Legal
Sub-processors
Last updated · May 29, 2026
Centmond uses the following third parties to deliver the service. Each one acts as a data processor on our behalf and is bound by its own privacy policy and applicable data protection law. We pick the smallest set we can run on; if we add or remove a sub-processor we will update this page.
How to read this list
- Optional means the sub-processor is only used when you explicitly opt in to a related feature (for example, connecting a bank account uses Enable Banking).
- Location is where the provider primarily stores data, not where every request is routed.
Current sub-processors
Supabase
EU (eu-west-1, Ireland)- Purpose
- Database, authentication, and storage for user accounts and synced data.
- Data accessed
- Email, encrypted auth tokens, profile fields, transactions, accounts, budgets, subscriptions, goals.
- Privacy policy
- https://supabase.com/privacy
Vercel
US/EU edge network- Purpose
- Hosting for the Centmond website and web app, plus cookie-free Web Analytics.
- Data accessed
- Request metadata (IP, user agent) and aggregate page-view stats. No cookies set by Vercel Analytics.
- Privacy policy
- https://vercel.com/legal/privacy-policy
Resend
OptionalUS- Purpose
- Delivers the optional notification emails you can enable in Settings — the weekly digest and the monthly data export.
- Data accessed
- Your email address and the contents of the email, which may include account summaries and (for the monthly export) a CSV/PDF attachment of your data.
- Privacy policy
- https://resend.com/legal/privacy-policy
Frankfurter
EU- Purpose
- Daily foreign-exchange reference rates used to convert mixed-currency balances and totals into your default currency.
- Data accessed
- No personal data — only public currency codes (e.g. EUR, USD) are sent. Rates are cached for 24h.
- Privacy policy
- https://www.frankfurter.app
Enable Banking
OptionalEU (Finland)- Purpose
- Open-banking gateway for the optional bank-connection feature. Enable Banking Oy is a Finnish AISP authorised and supervised by the Finnish Financial Supervisory Authority (FIN-FSA); Centmond uses their licence to access EU/EEA bank PSD2 APIs.
- Data accessed
- Bank name, IBAN, account balances, and booked / pending transactions for accounts you explicitly connect (typically the last 90 days, refreshed daily). Enable Banking holds the bank consent and the authentication session; Centmond never sees your online-banking credentials.
- Privacy policy
- https://enablebanking.com/privacy-policy
Finnhub
OptionalUS- Purpose
- Primary stock / ETF price quotes, company logos, and symbol search for the optional Investments feature.
- Data accessed
- Only the public symbol of each asset you record (e.g. AAPL, MSFT). Finnhub responds with current price, 24h change, and a company profile (name, exchange, logo URL).
- Privacy policy
- https://finnhub.io/policies/privacy
CoinGecko
OptionalSingapore- Purpose
- Crypto price quotes and coin icons for the optional Investments feature.
- Data accessed
- Only the public symbol of each crypto asset you record (e.g. BTC, ETH). CoinGecko's free API requires no key and returns price, 24h change, and a coin image URL.
- Privacy policy
- https://www.coingecko.com/en/privacy
Alpha Vantage
OptionalUS- Purpose
- Fallback stock / ETF price quotes for the optional Investments feature when Finnhub returns no match.
- Data accessed
- Only the public symbol of each asset you record. Alpha Vantage responds with current price; profile / logo data is not used from this provider.
- Privacy policy
- https://www.alphavantage.co/privacy/
Hugging Face
US- Purpose
- One-time download of public Gemma model files used by the on-device AI in the iOS and macOS apps.
- Data accessed
- Download request metadata only. Model files are public and downloading one transfers no personal data.
- Privacy policy
- https://huggingface.co/privacy
Apple
Global- Purpose
- App Store and TestFlight distribution for the iOS and macOS apps.
- Data accessed
- Whatever Apple collects to deliver the app to your device. Governed by Apple's own terms.
- Privacy policy
- https://www.apple.com/legal/privacy/
Notifications of changes
We will update this page whenever we add or remove a sub-processor. For material changes (a new sub-processor that handles personal data, or a change in where data is stored) we will also update the "last updated" date at the top of this page.
Questions
Email mani.scs.gh@gmail.com with any question about how we work with the sub-processors above.
Questions? Email mani.scs.gh@gmail.com.