Vocabula
Subprocessors
Last updated: 31 August 2026
Vocabula uses the following subprocessors to operate the service. We use contractual safeguards (including DPAs where required by law) with these providers.
Where listed below, processing is governed by each provider's data processing agreement incorporated into their standard terms (no separate countersignature required for self-serve accounts). Self-hosted Supabase on AimDev k3s is infrastructure we operate; no separate vendor DPA applies to that stack or to AimDev application hosting in the table below.
| Processor | Purpose | Location | DPA |
|---|---|---|---|
| Self-hosted Supabase (AimDev k8s) | Authentication, Postgres database, sync storage (Pro) | NZ | N/A — operated by AimDev (same entity as controller) |
| Apple Inc. | App Store distribution and in-app subscription billing; iOS's built-in speech recogniser, when you choose it instead of the on-device models | US / global | Apple Privacy Policy |
| Google LLC | Google Play distribution and in-app subscription billing; Sign-in with Google (OAuth); Android's built-in speech recogniser, when you choose it instead of the on-device models | US / global | Google DPA |
| RevenueCat, Inc. | Subscription state management for App Store and Google Play purchases (purchase receipts and entitlement status — no card numbers) | US | RevenueCat DPA |
| Stripe, Inc. | Payment processing for legacy web subscriptions; retained billing records required by tax law | US / global | Stripe DPA |
| Cloudflare, Inc. | CDN, DDoS protection, TLS termination | Global | Cloudflare DPA |
| Resend, Inc. | Transactional email (sign-up confirmation, magic links, password reset via Supabase Auth) | US | Resend DPA |
| AimDev infrastructure (k3s) | Application hosting, static assets, API, crash diagnostics (self-hosted) | NZ | N/A — operated by AimDev (same entity as controller) |
We do not sell personal data. On-device AI (Whisper, TTS, local models) runs on your own device and sends no audio to any of these processors — the only exception is the platform speech recogniser noted against Google and Apple above, which you choose to use instead. Speech and text models may download from Hugging Face on first use (device-to-Hugging Face; not stored by us).