Sub-processors

The third-party services MYACHT relies on to operate the platform. This page is the authoritative list — the same information is summarised in our Privacy Policy §5.1 and referenced from our Data Processing Addendum.

Last updated: 8 July 2026

Current sub-processors

Sub-processor	Purpose	Location	Transfer mechanism
Apple Inc. Privacy notice ↗	iOS App Store distribution, TestFlight beta program, App Store receipt validation for in-app subscriptions.	United States	Apple Data Privacy Framework (EU–US DPF) + Standard Contractual Clauses
Google LLC / Google Ireland Limited Privacy notice ↗	Google Play Store distribution, Play Console reporting, Play Billing for in-app subscriptions.	Ireland (primary) / United States	EU-based contracting entity + Standard Contractual Clauses for US onward transfers
Fly.io (Fly.io, Inc.) Privacy notice ↗	Application hosting, database hosting, background workers, and object storage. MYACHT production workloads run in Fly’s EU regions (Amsterdam and Frankfurt).	EU regions used for production; parent company incorporated in the United States	Standard Contractual Clauses (EU 2021/914) for corporate-parent access
Sentry (Functional Software, Inc.) Privacy notice ↗	Application error and crash reporting for the mobile applications and backend. Captures stack traces, device model, OS version, and (where relevant) sanitised request context. Does not receive personal maintenance or vessel data.	United States	EU-hosted Sentry region used where available + Standard Contractual Clauses

Where data is processed

MYACHT operational data (vessel records, maintenance history, crew certificates, accounting entries) is stored primarily in Fly’s EU regions. Backups are retained within the EU. Cross-border transfers occur only where a sub-processor’s corporate parent may require support access from outside the EU; where that applies we rely on Standard Contractual Clauses under Article 46 GDPR (EU 2021/914).

Local data on your device (SQLite, IndexedDB, keychain) is controlled by the device operator and does not transit any sub-processor. See our Cookie Policy for details on local storage.

What we do not use

MYACHT does not use any of the following categories of sub-processor:

Advertising networks or ad exchanges
Cross-context behavioural tracking or attribution platforms (Meta Pixel, LinkedIn Insight, TikTok Pixel, etc.)
Session replay tools
Data brokers, list vendors, or firmographic enrichment services
Third-party analytics platforms with a cookie footprint (Google Analytics, Mixpanel, Amplitude, etc.)

Notice of changes

When we add, remove, or materially change a sub-processor, we update this page and the “Last updated” date above. Enterprise customers with a signed Data Processing Addendum receive written notice before a change takes effect, in accordance with the DPA terms.

To receive change notifications by email, contact privacy@myachtsystems.com with subject Sub-processor change notifications and we will add you to the list.

Contact

FRANCISCO GARRIDO PAULO - UNIPESSOAL LDA
NIPC: 519391845
Avenida da República, nº 13, Apt. CB
2775-273 Parede, Portugal
Email: privacy@myachtsystems.com