Subprocessors We Use to Deliver WunderGuide
Last updated: February 20, 2026
1. Overview
JNSQ Labs Holdings LLC dba WunderGuide (“JNSQ”) uses certain third-party service providers (“subprocessors”) to help us deliver, secure, and support the Service. Each subprocessor only processes personal data on our instructions, under confidentiality and data-protection obligations. This list does not include third parties you separately interact with (e.g., external booking sites) or platform providers acting as independent controllers (see section 3).
2. Current Subprocessors
RevenueCat, Inc.
Purpose: Entitlements & receipt validation for App Store / Google Play purchases.
Data categories: App user identifiers, product IDs/SKUs, purchase/renewal/refund status, country/region, timestamps, limited device/app metadata.
Primary processing location: United States (may use additional regions).
Google LLC (Firebase & Crashlytics)
Purpose: Analytics, eventing, performance, crash reporting, push notifications (Android).
Data categories: App instance IDs, device/OS info, coarse location, usage events, crash logs, FCM tokens.
Primary processing location: United States / EU (service-dependent).
OpenAI, L.L.C.
Purpose: Speech-to-text, text-to-speech, large language model inference (voice assistant & chat composition).
Data categories: Audio streams you submit, derived transcripts, prompts, responses, technical metadata.
Primary processing location: United States (may use additional regions).
Google Cloud (Speech Services)
Purpose: Optional/auxiliary ASR/TTS for voice features.
Data categories: Audio you submit, derived transcripts, technical metadata.
Primary processing location: United States / EU (service-dependent).
Anthropic, PBC
Purpose: Large language model inference for content generation, summarization, and conversational features.
Data categories: Prompts, responses, technical metadata.
Primary processing location: United States.
Stripe, Inc.
Purpose: Payment processing for web-based transactions and subscription management.
Data categories: Payment card details (processed by Stripe, not stored by us), transaction metadata, billing address, email.
Primary processing location: United States (global infrastructure).
Cloudflare, Inc.
Purpose: Networking, DDoS/WAF, secure tunneling, edge caching.
Data categories: IP addresses, request headers, URLs, security/log data.
Primary processing location: Global edge network (regionalized features where available).
Akamai Technologies, Inc. (Linode)
Purpose: Application hosting (compute, databases), logging, backups.
Data categories: Account/profile data, usage metadata, IP addresses, content stored/processed by the app (as configured), logs.
Primary processing location: United States (primary); additional regions as configured.
Wasabi Technologies, Inc.
Purpose: S3-compatible object storage (user uploads, media, generated assets, logs/backups as configured).
Data categories: Files you upload or that the Service generates, related metadata.
Primary processing location: United States (bucket-region dependent).
Amazon Web Services, Inc. (Simple Email Service)
Purpose: Transactional email delivery (account notices, support responses).
Data categories: Email addresses, message content, delivery metadata.
Primary processing location: United States (region dependent).
Apple Inc. (APNs)
Purpose: Push notifications transport for iOS.
Data categories: Device push tokens, notification payload metadata.
Primary processing location: United States / Global infrastructure.
LiveKit, Inc. (if enabled)
Purpose: Real-time media transport for voice sessions (managed service option). Self-hosted alternatives may be used instead.
Data categories: Media session metadata and relayed audio streams (ephemeral), connection/room logs.
Primary processing location: United States / regional PoPs (service-dependent).
3. Independent Controllers (Platform Billing & Distribution)
The following act as independent controllers for purchases and app distribution. Their privacy policies and terms apply to those activities. We still receive limited receipt/transaction metadata for entitlement validation (see our Privacy Policy):
- Apple Inc. — App Store billing & distribution
- Google LLC — Google Play billing & distribution
4. Changes to This List
- We may update subprocessors over time to improve reliability, security, and performance.
- Where required by law or contract, we will provide advance notice (typically 30 days) before adding or replacing a subprocessor that materially changes processing.
- You can monitor updates at this page. For questions or objections permitted by your agreement or applicable law, email [email protected].
5. Notes & Scope
- This list covers subprocessors engaged by JNSQ to process personal data on our behalf.
- Self-hosted components (e.g., our databases, workflow engines) are operated by JNSQ and are not third-party subprocessors.
- Some providers offer regional controls; actual processing location may vary by feature configuration and your locale.
- Cross-border transfers use appropriate safeguards (e.g., SCCs) where required.