Legal

Sub-processors

Last updated 5 September 2026 List version 1.0

Every company that handles TrialCut user data on our behalf, what each one actually receives, and — importantly — which ones are listed here but not yet switched on. This page is versioned separately from the Privacy Policy so it can be kept current without republishing it.

Active today

ProviderPurposeWhat it receivesWhereStatus
Google LLC
Google Ireland Ltd for EEA/UK users
Sign-in, and access to your mailbox at your instruction Your Google account, the searches we run against your mailbox, and the cancellation emails you send. Google already holds your mail — this is us reading and sending through it, not sending anything to them. Global Active
Render Services, Inc. Application hosting and the managed database Everything TrialCut stores: your account, your trials, your cancellations and the 600-character confirmation excerpts, plus server logs containing your IP address. Oregon, USA Active
Apple Inc. App distribution, payment, and push notification delivery Your device's push token, and the text of each alert — which contains the merchant's name and the exact amount. Separately, as a controller in its own right, Apple handles your subscription payment; we never see your payment details. Global Active

Named but not active

These are listed in advance, honestly labelled, because naming a sub-processor before it starts processing is the right order to do it in. Neither currently receives any data of yours.

ProviderIntended purposeWould receiveWhereStatus
OpenAI, L.L.C. Reading the minority of trial emails that ordinary pattern matching cannot parse The subject line and up to 4,000 characters of that single message. Not your email address, not the sender, not any identifier. United States Not active
RevenueCat, Inc. Managing subscription state across devices An internal account identifier and your subscription status. No email address, no mail content, no merchant data. United States Not active
On the AI provider specifically

The model-assisted path is disabled in our production configuration and the server refuses to call it rather than failing quietly. It will not be switched on until we hold a contractual no-training term, a zero-data-retention endpoint and a no-human-review commitment — and this page and the Privacy Policy will be updated first. Nothing we learn from your mail is ever used to train, fine-tune or improve any model, under any configuration.

Who is not on this list

There is no analytics provider, no crash reporter, no attribution or advertising network, no email marketing platform, no customer-support tool holding your data, and no data broker. The iOS app contains no third-party libraries at all. If that ever changes, the provider appears above before it receives anything.

Notice of changes

Before we add a sub-processor that would receive personal data, we will update this page and the change log below. Where a change is material — a new category of data, or a provider receiving mail content for the first time — we will also tell you in the app before it takes effect, and ask for your consent again where the law requires it.

If you would like to be notified of changes to this list directly, write to ckjergu@gmail.com and we will add you.

Change log

DateVersionChange
5 September 2026 1.0 First published. Google, Render and Apple active. OpenAI and RevenueCat named as not active.