Skip to content
Legal

Who touches your data

Every provider that processes personal data for Snootly, what it does, where it runs, and the safeguard that covers data leaving the UK or EEA.

Last updated: 1 October 2026

This is the current list referred to in Section 7 of the Privacy Notice. We update it before any new provider begins processing personal data.

In brief

Your account, pet records, photographs and PostHog product analytics are hosted in the European Union. Attribution, AI, voice, sign-in, email and hosting providers process data in the United States or on global infrastructure, under the safeguards in Section 8 of the Privacy Notice. Each provider is bound by data processing terms, handles only what its role needs, and does not use your content to train models. We do not sell personal data and we do not show advertising.

Providers

  • Supabase

    European Union

    Database, authentication and file storage. Where your account, your pets' records, care entries, documents and photographs live.

    Transfer safeguard: Hosted in the European Union, so your data does not leave the EU for processing; the provider's data processing terms include the EU Standard Contractual Clauses with the UK Addendum for any remote support access.

  • Anthropic

    United States

    The language model behind Snootly Agent, in text and in the spoken side of voice conversations, plus day planning, training generation and automated screening of the text of public posts and comments for prohibited content, independently of optional AI feature permission. Conversation inputs and outputs are deleted within 30 days unless flagged under Anthropic's usage policies or retention is required by law. Its commercial terms do not permit training on our data.

    Transfer safeguard: EU Standard Contractual Clauses with the UK Addendum, in the provider's data processing terms.

  • ElevenLabs

    United States

    Converts your speech to text and runs the real-time voice conversation. Holds the recording and transcript only while your session is in progress; we delete them immediately when it ends and retry any failed deletion until it succeeds.

    Transfer safeguard: Certified under the EU-US Data Privacy Framework and its UK Extension; the provider's data processing terms also include the EU Standard Contractual Clauses with the UK Addendum.

    ElevenLabs uses LiveKit as its own subprocessor to carry the audio of a live session. We hold no LiveKit account and send it nothing directly.

  • Google

    United States and global infrastructure

    Gemini automatically screens eligible shared images, owner avatars and pet photographs for prohibited content, and checks sampled still frames from shared videos. Safety screening runs independently of optional AI feature permission, and moderators may review content. Private activity photographs, documents and training-result videos are not automatically sent for safety screening. Also Sign in with Google, Maps and Places for pet-friendly venues and their photographs, and optional Google Calendar sync.

    Transfer safeguard: Certified under the EU-US Data Privacy Framework and its UK Extension; the provider's data processing terms also include the EU Standard Contractual Clauses with the UK Addendum.

    For Sign in with Google, Google is an independent controller under its own privacy policy.

  • Apple

    United States and global infrastructure

    Sign in with Apple, push notification delivery (APNs), Apple Weather (forecasts looked up with reduced-precision coordinates, including the saved location we use for severe weather alerts, rounded to roughly 1 km) and Apple Maps.

    Transfer safeguard: EU Standard Contractual Clauses in Apple's data transfer terms.

    For Sign in with Apple, Apple is an independent controller under its own privacy policy.

  • PostHog

    European Union

    Product analytics in the app, collected only after you allow them and linked to your account identifier; optional server-side subscription analytics and cancellation feedback also run only with that permission. Error and crash reports from the app are sent whatever your analytics choice, so we can detect and fix faults: they carry technical details such as the error, app version, device model and OS version, and never include the contents of your notes, photographs or chats. Unless you have allowed product analytics, they are not linked to your account and use only a random identifier that resets each time the app starts; if you have allowed it, they can be linked to your account for support. PostHog works out an approximate location (country, region and city) from your IP address and then discards the IP address; no postcode or map coordinates are kept. Session replay is disabled in the iOS app. Website PostHog analytics run only after you accept the cookie banner. Product analytics are kept for two years unless an earlier deletion request applies.

    Transfer safeguard: Hosted in the European Union, so your data does not leave the EU for processing; the provider is also certified under the EU-US Data Privacy Framework and its UK Extension, and its data processing terms include the EU Standard Contractual Clauses with the UK Addendum.

  • Singular

    United States and international processing

    Advertising attribution for Snootly's marketing, enabled only when you have allowed Ad measurement in the app (off by default) and granted Apple's App Tracking Transparency permission, which the app asks for only after that. Withdraw either in the app under Profile, then Usage data and AI, or in your device's Settings. Receives device and account identifiers, install and selected app activity, and purchase information. Singular data is copied into PostHog only if you have also allowed product analytics. No third-party ads are displayed in the app.

    Transfer safeguard: EU Standard Contractual Clauses with the UK Addendum, in the provider's data processing terms.

    Singular's data processing terms govern customer-data handling and international transfers. Retention and deletion follow those terms and our configured service. Account-deletion requests include attribution cleanup; we do not claim completion while a required provider step is pending.

  • Resend

    United States

    Sends our transactional email: sign-in confirmations, caregiver invitations, receipts and security notices. Also holds the "Stay in the loop" email list you can join on snootly.app (your email address and when you joined) and sends that list its welcome email, Snootly updates including the launch, dog-friendly finds and dog-life tips. Every one of those emails has an unsubscribe link, or reply to any of them to be removed.

    Transfer safeguard: Certified under the EU-US Data Privacy Framework and its UK Extension; the provider's data processing terms also include the EU Standard Contractual Clauses with the UK Addendum.

  • Vercel

    United States and global infrastructure

    Hosts snootly.app, this website, including its server-side page counting described in the cookie statement. Vercel's own Web Analytics and Speed Insights also measure which pages are viewed and how well each page performs in a real browser; both are cookieless, store and read nothing on your device, and produce aggregate counts and timings rather than a profile. It does not host the app's database or your content.

    Transfer safeguard: Certified under the EU-US Data Privacy Framework and its UK Extension; the provider's data processing terms also include the EU Standard Contractual Clauses with the UK Addendum.

  • Slack (Salesforce)

    United States

    Internal alerts to our own team: items awaiting moderation (for example a large event held for review, with its title and location) and service fault reports, which may carry a user identifier. Never your pet records or content in bulk.

    Transfer safeguard: Certified under the EU-US Data Privacy Framework and its UK Extension; the provider's data processing terms also include the EU Standard Contractual Clauses with the UK Addendum.

Changes to this list

If a provider is not listed above, it does not process personal data for Snootly. When we add or change a provider we update this page first, before the provider begins processing personal data, and where the change is material we tell you in the app. The date at the top is the date of the last change. Questions? Email hello@snootly.app.