendar events you authorize for sync. Used per the Google API Services User Data Policy, incl. Limited Use — never for advertising | Global (Google infrastructure) | Only if you connect it |
| Stripe (Stripe, Inc.) |
Payment processing and the self-serve billing portal for Plus, Family Pack, and credit packs | Billing details — card data is collected and held by Stripe, never by us; we receive confirmation + limited billing metadata | United States (global processing) | Only if you purchase |
| OneSignal (OneSignal, Inc.) |
Push notification delivery | Push token, device type, and the content of notifications sent to you (e.g., "Chore due") | United States | Only if you enable notifications |
| Anthropic (Anthropic, PBC) |
AI features — e.g., Magic Import (flyer/text → calendar event) and the weekly family digest | Only the specific content you submit for that AI action, sent to generate the result. Not used to train models. Disabled for child profiles by default | United States | Only when you use an AI feature |
Notably absent
- No advertising networks or ad-tech SDKs. There is no ad inventory to serve.
- No data brokers. Nothing is sold, rented, shared for "insights," or contributed to audience marketplaces.
- No third-party behavioral analytics. The only analytics on this site is Cloudflare's cookieless beacon, which collects no personal data and sets no cookies.
- No third-party form or email-capture services. The waitlist on our homepage posts to our own Cloudflare function.
Our commitments
- Every subprocessor is bound by a data-processing agreement limiting use of your data to providing the service to us.
- We review this list before adding any provider and prefer providers that support encryption in transit and at rest.
- Changes: we update this page when we add, remove, or materially change a subprocessor, and note material changes in the app. (A subscribe-to-changes mechanism is planned.)
- Questions about any provider on this list: [email protected].
Contact us
Privacy questions: [email protected]
General: [email protected]
Related: Privacy Policy · Terms of Service · Refunds · Children's Privacy