Sub-processors
Last updated: 3 June 2026
To deliver the MOXZI application and related services, we work with a small number of trusted third-party providers who process personal data on our behalf. We call these our sub-processors.
This page lists every sub-processor we currently use, what they do for us, the categories of personal data they handle, where they process it, and the safeguard we rely on for any cross-border data transfer. For full details on how we collect, use, and protect your personal data, please see our Privacy Policy.
| Provider | Service / purpose | Categories of personal data | Processing location | Transfer safeguard |
|---|---|---|---|---|
| Amazon Web ServicesAmazon Web Services EMEA SARL / Amazon Web Services, Inc. | Cloud hosting, database, encrypted backups, transactional email (Amazon SES), and image moderation (Amazon Rekognition). | All categories of personal data stored within MOXZI, including account, profile, content, health and fitness, and device/log data. | United Arab Emirates; Republic of Ireland (EU). | AWS Data Processing Addendum, including the EU Standard Contractual Clauses. |
| StripeStripe Payments Europe, Ltd. / Stripe, Inc. | Payment processing for in-app coin purchases and paid event tickets, via Stripe Connect. | Name, email address, billing details, transaction records, and payment-card metadata. MOXZI does not store full card numbers. | Republic of Ireland; United States. | Stripe Data Processing Agreement, including the EU Standard Contractual Clauses. |
| TwilioTwilio Inc. | SMS messaging and one-time passcode (OTP) delivery for account verification and security. | Phone number, verification codes, and message delivery metadata. | United States. | Twilio Data Protection Addendum, including the EU Standard Contractual Clauses. |
| StreamStream.io, Inc. | Real-time chat and social feed delivery, including direct messages, posts, comments, and reactions. | User IDs, message and post content, reactions, media URLs, and chat metadata. | United States; European Union. | Stream Data Processing Addendum, including the EU Standard Contractual Clauses. |
| GoogleGoogle Ireland Limited / Google LLC | Push notifications (Firebase Cloud Messaging), crash and performance reporting (Firebase Crashlytics), and map display and location services (Google Maps Platform). | Device tokens, crash and diagnostic logs, approximate device location for map features. | United States; European Union. | Google Cloud Data Processing Addendum, including the EU Standard Contractual Clauses. |
| PostHogPostHog, Inc. | Product analytics, feature usage tracking, and user flow analysis to improve the application. | Pseudonymous user identifiers, event data (screens viewed, actions taken), and device and session metadata. | United States. | PostHog Data Processing Agreement, including the EU Standard Contractual Clauses. |
| AnthropicAnthropic, PBC. | AI-based moderation of user-submitted text content via the Claude API, for safety and policy enforcement. | Reported messages, posts, and comments submitted for moderation review. | United States. | Anthropic Commercial Terms and Data Processing Addendum, including the EU Standard Contractual Clauses. |
Changes to this list
We review our sub-processor list regularly. Where we add a new sub-processor or replace an existing one, we will update this page. Material changes that affect how we process your personal data will also be reflected in our Privacy Policy.
Each sub-processor listed above is engaged under a written data processing agreement that requires them to process personal data only on our instructions, to apply appropriate technical and organisational security measures, and to assist us in complying with applicable data-protection law.
Questions
If you have any questions about this list, or concerns about our use of a particular sub-processor, please email us at privacy@moxzistudio.com.