Planned release providers
Riposte uses specialist providers to run the service. This pre-release list identifies the providers in the current build. Legal entities, processing locations, retention settings, and transfer safeguards will be verified against the deployed accounts before this page takes effect.
| Provider | Purpose | Information involved |
|---|---|---|
| Google Cloud | Application hosting, operational processing, and logs | Account identifiers, conversation records, operational and security data |
| Cloudflare | DNS, website and edge delivery | Request and network data; public website content |
| Supabase | Authentication | Account identifiers, phone or social sign-in data, and authentication events |
| Twilio | Phone verification | Phone number, one-time-code delivery, and delivery metadata |
| AssemblyAI | Speech transcription | Temporary access to voice audio, transcripts, timing data, and provider job metadata |
| OpenAI and Google Gemini | Requested conversation processing and outcomes | Minimised transcript or conversation text and operational metadata |
| Apple Push Notification service and Firebase Cloud Messaging | Push notifications | Push token, platform, message type, and delivery metadata |
| Sentry | Error monitoring and diagnostics | Pseudonymous technical, device, error, and performance data |
| PostHog (EU Cloud) | Optional, consent-based product analytics | Limited app-interaction events, a random installation identifier, and app, device, and operating-system metadata; no Riposte account or conversation content |
| RevenueCat | Subscriptions and entitlements | Pseudonymous account identifier, product, transaction, and entitlement status |
| Google AdMob and User Messaging Platform | Advertising and regional privacy choices, if enabled | Consent state, device or advertising identifiers, and ad-delivery data |
| Apple and Google | App distribution and store purchases | Store account, transaction, device, crash, and distribution data under their terms |
Launch gate: this page will remain a draft until this list and every material retention, training, region, and deletion setting have been reconciled against the release environment.
Questions can be sent to privacy@souvenir-labs.com. Any material provider change will be reflected here and assessed under our privacy and security process.