ذیلی پروسیسرز
آخری تازہ کاری 31 اکتوبر، 2026
یہ صفحہ فی الحال انگریزی میں لکھا گیا ہے۔ ترجمے بعد میں آئیں گے۔
The companies that host or deliver parts of HubiCare, what data each one gets, and where it is kept.
How we use subprocessors
HubiCare uses a small number of service providers to run the service. Each one works under a contract that limits what it may do with the data, requires security measures and prohibits using the data for its own purposes. We tell programs by email at least 30 days before adding a new subprocessor so they can object.
Current list
| Provider | What it does | Data it gets | Where |
|---|---|---|---|
| Supabase, Inc. | Database, file storage, authentication, background functions | All program data, encrypted at rest; medical conditions, immunization exemptions and custody and court-order notes are encrypted a second time by HubiCare, with a separate key kept apart from the database | United States (AWS, us-east) |
| Netlify, Inc. | Hosts and serves the web app and door tablet | Request logs (IP address, URL, time) and the pages it renders on the way to the user; stores no program data | United States, with a global edge network |
| Stripe, Inc. (optional; a program turns it on for itself) | Card and bank payments between families and programs (Stripe Connect), for a program that connects its own Stripe account | Payer name, email, payment method and amount. Card and bank details go to Stripe directly; HubiCare keeps only a token and the status | United States |
| Resend, Inc. | Sends email (sign-in links, invoices, messages, alerts) from mail.hubicare.app | Recipient email address, subject and message body | United States |
| Anthropic, PBC | AI features (summaries, drafting, questions about attendance). Off by default; a program turns them on for itself | Only the text the feature needs (for example the day's notes, or a handbook question). Names of the program's children, families and staff are replaced with placeholders, and email addresses and phone numbers are removed; other details staff typed into a note (for example a health note) are sent as written. Not used to train models; retained by the provider only as its API terms allow | United States |
| Twilio Inc. (optional; a program turns it on for itself) | Text messages (SMS) to families who asked for them: short notices with a link into HubiCare, and emergency alerts. Sign-in codes for families who sign in with a phone number, once HubiCare turns that on (it is off for now) | The family adult's mobile number and the notice text (no child's name or health, custody or incident details; the emergency alert text as the director wrote it) or sign-in code, delivery status, and replies the adult sends (STOP, HELP, or a message to the program) | United States |
| Meta Platforms, Inc. (WhatsApp Business Platform; optional; a program turns it on for itself) | WhatsApp messages to families who asked for them: the same notices and emergency alerts, sent as approved message templates | The family adult's mobile number and the notice text as above, delivery status, and replies the adult sends. Meta's own WhatsApp terms and privacy policy apply to the adult's WhatsApp account | United States (Meta may process in other regions under its own terms) |
Built but not in use yet
HubiCare has optional connections that are not in use yet: QuickBooks Online accounting sync (Intuit Inc.), Gusto payroll sync (Gusto, Inc.) and a hosted voice-agent service for HubiCare's own sales phone line. None of them receives any data today. Each will be added to the list above, under the notice rule at the top of this page, before it receives data.
Not used, or used without program data
HubiCare uses no advertising networks, no analytics that track people across sites, and no data brokers. Push notifications go through the browser's own push service (Apple, Google or Mozilla), which receives only an encrypted payload it cannot read. HubiCare's outside status page (https://stats.uptimerobot.com/8rsaah5RLB) is run by UptimeRobot, which only loads HubiCare's signed-out pages from outside to see whether they answer. It never signs in and receives no program data, so it is not a subprocessor.
Contact
Questions about this list: privacy@hubicare.app.