Sub-processor List
Last updated: 14 August 2026
Convenience translation: This English version is provided for convenience only. The Turkish original ("Netlik Alt İşleyen Listesi") is the governing text; in case of any conflict, the Turkish version prevails.
The Privacy Policy and the KVKK Privacy Notice identify service providers by function and region (for example, "cloud infrastructure provider (EU/Germany)"). Article 10 of the KVKK and Article 13 of the GDPR permit disclosure of recipients or categories of recipients; naming the provider in the main text is not mandatory.
This page shows the current providers behind those categories. When a provider changes, only this page is updated; the substance of the Privacy Policy and the Privacy Notice does not change.
Sub-processors currently in use
| Function | Provider | Data region | Data transferred |
|---|---|---|---|
| Cloud infrastructure: hosting, database, file storage, authentication, server functions | Supabase (infrastructure: Amazon Web Services) | EU — Frankfurt / Germany | All account, family, child, coordination and document data in the App |
| Push notification delivery | Google Firebase Cloud Messaging | USA | Device notification identifier and notification data containing no sensitive detail |
| Product analytics | Google Firebase Analytics | USA | Limited feature/screen/result events in the production mobile App |
| AI: calm-language suggestions, receipt OCR, protocol and court-decision extraction | Google Gemini API (paid service) | USA | Only the text, receipt image or document the user selects for an action they initiate |
| Service e-mail: sign-up verification, family invitation, account-deletion notice, content-report outcome | Resend | USA | Recipient e-mail address and fixed template text |
| Web hosting (https://www.netlikapp.com, app.netlikapp.com) | Vercel | USA | Limited request-level technical records |
| App store and payment | Google Play (Google), App Store (Apple) | USA | Purchase and subscription status; Netlik never receives full card details |
| Subscription verification | RevenueCat | USA | Subscription status and the randomly generated user number of the Netlik account |
What we do not use
Netlik uses no ad network, tracker or marketing automation. It does not access device location. No crash or error report is sent to any third party; server-side transaction logs are kept on our own infrastructure.
Cross-border transfers
Regular transfers to providers abroad are carried out on the basis of an adequacy decision or an applicable appropriate safeguard under Article 9 of the KVKK. Where a standard contract is used, the statutory notification period is observed.
Changes
This list is updated whenever a provider is added, removed or changed, and the date above is refreshed. For questions: netlikapp@gmail.com.