Introduction
To provide you with CheckMyWarranty, we partner with trusted third-party services (Data Processors). This registry explains who they are, what data they process, where they are located (cross-border transfers), and why we need them.
All processors are bound by strict Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) to ensure GDPR and DPDPA compliance.
Essential Processors
Required for the app to function. By using the app, you acknowledge these cross-border data transfers.
Supabase
Purpose
Core database, file storage, and authentication provider
Data shared
Email, phone number, profile info, warranties, Vault documents, receipts (all data is encrypted at rest)
Location & transfer
EU (Frankfurt) / India (Mumbai) / US (N. Virginia)
Legal safeguard (GDPR Ch. V)
Standard Contractual Clauses (SCCs), DPA
Privacy policy
MSG91
Purpose
SMS delivery for OTP (One-Time Password) authentication
Data shared
Phone number (used strictly for transactional OTP delivery)
Location & transfer
India
Legal safeguard (GDPR Ch. V)
DPA, Local Processing
Privacy policy
Optional Processors
These rely on your explicit consent in the Privacy Center. You can revoke access at any time.
Sentry
Purpose
Crash reporting and performance monitoring to improve app stability
Data shared
Anonymous crash logs, device model, OS version. PII like emails/phones are automatically scrubbed
Location & transfer
United States
Legal safeguard (GDPR Ch. V)
Standard Contractual Clauses (SCCs), EU-US DPF
Privacy policy
Groq
Purpose
Primary AI-powered OCR to extract warranty details from receipt images quickly. Used only when you have granted AI Processing consent
Data shared
Images of receipts/documents only. Processed statelessly — images are not retained by Groq after processing and are not used to train AI models. No personal profile data, names, or contact details are shared with Groq
Location & transfer
United States
Legal safeguard (GDPR Ch. V)
Standard Contractual Clauses (SCCs). Enterprise-grade DPA available upon request to our privacy team
Privacy policy
Google Gemini
Purpose
Fallback AI-powered OCR for complex document extraction
Data shared
Images of receipts/documents. Processed statelessly via Enterprise API and immediately discarded. Not used for AI training
Location & transfer
United States
Legal safeguard (GDPR Ch. V)
Standard Contractual Clauses (SCCs), EU-US DPF
Privacy policy