Sub-processors
Sub-processors
Last updated: 20 June 2026
BabyNamedBaby relies on the processors below to run the service. Each is bound by a written data processing agreement requiring confidentiality, security measures appropriate to the risk, and assistance with data subject requests. We update this list when it changes; material changes are announced to registered users by email.
Current sub-processors
| Processor | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Lovable Cloud (Supabase) | Database, authentication, file storage, edge functions | EU (Ireland) / managed | EU-hosted; intra-EEA |
| Cloudflare Workers | Application hosting, SSR, edge routing | Global edge (request-routed) | UK IDTA / EU SCCs |
| Stripe Payments Europe / Stripe, Inc. | Premium subscription billing and card processing | Ireland / United States | UK IDTA / EU SCCs |
| Lovable AI Gateway (OpenAI, Anthropic, Google) | Discover name suggestions. Prompts are not used to train models. | United States / multi-region | UK IDTA / EU SCCs |
| PostHog | Product analytics for de-identified usage events | EU (Frankfurt) | EU-hosted; intra-EEA |
| Resend | Transactional and lifecycle email delivery | United States | EU SCCs |
Notes
We do not use sub-processors for advertising, data brokerage, or model training. AI providers used via the Lovable AI Gateway are contractually prevented from using your prompts to train their models.