Subprocessors
Last updated 2026-09-04
A subprocessor is an outside company that processes information on our behalf. This is the complete list. It is the list our privacy policy refers to, and we update it before a new one starts processing anything, not afterwards.
Waybook is a trade name of Alpha Peak Technologies LLC. It is the controller of the information described here.
The list
| Company | What it does for us | What it receives | Where |
|---|---|---|---|
| Cloudflare | Hosts and serves waybook.io and the application, stores the encrypted workbook and the website’s own database, and delivers the confirmation, welcome and update emails you asked for. | Website requests, the email address you give us here and the contents of those messages. For the application, ciphertext it has no way to read. | United States, served from a global edge |
| Google Firebase Authentication | Runs sign-up, sign-in, password reset and email verification for the application. | Your email address, your password — which we never see — and sign-in metadata such as times and devices. No financial information of any kind. | United States |
None of them receives your financial records in readable form. The hosted workbook is encrypted in your browser before it is sent, which is described in detail on the security page.
What is deliberately not on this list
Because the shortest list is the strongest one:
- No analytics or product-measurement company. Waybook contains none.
- No advertising or profiling company. None, anywhere.
- No error-reporting or session-replay company. A crash report from a financial product is a financial record.
- No AI or machine-learning provider. Nothing you enter is sent to one.
Planned, and not in use
Waybook has no connection to any financial institution today. When that changes it will be through a regulated provider, and we intend that provider to be Plaid, Inc. No production access has been granted, no credentials have been issued, and no information has been exchanged.
It is on this page, in this section, because we would rather tell you what is coming than have you discover a new company in the list one day. This page, the privacy policy and the security page are all updated before the first such connection is made — naming what the provider receives and what changes about the encryption described on security.
Tools that hold no personal information
Recorded so the picture is complete. These support building and distributing Waybook and receive nothing about you:
- GitHub holds the source code and runs our automated checks.
- Expo builds the mobile and desktop applications.
- Apple and Google Play distribute the mobile applications under their own terms.
When this changes
We update this page before a new subprocessor handling personal information begins processing, and we update the privacy policy alongside it. If a subprocessor of ours has a security incident affecting your information, you hear it from us — see privacy choices for how to reach us and what you can ask for.
Questions about this list: privacy@waybook.io. Security reports: security@waybook.io.