Saplyn Subprocessor List
Last updated: October 7, 2026 · Mommalyn Inc. ("Saplyn")
Saplyn uses the third parties below to process Customer Data (as defined in our Data Processing Addendum) in order to provide the Service. Each is bound by contract to protect that data. We update this list before a new subprocessor processes Customer Data (DPA § 6.3).
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database, file storage, and authentication | All Customer Data | United States |
| Vercel Inc. | Application hosting and delivery | All Customer Data in transit | United States |
| Stripe, Inc. | Payment processing for Centers and families | Payer and Center details, payment methods, invoice and payment amounts, identity verification information | United States |
| Resend, Inc. | Email delivery | Recipient name and email address; email content, which may mention children by name; delivery status | United States |
| Expo (650 Industries, Inc.) | Mobile push notifications; mobile app crash and performance reporting | Device push tokens; notification content, which may mention children by name. From the mobile app: technical diagnostics, device metadata, and an installation identifier, designed to exclude names, contact details, and record content | United States |
| Anthropic, PBC | AI features (drafting, summaries, translation, questions and answers) | The request and the context the feature needs, which may include information about children, families, and staff. Not used to train models | United States |
| OpenAI, LLC | AI features (voice transcription; billing and enrollment assistants) | Audio clips and transcripts; the request and the context the feature needs, which may include child and payer names and billing or waitlist details. Not used to train models | United States |
| PostHog, Inc. | Product analytics and feature flags | Account identifier, name, email address, role, and Center; usage events; device and browser metadata. Not child records | United States |
| Functional Software, Inc. d/b/a Sentry | Error and crash reporting | Technical diagnostics, account identifier, and internal record identifiers. Designed to exclude names, contact details, and record content | United States |
Not subprocessors
- Camera systems a Center connects are the Center's own vendors.
- Apple and Google deliver push notifications to devices under their platform terms.
- Public licensing records used for the Discover directory are public government data, not Customer Data.
Questions: legal@saplyn.co