Data Subprocessors

Last Updated: November 14, 2025

About This Page: Little Hafiz uses trusted third-party service providers (subprocessors) to help us deliver our educational service. This page lists all companies that may have limited access to user data for specific purposes. All subprocessors are carefully vetted and bound by strict data protection agreements.

Current Subprocessors

Service Provider Purpose Data Access Location Website
Supabase Inc. Database and file storage User accounts, audio recordings, learning progress United States supabase.com
Railway Corp. Application hosting Technical logs only (no personal data) United States railway.app
Apple Inc. Payment processing (iOS) Payment information (not shared with us) United States apple.com
Google LLC Payment processing (Android) Payment information (not shared with us) United States google.com
Brevo (formerly Sendinblue) Email delivery Parent email addresses only France (GDPR compliant) brevo.com
RevenueCat Inc. Subscription management and analytics Purchase tokens, anonymous app-user IDs (NO child audio, learning data, or personal information) United States revenuecat.com

Subprocessor Obligations

All subprocessors are contractually required to:

Security Certifications

Changes to This List

We may update our subprocessors from time to time to improve our service or replace providers. We will:

Questions?

If you have questions about our data subprocessors or how your data is processed, please contact us:

Email: support@littlehafiz.app

← Back to Privac