Subprocessors

Last updated: July 12, 2026

1 · What a subprocessor is

An outside provider that processes personal data on our behalf to run the service. We only work with the providers listed here, and we only give each one the minimum access its function needs.

2 · Supabase — database, authentication and storage

Hosts the database for the whole ecosystem with row-level isolation (each organization or household only sees its own data), user authentication, and file storage (photos, receipts, documents).

3 · Stripe — institutional billing

Processes payments for institutional plans (church, pastor, conference). PCI-DSS certified; we never see or store card numbers.

4 · RevenueCat — AdventHome subscriptions

Manages subscriptions purchased in-app through the App Store or Google Play.

5 · Google — sign-in and Gemini

Sign-in with a Google account. In AdventHome, Gemini models process a receipt image only to extract amount, merchant and date; the receipt is not used to train models.

6 · OpenAI — receipt reading in AdventEvents

AdventEvents' Finance module uses an OpenAI model (gpt-4o-mini with vision) to extract amount, merchant and date from a receipt photographed by the event organizer. It only processes the image you upload; it is not used to train OpenAI's models.

7 · Apple — sign-in

Sign-in with Apple ID when you choose that option in the native apps.

8 · PostHog — product analytics (only with your consent)

On events.adventpro.org, measures which pages work well and helps catch errors. Only activates if you accept the cookie banner; see the Cookie Policy.

9 · Sentry — error monitoring

Receives technical reports when something fails (error messages, screen context) so we can fix it. It does not intentionally receive the content of your personal data.

10 · Google Workspace (Gmail SMTP) — transactional email

Sends the service's emails: confirmations, billing receipts, notifications and reports you request to be sent.

11 · Data Processing Agreements (DPAs)

Every provider on this list offers its own standard data processing agreement (DPA) and, where applicable, Standard Contractual Clauses for international transfers. We are formalizing activation of these agreements provider by provider; this page is updated as each one is completed.

12 · Changes to this list

If we add, remove or change a subprocessor, we update this page with the date at the top. If the change is significant, we will also announce it in the Privacy Policy.

Questions about a specific provider? Write to us at support@adventpro.org

Subprocessors · AdventPro