These are the companies we use to run EndExpiry that handle personal information, what each one does, and where. We tell our customers at least 30 days before adding or replacing one, as our Data Processing Addendum explains.
Companies that handle personal information for us
| Company | What it does for EndExpiry | Information it handles | Where |
|---|---|---|---|
| Supabase, Inc. | Our database, sign-in and file storage | Everything stored in EndExpiry: accounts, stock records, check-ins, problem reports and screenshots, and photos of dates that could not be read | Stored in Sydney, Australia. Supabase is based in the United States, and its staff may access information from there to support and secure its service. |
| Vercel Inc. | Hosts the website and runs EndExpiry | Information passing through EndExpiry while it runs; request logs (IP address, browser, page and time) | EndExpiry runs in Sydney, Australia. Vercel is based in the United States, and its network and logs extend there. |
| TO DO: email delivery provider | Sends account emails, such as password reset links | Name and email address, and the email sent | TO DO: country |
| Google, Apple, Microsoft and Mozilla | Their push services carry expiry alerts to the browsers of people who turn alerts on | The device's alert address, and the alert, which is encrypted so they cannot read it | United States and other countries where they operate |
Services we use that receive no personal information from us
| Service | What it does | What it receives |
|---|---|---|
| Open Food Facts | Product details and photos for scanned barcodes | The barcode, from our server. When your browser loads a product photo from Open Food Facts (France), it receives your IP address and browser details, as any website does. |
Barcodes are read by your browser on your device, and so are QR codes and printed expiry dates. Camera images are not sent to anyone, apart from a photo of a printed date that could not be read, which is kept in our file storage (Supabase, above).