Subprocessors
Who receives your data
These are the third-party services SHY uses to run the product. Each processes data on SHY's behalf as a processor unless noted. We keep this list short on purpose — and current.
| Service | Purpose | Data involved | Processing location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account, profile, connections, messages, media | United States (AWS us-west-2) |
| Cloudflare | Hosting and content delivery for shyapps.com | IP addresses, request logs | Global edge network |
| Google Firebase | Push notifications, app performance, app integrity checks | Push tokens, device and performance data | United States / global |
| Google Sign-In | Optional sign-in method | Name, email (only if you choose it) | United States / global |
| Sentry | Error monitoring | Crash and error reports (scrubbed of content) | United States |
| Agora | Voice and video call infrastructure | Call media streams (relayed, not stored by SHY) | Global relay network |
| Resend | Transactional email (confirmations, notices) | Email address, message subject | United States |
Payments: SHY does not currently process payments — checkout is not enabled. When it launches, the payment processor will be added here before any charge occurs.
See also the Privacy Policy and your privacy rights (review, export, delete — all available in-app).
Audited against the shipped code and configuration on August 19, 2026.