Data Subprocessors

Last Updated: November 14, 2025

About This Page: Little Hafiz uses trusted third-party service providers (subprocessors) to help us deliver our educational service. This page lists all companies that may have limited access to user data for specific purposes. All subprocessors are carefully vetted and bound by strict data protection agreements.

Current Subprocessors

Service Provider	Purpose	Data Access	Location	Website
Supabase Inc.	Database and file storage	User accounts, audio recordings, learning progress	United States	supabase.com
Railway Corp.	Application hosting	Technical logs only (no personal data)	United States	railway.app
Apple Inc.	Payment processing (iOS)	Payment information (not shared with us)	United States	apple.com
Google LLC	Payment processing (Android)	Payment information (not shared with us)	United States	google.com
Brevo (formerly Sendinblue)	Email delivery	Parent email addresses only	France (GDPR compliant)	brevo.com
RevenueCat Inc.	Subscription management and analytics	Purchase tokens, anonymous app-user IDs (NO child audio, learning data, or personal information)	United States	revenuecat.com

Subprocessor Obligations

All subprocessors are contractually required to:

✅ Process data only for the specified purposes
✅ Implement appropriate security measures
✅ Comply with data protection laws (COPPA, GDPR, CCPA)
✅ Not share or sell data to third parties
✅ Delete data upon request
✅ Notify us of any data breaches

Security Certifications

Supabase: SOC 2 Type II certified
Railway: Infrastructure security best practices
Apple/Google: Industry-leading payment security (PCI DSS compliant)
Brevo: GDPR compliant, ISO 27001 certified

Changes to This List

We may update our subprocessors from time to time to improve our service or replace providers. We will:

Update this page with any changes
Ensure new subprocessors meet our strict security and privacy standards
Notify users via email if there are significant changes

Questions?

If you have questions about our data subprocessors or how your data is processed, please contact us:

Email: [email protected]

← Back to Privac