Sub-processors — Call Me If
When a business connects a monitoring tool to Call Me If, the alerts it sends can contain personal data about its customers or staff. For that data the business is the controller and we are its processor (privacy policy §6). These are the companies we rely on to process it.
Last changed: 27 September 2026
The list
| Company | What they do for us | Where | What they receive |
|---|---|---|---|
| Hetzner Online GmbH (Germany) | Servers, database and encrypted backups | Helsinki, Finland (European Union) | Everything the service stores, including alert content for up to 30 days |
| Laravel Holdings Inc. — Laravel Forge (United States) | Setting up and updating our server | United States | Administrative access to the server, used to install and deploy software; it stores none of the service's data |
| Google LLC — Firebase Cloud Messaging | Waking the phone when an alert fires | Global | An alert's id, its state and a timestamp. Never an alert's title, body or content: the phone fetches those from our server over its own encrypted connection |
| Functional Software, Inc. — Sentry | Error monitoring for our server and the Android app | European Union | Crash and error reports: where in the code it failed, the phone model and Android version, and a random device identifier. Configured to drop IP addresses and location, and never to include alert content, message text, phone numbers or email addresses |
| Twilio Inc. | Phone calls and text messages: a call to the user's own number when an alert goes unanswered, the code that confirms that number, and inviting and calling backup contacts | Global | Phone numbers, and what is spoken or texted — a confirmation code, or the name of the person who did not answer; never what the alert was about |
| Plus Five Five, Inc. — Resend (United States) | Service emails: sign-in codes, confirmations and security notices | Sent from the European Union (Ireland); account records and delivery logs are kept in the United States | The recipient's email address and the email |
| Cloudflare, Inc. (United States) | DNS for callmeif.app, and forwarding email sent to support@callmeif.app | Global | Whatever a person writes to support; no alert content |
Not on this list, and why
| Who | Why not |
|---|---|
| Google Play | Sells Pro subscriptions as merchant of record. It is an independent controller for billing, not our processor, and it never receives alert content. Named in the privacy policy §5 |
| Anything that reads your messages | Nothing does. Personal sentences are evaluated on the phone, and the server never receives message content — so there is no processor for it to list |
Changes to this list
- We tell you before we add or replace a sub-processor: by email to the account address, at least 30 days before the change, and on this page.
- You may object within that period by replying. If we cannot resolve the objection, you may end the service and delete your account, and nothing of yours is sent to the new sub-processor.
- Each sub-processor is bound by a written contract giving the same level of protection as our Data Processing Agreement.
Contact: support@callmeif.app