← Homeward Circle
← Back to home
Subprocessors
Last updated: September 25, 2026
A subprocessor is a company Homeward Circle uses to run the Service that may receive Agency Data, as the Homeward Circle Subscription Agreement defines that term. This page is the list the Subscription Agreement incorporates by reference.
Subprocessors that may receive Agency Data
Google Cloud Platform (Google LLC)
- Function
- Hosts the production server: the application, the database and its disk.
- Data
- All Agency Data held in the Service, including circle messages (encrypted at rest), family and parent records, and account and contact details.
- Location
- United States
- Safeguard
- Google Cloud HIPAA Business Associate Addendum
Google Cloud Storage (Google LLC)
- Function
- Holds the encrypted nightly database backups, in the same Google Cloud project.
- Data
- The same Agency Data, in encrypted backup form only.
- Location
- United States
- Safeguard
- Google Cloud HIPAA Business Associate Addendum
Google Workspace (Google LLC)
- Function
- Business email and file storage.
- Data
- Only Agency Data that an agency or user puts in an email or file sent to us.
- Location
- Google data centers; Workspace does not fix a country.
- Safeguard
- Google Workspace HIPAA Business Associate Amendment
Service providers that receive no Agency Data content
These providers help deliver the Service but are kept away from Agency Data content by design.
Stripe, Inc.
- Function
- Billing for agency subscriptions.
- Receives
- The agency's billing contact and payment details. No family, parent or circle data. Parents never pay. Stripe holds card data; we never store or transmit card numbers.
Postmark (ActiveCampaign, LLC)
- Function
- Transactional email: invitations, address checks, password resets and reminders.
- Receives
- Email addresses and messages that carry logistics and links only. Our standing rule keeps health information and anything about a child out of every email.
Expo (650 Industries, Inc.), Apple Push Notification service and Firebase Cloud Messaging
- Function
- Delivers push notifications to the mobile app.
- Receives
- At most the name of a circle. A notification never carries message text or an author's name, and its link carries opaque identifiers only. An automated test enforces this on the one function that builds notifications.
Umami (open-source analytics, run on our own server)
- Function
- Counts page views on this website and in the agency console.
- Receives
- Page addresses without query strings. No cookies, no names, no message content. There is no analytics code in the mobile app.
Changes to this list
We give at least 30 days' notice, in the Service or by email, before a new subprocessor begins receiving Agency Data, and update this page and its date at the same time. An agency on the Enterprise plan may object to a new subprocessor as its Subscription Agreement provides.
Contact
Questions about this list: privacy@homewardcircle.com