To run MedSchoolSOS we rely on a small set of trusted service providers ("subprocessors") that process personal data on our behalf and on our instructions. This page lists them so you always know who is involved. It's referenced by our Privacy Policy.
| Provider | What they do for us | Data involved | Location | Privacy policy |
|---|---|---|---|---|
| Supabase, Inc. | User accounts, authentication, and database hosting | Email, optional name, hashed password, Stripe customer & subscription IDs, learning progress, quiz attempts, and notes | European Union (Ireland) | Policy |
| Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) | Payment processing and subscription billing | Name, email, billing country, and card details (handled by Stripe — never stored by us) | Ireland and United States | Policy |
| Vercel Inc. | Application hosting and content delivery | IP address, request metadata, and server logs | United States | Policy |
| Cloudflare, Inc. (R2) | File storage and delivery of downloadable Anki decks | Download request metadata (including IP address) | United States / global edge network | Policy |
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics | Technical error and request metadata (personal data scrubbed before sending) | United States | Policy |
| Upstash, Inc. | Rate limiting (abuse protection) | Short-lived request counters keyed on IP address | United States / global | Policy |
Self-hosted fonts
We do not load fonts from a third-party font service. Our typefaces are downloaded at build time and served from our own domain, so opening a page does not send your IP address or any data to a font provider.
International transfers
Some providers above are based in, or process data in, the United States. Where personal data leaves the European Economic Area, the transfer is covered by appropriate safeguards — typically the European Commission's Standard Contractual Clauses together with each provider's data-processing agreement.
Changes
We keep this list current. If we add or change a subprocessor, this page is updated. For questions, contact privacy@medschoolsos.com.
— MedSchoolSOS