Subprocessors

Last updated 10 September 2026.

The third parties we rely on to run MePass, and what each one handles. We do not sell personal information or share it for advertising. Each is given only the minimum it needs, and is bound by a written contract requiring it to protect your data to at least the standard in our Privacy notice and to use it only for the purpose we specify.

Sign-in and account

• Resend — sends your sign-in codes by email.
• Apple, Google — Sign in with Apple / Google, wallet passes, and push notifications you turn on.
• Expo — app-update delivery and optional push-notification routing.
• Google ML Kit — on-device business-card text recognition; the SDK may transmit usage and technical diagnostics, but MePass does not upload card images.

Hosting and delivery

• Cloudflare — hosting and CDN for public pages, and storage of your profile photo (camera metadata such as location is removed before it is stored).

Reliability

• Sentry — error monitoring; personal fields are stripped before anything is sent.
• PagerDuty — on-call alerts, carrying operational detail only, never user data.

Cloudflare, Resend, Sentry, and PagerDuty process data in the United States and other countries. For transfers out of the EEA or the UK we rely on the European Commission's Standard Contractual Clauses with the UK International Data Transfer Addendum (and, where a provider is certified, the EU-US / UK-US Data Privacy Framework). Payment providers will be listed here if and when paid plans launch.

Questions: support@mepass.bio