Subprocessors

• Amazon Web ServicesHosting, storage and email for the public service, and delivering the siteWhereCanada (Montréal, backups in Calgary)
• StripeTaking payment for plans bought on the web and calculating sales taxWhereUnited States
• Google PlaySelling plans in the Android app: it takes the payment and the sales tax, and confirms the purchase to usWhereUnited States
• Apple App StoreSelling plans in the iPhone app: it takes the payment and the sales tax, and confirms the purchase to usWhereUnited States
• Apple Push Notification serviceNotifications in the iPhone appWhereUnited States
• Google Firebase Cloud MessagingNotifications in the Android appWhereUnited States
• Google Firebase CrashlyticsCrash reports from the Android appWhereUnited States
• Your browser’s push serviceNotifications in a browser, from the browser’s maker (Google, Mozilla, Apple or Microsoft). Messages are encrypted so the service cannot read themWhereWherever the browser’s maker runs it
• OVHcloudAn encrypted backup for disaster recovery. It cannot read what it holdsWhereCanada (Toronto)
• Google WorkspaceOur support mailbox: email you send us, and notices when an email we sent you bouncesWhereUnited States
• ResendEmail from evenhearth.dev, the early-access serviceWhereUnited States

Your ledger stays with us. Email and notification services receive the address or device a message goes to and the message itself, never your entries or receipts. You can set notifications to Private in Settings, under Notifications, so a message names nobody. Stripe receives what it needs to take a payment and nothing about your household's spending, and so do Google Play and the App Store for a plan bought in an app. On evenhearth.dev, Stripe runs in test mode and no real card can be charged.

Pages from the public service reach you through Amazon's nearest delivery location, which can be outside Canada. It keeps no copy.

Receipts are read, and addresses are looked up, on equipment we operate in Canada. Your photos and searches are not sent to any AI, OCR or map company. There is no outside analytics, advertising network, tracker or data broker.

If you choose to sign in with Google, Facebook or Apple, that company tells us an account id and, if you allow it, your name and email address. With Apple you can share a private address that forwards to you instead of your own. We send them nothing about your household or your records. Their own privacy policies cover what they do with the sign-in. You can unlink any of them in Settings, under Sign-in & security. When your account is erased, we tell Apple, so it stops listing EvenHearth among the apps you sign in to with Apple.

• Bank of Canada and the European Central BankDaily exchange rates for entries in another currency. Our servers ask for the published rates and send nothing about youWhereCanada and the European Union

A new subprocessor is added to this page before it receives any personal information. Write to us if you would like to be told when that happens.

support@maliko.ca