Our providers

Who processes personal data for Molo, where, and on what legal footing. Updated 2026-09-20. Copies of the Standard Contractual Clauses we have signed are available from privacy@hellomolo.com.

| Provider | Entity | What it processes | Where | Transfer mechanism (GDPR) | POPIA s72 ground | |---|---|---|---|---|---| | Cloudflare | Cloudflare, Inc. (US) | Runs the app and API at the edge; stores audio and images (R2); queues; database connection pooling | Global network, including South Africa; US | EU–US Data Privacy Framework and Standard Contractual Clauses (Module 2) in the Cloudflare Customer DPA | Binding agreement (DPA with SCCs) | | PlanetScale | PlanetScale Inc. (US) | The database: accounts, learning data, subscription status | Stored in London, United Kingdom (AWS eu-west-2); support access from the US | UK: Commission adequacy decision (EU) 2025/2574; US access: Standard Contractual Clauses in the PlanetScale DPA | Adequate law (UK); binding agreement (US) | | Sentry | Functional Software, Inc. (US) | Error and crash reports | Event data in the EU (Frankfurt); account metadata in the US | EU–US Data Privacy Framework, with Standard Contractual Clauses as fallback | Binding agreement | | Resend | Plus Five Five, Inc. (US) | Sends our account and receipt emails | Sent from the EU region; sending records stored in the US | EU–US Data Privacy Framework and Standard Contractual Clauses | Binding agreement | | Expo (EAS) | 650 Industries, Inc. (US) | Delivers streak reminders (push tokens) to Apple and Google | US | EU–US Data Privacy Framework; processor terms in Expo's Terms of Service §3.2 | Contract necessity (delivering the notification you asked for) | | RevenueCat | RevenueCat, Inc. (US) | Subscription status and an anonymous subscriber identifier | US | Standard Contractual Clauses (Module 2) in the RevenueCat DPA | Binding agreement | | Apple | Apple Distribution International Ltd (Ireland) | Sign in with Apple; App Store purchases | EU / worldwide | Independent controller under Apple's privacy policy | Apple's own terms | | Google | Google Ireland Ltd / Google Commerce Ltd | Sign in with Google; Google Play purchases | EU / worldwide | Independent controller under Google's privacy policy | Google's own terms | | Stripe | Stripe Payments Europe Ltd (Ireland) | Card payments for web subscriptions | EU / worldwide | Independent controller for payment processing; Stripe DPA for ancillary services | Stripe's own terms |

Other learners in your weekly league (up to 20 people) see your name and rank. No advertising or analytics providers receive your data.