Sub-processors
Oh My Lore! uses the following sub-processors. Each has its own privacy policy and safeguards for international transfers. This list is referenced from our Privacy Policy (§4).
Current Sub-processors
| Sub-processor | Purpose | Data processed | Location | Transfer safeguard | Privacy policy |
|---|---|---|---|---|---|
| Google LLC / Google Cloud (Firebase Auth, Firestore, Realtime DB, Cloud Storage, Cloud Messaging) |
Hosting, authentication, database, media storage, push notification delivery | Account data, campaign content, uploaded images, push notification tokens, technical data | EU (primary) w/ US fallback | EU–U.S. Data Privacy Framework (certified) | Firebase Privacy |
| Google LLC — Vertex AI (Gemini) | AI generation, OCR for map/note scanning, session recaps | AI prompts (text & images you submit to AI features) | EU (europe-west1) | Processed in EU region; DPF (Google LLC, US entity); Vertex enterprise terms prohibit training on your inputs | Google Privacy |
| Polar Software, Inc. | Web payment processing & Merchant of Record (purchases at ohmylore.app) — checkout, billing, subscription management, VAT/sales-tax calculation & remittance, invoices, refunds | Billing email, payment token, billing country/address, payment amount, transaction & subscription history | US | Standard Contractual Clauses (SCCs) under EU Commission Implementing Decision 2021/914 | Polar Privacy |
| Apple Inc. | iOS App Store payment processing (seller of record for in-app purchases) & Sign in with Apple | Subscription/entitlement status, purchase history, receipt identifiers; Apple ID sign-in data | US | Standard Contractual Clauses (SCCs) | Apple Privacy |
| RevenueCat, Inc. | iOS subscription & entitlement management | Firebase UID, email, purchase/entitlement status, receipt identifiers | US | Standard Contractual Clauses (SCCs); EU–U.S. Data Privacy Framework | RevenueCat Privacy |
| Loops, Inc. | Transactional & wishlist email delivery | Email address, name | US | Standard Contractual Clauses (SCCs) | Loops Privacy |
| Discord Inc. | Optional “Sign in with Discord” authentication | Discord account ID, username, email address (basic profile via OAuth) | US | Standard Contractual Clauses (SCCs); EU–U.S. Data Privacy Framework | Discord Privacy |
| Capgo SAS | Mobile app over-the-air (OTA) update delivery | Device/app version, IP address | France (EU) | Processed within the EEA (no third-country transfer) | Capgo Privacy |
Future Sub-processors (Not Yet Active)
The following sub-processors are pre-staged for the mobile milestone and are not yet active. We will update this page and notify active users at least 14 days in advance before activating them.
| Sub-processor | Purpose | Status |
|---|---|---|
| Google LLC (Google Play Billing) |
In-app purchase processing on Android (seller of record on the Play Store) | Future — Android release; not yet active |
Transactional Email
Sign-up and account emails are sent via Firebase Authentication (Google LLC). Transactional and wishlist emails are sent via Loops, Inc. Billing receipts and invoices for web purchases at ohmylore.app are sent by Polar Software, Inc. as our Merchant of Record; for iOS App Store purchases, receipts are issued by Apple Inc. Support correspondence goes through Google Gmail at support@ohmylore.app.
Technical Recipients
Web fonts are self-hosted on our own servers as of 15 July 2026 — loading our pages sends no font request to Google. Google Fonts, previously listed here as a technical recipient (IP address visible to Google’s CDN), no longer receives any data.
Removed Sub-processors
Stripe, Inc. — previously listed as payment processor. Payment processing is now handled by Polar Software, Inc. as our Merchant of Record. Stripe is no longer our direct sub-processor.
Buy Me a Coffee — previously listed as a donation processor. It is now referenced only as an outbound link; we do not send it your account data, so it is not a sub-processor.
Changes to This List
When we add or change a sub-processor we update this page and notify active users by email at least 14 days in advance where reasonably possible, unless urgent for security or legal reasons.
Contact
Questions about this list or our sub-processor relationships: support@ohmylore.app
- Tomáš Holocsy, sole trader (OSVČ) registered in the Czech Republic
- IČO: 07942699 · DIČ: CZ9110126344 (VAT-identified person — not a VAT payer)
- Place of business: Jabloňová 1723/71, Záběhlice, 106 00 Praha 10, Czech Republic
- Registered in the Czech Trade Licensing Register (živnostenský rejstřík)