NewYour apps can now ship to the app storesShip your apps to the app stores
Legal  ✦

Sub-processors

Privacy PolicyTerms of ServiceDPASub-processors

Sub-processors

Third-party services that process data on behalf of Whacka and its app publishers.

Last updated: May 13, 2026

Whacka uses the following sub-processors to provide the Service. This list is maintained in accordance with our Data Processing Agreement. We will update this page at least 14 days before adding or replacing a sub-processor.

To receive notifications of changes, contact us at [email protected].

Current sub-processors

Sub-processorPurposeData processedLocation
Supabase (via AWS)Primary database, authentication, file storageAccount data, App Data, auth credentials, uploaded filesUS (AWS us-west-2, Oregon)
Amazon Web Services (AWS)Infrastructure hosting (underlying Supabase)All data stored in SupabaseUS (us-west-2, Oregon)
Alibaba CloudApplication compute serversApp generation requests, runtime processing (ephemeral, not persisted)US
CloudflareEdge proxy, CDN, DDoS protection, static asset delivery (R2)IP addresses, request metadata, published app static assetsGlobal edge network
AnthropicAI inference (Claude)App descriptions, prompts, runtime AI requestsUS
OpenAIAI inference (GPT, DALL·E)App descriptions, prompts, image generation requestsUS
Google (Gemini)AI inferenceApp descriptions, prompts, runtime AI requestsUS
StripePayment processingBilling name, email, payment method, transaction historyUS / Global
ResendTransactional email deliveryEmail addresses, email contentUS

Notes

  • AI providers (Anthropic, OpenAI, Google): Prompts and content are sent for inference only. We do not use these providers to train models on user data. Each provider maintains their own data processing terms.
  • Cloudflare R2: Static PWA assets and user-uploaded media. Assets that may contain personal data are subject to the retention and deletion policies in our Privacy Policy.
  • Alibaba Cloud: Used for application compute and short-term operational data (runtime logs, job queues). Operational data is retained temporarily and not used as long-term storage.

For reference, here are the data processing agreements of our sub-processors: