Wild Where — Sub-processors
Last Updated: 2026-10-18 Applies to: Privacy Policy v5.0
These are the third-party services that process personal information to run Wild Where, the country each operates from, and what each one receives. This list is published in the App (Settings › Legal) and at wildwhere.com/sub-processors, and we keep it current. We give at least 30 days' notice in the App before any new sub-processor begins receiving user data (Privacy Policy §7 and §12).
Your data is stored by Google Firebase in the Montreal, Canada
(northamerica-northeast1) region.
Services used by the App
| Service provider (entity) | Country | What it does | What it receives |
|---|---|---|---|
| Google LLC (Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Crashlytics; Google Workspace email) | United States (primary storage in Montreal, Canada) | Database, file storage, authentication, push notifications, server functions, crash reporting, transactional email; on Android, platform geocoding | All synced app data (sightings, signs, trips, photos, profile, consent records, diagnostics); crash traces without account ID; the email address and message for the transactional emails we send you; on Android, geocoding coordinates; push topic subscriptions that encode a coarse (~20–40 km) area cell |
| Apple Inc. | United States / global | Push delivery (APNs); Sign in with Apple; Siri / App Intents; time sync; aggregated MetricKit diagnostics; MapKit imagery; network geocoding | APNs token and alert payload (public-map-precision location and species, no identity); Apple ID relay identifier (and email if you share it); Siri invocation parameters; aggregated diagnostics; your device location for timezone and country lookup |
| MapTiler AG | Switzerland | Server-side reverse geocoding of sightings; map tiles fetched by your device; share-card map images | Sighting coordinates (coarsened for sensitive species, except during the grizzly fresh-sighting window); your device's IP and the map area you view |
| Open-Meteo | Switzerland | Weather and elevation enrichment (server-side only) | Sighting coordinates and timestamp; no identity, no IP |
| komoot GmbH (Photon geocoder) | Germany | Place, city and park search | Your search text and map-area coordinates (reduced to ~100 m), sent from your device, so your IP is visible; no account identity |
| FOSSGIS e.V. (OpenStreetMap Overpass API) | Germany | Road and trail detection (server-side); park and trail-amenity search and, on iOS, highway-sign road detection (from your device) | Server-side: coordinates with a ~100 m buffer, no identity or IP. From your device: coordinates reduced to ~100 m, your IP visible; no account identity |
| OpenSnowMap (community tile server) | EU | Winter-trails map overlay, only if you turn on that layer | Your device's IP and the tile area you view |
Services used by wildwhere.com
| Service provider (entity) | Country | What it does | What it receives |
|---|---|---|---|
| OpenStreetMap Foundation | United Kingdom | Map tiles on shared-sighting pages | Visitors' IP and the tile area around the shared sighting's public-precision location |
| Cloudflare, Inc. | United States / global edge | Cookieless web analytics | Standard web-request data (IP, user agent, page URL), processed transiently to count visits; no cookies or persistent identifier |
| Google LLC (Fonts and reCAPTCHA) | United States | Fonts on wildwhere.com; reCAPTCHA v3 abuse protection on the beta sign-up form | Your IP address (fonts); reCAPTCHA signals on the sign-up page only |
What no sub-processor receives
- Raw photo EXIF / GPS metadata (stripped on your device before upload).
- Your email address or name, except Google as our database and email provider and Apple if you use Sign in with Apple.
- Advertising, analytics-profile or attribution data — Wild Where integrates no advertising, analytics or attribution services.
Not active
AI photo verification (Anthropic Claude via Google Cloud Vertex AI, Montreal) is disabled in production, and no photos are sent to any AI service. If it is ever turned on, this page and the Privacy Policy will be updated, with 30 days' notice in the App first.
Transfers outside Canada
Transfers to Google and Apple rely on contractual data-processing agreements with those providers. The community geolocation services (komoot, FOSSGIS, OpenSnowMap, OpenStreetMap Foundation) receive only the minimized request data described above, with no account identity attached. Questions about how personal information is handled outside Canada can be directed to our Privacy Officer at privacy@wildwhere.com.
Change log
| Date | Change |
|---|---|
| 2026-10-18 | First published list, matching Privacy Policy v5.0. Twilio SendGrid removed; transactional email now sent through Google Workspace. |