Centmond uses the following third parties to deliver the service. We pick the smallest set we can run on; if we add or remove one, we will update this page. Not all of them are sub-processors in the strict sense. The role each one plays is stated in its entry, and it decides who you go to about your data.
How to read this list
- Processor means the provider acts only on our instructions under an Art. 28 GDPR contract. We stay responsible for your data, and you can bring any request to us.
- Independent controller means the provider decides its own purposes for what it receives. Its own privacy policy governs that part, and we cannot instruct it on your behalf.
- No personal data means nothing that could identify you is sent, such as a currency code or a public ticker symbol.
- Optional means the provider is only used when you switch on a related feature. If you never connect a bank, never use the assistant, never buy Premium, and never turn on email or push notifications, those providers receive nothing.
Current sub-processors and recipients
Supabase
ProcessorEU (eu-west-1, Ireland)- Purpose
- Database, authentication, and storage for user accounts and everything you sync.
- Data accessed
- Email address, authentication tokens, profile fields; the email addresses on the signup waitlist; the Premium waitlist (the account ids on it, with when and where each joined); once Premium is on sale, our record of each Premium subscription (Paddle's customer and subscription ids, its status, plan, current period end and any scheduled change); accounts, transactions, balances, budgets, subscriptions, goals, investments, categories and rules, receipt-photo hashes; assistant conversations and assistant memory; notification settings and push addresses; and operational logs. Bank identifiers are additionally encrypted at the field level.
- Transfer
- None required: the project runs in the EU region and the data stays there.
- Privacy policy
- https://supabase.com/privacy
Vercel
ProcessorEU (Dublin) for the servers that run the app; global edge network; company in the US- Purpose
- Hosting for the Centmond website and web app, plus cookie-free Web Analytics and Speed Insights when you allow the analytics category.
- Data accessed
- Request metadata for every page load (IP address, user agent, URL, timestamp) in edge and function logs, plus aggregate page-view counts and page-load timings. Analytics and Speed Insights set no cookies and do not identify you, but the request logs do contain your IP address, which is personal data.
- Transfer
- Standard Contractual Clauses, plus the UK Addendum. This is the mechanism Vercel itself names for personal data leaving the EEA.
- Privacy policy
- https://vercel.com/legal/privacy-policy
Cloudflare
ProcessorGlobal edge network; company in the US- Purpose
- Turnstile bot protection on the sign-up, sign-up waitlist, sign-in, password-reset and confirmation-resend forms. Strictly necessary: without it those endpoints can be attacked at scale.
- Data accessed
- IP address, user agent, and a challenge token, at the moment one of those five forms is opened or submitted. Cloudflare states that Turnstile does not use this to track visitors across sites and does not set an advertising cookie.
- Transfer
- EU-US Data Privacy Framework. Cloudflare's processing terms fall back to Standard Contractual Clauses if that certification lapses.
- Privacy policy
- https://www.cloudflare.com/privacypolicy/
Sentry
ProcessorEU (Germany)- Purpose
- Error monitoring for our servers and for your browser, so a failure that hits your account can be found and fixed.
- Data accessed
- Error type and stack trace, the route that failed, runtime and version, and a pseudonymous account identifier. IP addresses, cookies and request headers are not attached, secrets and personal data are stripped from the event before it is sent, and no transaction data or assistant content is included. For a small sample of requests, it also records how long each step took.
- Transfer
- None required: the project runs on Sentry's EU region and events stay there.
- Privacy policy
- https://sentry.io/privacy/
Resend
ProcessorUS- Purpose
- Delivers account email (sign-up confirmation, password reset) and the optional notification emails you can enable in Settings: the weekly digest and the monthly data export. It also delivers a short note to us when someone joins the sign-up waitlist or joins or leaves the Premium waitlist, and, to each person on the Premium waitlist, the confirmations when they join or leave and the email telling them Premium is open. Once Premium is on sale, it also delivers the confirmation when you cancel Premium, and a note to us with the reason for an extraordinary cancellation or your answer to “What made you cancel?”.
- Data accessed
- Your email address and the full contents of the email, which for the digest includes account and spending summaries and for the monthly export includes a CSV or PDF attachment containing your transactions. A sign-up waitlist note to us contains the address that joined. A Premium waitlist note to us contains only the new total and, for a join, where it came from, and no personal data of the person who joined. A cancellation note to us contains your email address, your account id and the reason or answer you gave.
- Transfer
- Standard Contractual Clauses, which stand on their own. Resend is additionally certified under the EU-US Data Privacy Framework, but the clauses do not depend on it.
- Privacy policy
- https://resend.com/legal/privacy-policy
Anthropic
Processor · OptionalUS- Purpose
- Runs Claude, the model behind the optional AI assistant for every account, free and Premium, and behind the Premium features that sort and check your transactions (once Premium is on sale; it is not on sale yet). It is the only AI provider: if it cannot answer, nothing is sent anywhere else. Reached only through Centmond's own backend, never from your browser.
- Data accessed
- The question you type and only the specific rows the assistant looked up to answer it, and, for Premium, the transactions a Premium feature works on. IBANs, card numbers and your own name in bank data are replaced before anything is sent. Never your whole account, and never any credential. Anthropic's commercial terms state that it does not train its models on inputs and outputs sent through its API.
- Transfer
- Standard Contractual Clauses in Anthropic's Data Processing Addendum.
- Privacy policy
- https://www.anthropic.com/legal/privacy
- Purpose
- Optional “Sign in with Google” authentication. Only used if you choose that button instead of an email and password.
- Data accessed
- Google learns that you are signing in to Centmond and returns your email address, display name and avatar URL. Google decides its own purposes for what it collects during that sign-in, so it acts as an independent controller and its own privacy policy governs that part.
- Transfer
- Governed by Google's own terms, not by a contract with us.
- Privacy policy
- https://policies.google.com/privacy
Browser push services
Independent controller · OptionalDepends on your browser; mostly US- Purpose
- Deliver the optional push notifications you can turn on in Settings. The service is your browser's own, for example Google for Chrome, Mozilla for Firefox, Apple for Safari and Microsoft for Edge. Your browser chooses it, not us.
- Data accessed
- The push address your browser created for Centmond and each alert we send to it. Alerts are encrypted before they leave our server, so the push service cannot read them. It sees only that a message arrived for that address, and when.
- Transfer
- Governed by your browser vendor's own terms, not by a contract with us.
- Privacy policy
- See provider policy.
Frankfurter
No personal dataEU- Purpose
- Daily foreign-exchange reference rates used to convert mixed-currency balances and totals into your default currency.
- Data accessed
- No personal data: only public currency codes (e.g. EUR, USD) are sent. Rates are cached for 24h.
- Transfer
- Not applicable: no personal data is sent.
- Privacy policy
- https://www.frankfurter.app
Have I Been Pwned
No personal dataGlobal edge network; operator in Australia- Purpose
- Checks a new password against passwords known from data breaches, so that you do not pick one that attackers already have.
- Data accessed
- Only the first five characters of a SHA-1 hash of the new password. The password itself is never sent and cannot be worked out from them. Our server makes this check when you sign up, change your password in Settings or reset it, so the service sees our server and never you.
- Transfer
- Not applicable: no personal data is sent.
- Privacy policy
- https://haveibeenpwned.com/Privacy
DuckDuckGo
No personal dataUS- Purpose
- Company logos shown next to transactions and banks.
- Data accessed
- Only a website domain, such as netflix.com. Our server fetches the logo and passes it on, so your browser never contacts DuckDuckGo and nothing about you is sent.
- Transfer
- Not applicable: no personal data is sent.
- Privacy policy
- https://duckduckgo.com/privacy
Enable Banking
Independent controller · OptionalEU (Finland)- Purpose
- Open-banking gateway for the optional bank-connection feature, which is not open to new accounts yet. Enable Banking Oy is a Finnish AISP authorised and supervised by the Finnish Financial Supervisory Authority (FIN-FSA).
- Data accessed
- Bank name, IBAN, account balances, and booked / pending transactions for accounts you explicitly connect (typically the last 90 days, refreshed daily). Enable Banking holds the bank consent and the authentication session under its own licence (it is an independent controller for that, not our processor), and Centmond never sees your online-banking credentials.
- Transfer
- None required: the service is operated from the EU.
- Privacy policy
- https://enablebanking.com/privacy-policy
Paddle
Independent controller · OptionalUnited Kingdom (Paddle.com Market Limited, London, for buyers in the EU and the UK)- Purpose
- Sells Premium, the paid plan, as reseller and merchant of record (when Premium is on sale; it is not on sale yet). Paddle runs the checkout and takes the payment, charges VAT where it applies, issues the invoices, makes refunds, and provides the billing page where you can see your invoices, change your payment method and cancel.
- Data accessed
- From us, when you open the checkout: your account's email address, your Centmond account id and the plan you chose. From you, in its payment form: your payment details, the country and postcode it asks for to work out the tax, and your IP address. Centmond never receives your full card number. Paddle sells to you in its own name, and its terms with sellers state that each side acts as an independent controller, so Paddle's own privacy policy governs what it does with this data.
- Transfer
- Adequacy decision: the European Commission recognises the United Kingdom as protecting personal data adequately (Art. 45 GDPR), a decision renewed in December 2025. Where Paddle transfers data further, its privacy policy names the safeguards it uses.
- Privacy policy
- https://www.paddle.com/legal/privacy
Finnhub
No personal data · OptionalUS- Purpose
- Primary stock / ETF price quotes, company logos, and symbol search for the optional Investments feature (switched off for now).
- Data accessed
- Only the public symbol of each asset you record (e.g. AAPL, MSFT). Finnhub responds with current price, 24h change, and a company profile (name, exchange, logo URL). Your identity and holdings are never sent.
- Transfer
- Not applicable: no personal data is sent.
- Privacy policy
- https://finnhub.io/policies/privacy
CoinGecko
No personal data · OptionalSingapore- Purpose
- Crypto price quotes and coin icons for the optional Investments feature (switched off for now).
- Data accessed
- Only the public symbol of each crypto asset you record (e.g. BTC, ETH). CoinGecko's free API requires no key and returns price, 24h change, and a coin image URL.
- Transfer
- Not applicable: no personal data is sent.
- Privacy policy
- https://www.coingecko.com/en/privacy
Alpha Vantage
No personal data · OptionalUS- Purpose
- Fallback stock / ETF price quotes for the optional Investments feature (switched off for now) when Finnhub returns no match.
- Data accessed
- Only the public symbol of each asset you record. Alpha Vantage responds with current price; profile / logo data is not used from this provider.
- Transfer
- Not applicable: no personal data is sent.
- Privacy policy
- https://www.alphavantage.co/privacy/
Transfers outside the EEA
Where a provider above is located outside the European Economic Area, the mechanism that covers the transfer is named in its entry rather than described in general terms. You can request a copy of the safeguards we rely on for any of them (the relevant Standard Contractual Clauses, or the provider's Data Privacy Framework certification) by emailing the address below. A provider in the United Kingdom, such as Paddle, needs no further safeguard: the European Commission has decided that the United Kingdom protects personal data adequately.
Notifications of changes
We will update this page whenever we add or remove a provider. For material changes (a new recipient of personal data, a change of role, or a change in where data is stored) we will also update the "last updated" date at the top of this page.
Questions
Email privacy@centmond.com with any question about how we work with the providers above.