Sub-processors
Last updated: 7 August 2026
Makatib.App runs on a small set of infrastructure providers. Where they process personal data on our behalf, they act as sub-processors under the privacy policy. We keep this list deliberately short and will update it before adding any new provider.
Current sub-processors
| Provider | Purpose | Data location | Transfer safeguards |
|---|---|---|---|
| Supabase, Inc. | Database, authentication and file storage, where madrassa records live. | EU (eu-west-1, Ireland) | UK IDTA / Standard Contractual Clauses |
| Vercel, Inc. | Application hosting and content delivery for the website and app. | Functions in EU (eu-west-1, Ireland); static content served from a global edge CDN. US-headquartered. | UK IDTA / Standard Contractual Clauses |
| Resend, Inc. | Transactional email: delivery of beta interest submissions and service emails. | EU (eu-west-1, Ireland) | UK IDTA / Standard Contractual Clauses |
| Stripe Payments Europe, Ltd. | Card and Direct Debit payments where a madrassa collects fees through the Student and Parent Portal. The madrassa holds its own Stripe account and is the merchant; Makatib.App never receives or holds the money. | Ireland, with group processing in the EEA, UK and United States. | Stripe data-processing agreement and Standard Contractual Clauses |
| Cloudflare, Inc. | Cloudflare Turnstile bot protection on sign-in, sign-up, password reset, the in-app change-password form and a madrassa’s application form. Cloudflare receives the challenge token and the visitor’s IP address to confirm the submission is not automated. No form content is sent. | Global edge network. US-headquartered. | Cloudflare data-processing addendum and Standard Contractual Clauses / UK Addendum |
| Google Ireland Limited | Google Analytics, enabled only with consent, for aggregated service usage reporting. | May be processed in the UK, EEA and United States. | Google data-processing terms and applicable contractual transfer safeguards |
Changes to this list
When we add or replace a sub-processor we will update this page, and madrassa administrators will be notified of material changes by email or in the app. Questions about this list: privacy@makatib.app or info@makatib.app.