The list
| Company | Job | What it sees | Where |
|---|---|---|---|
| Cloudflare | Hosting, database, queues, file storage | Account, tasks, focus history, AI messages, everything the app stores | Global, with regional storage |
| RevenueCat | Subscriptions and entitlements | An app user id, purchase receipts, plan state. Never your tasks | United States |
| Apple | App Store, Sign in with Apple, push, subscriptions | App Store purchases, an Apple identifier if you use Apple to sign in | United States |
| Play Store, Google sign-in, push, Health Connect | Play purchases, a Google identifier if you use Google to sign in | United States | |
| The model provider | Answers one AI turn | The message you sent and the day context the app attached | United States |
| Resend | Verification and recovery email | Your email address and the message we send | United States |
Your phone's own services are not subprocessors: Apple's Screen Time extensions and Android's usage access run on the device, and the data they hold never reaches Arisyn Studios.
Why these
Each of these does one job that Floe would otherwise have to build and secure itself. A smaller list is better, so the list is kept short: no advertising network, no analytics reseller, no data broker, and no third party whose business is knowing what you do.
Every one of them is bound by a contract that limits the data to the job above, and by the transfer safeguards described in theprivacy policy.
Changes
If a subprocessor is added or replaced, this page is updated before the change goes live, and the date at the top changes with it. If you have an account, a material change is announced in the app, so you can object before your data moves.