Help
Get startedSign in
Help
Get startedSign in

Legal

Sub-processors

Last updated 2026-09-29

Running Munchease takes a small number of specialist companies. They handle information only on our instructions, only to provide their service to us, and are not permitted to use it for their own purposes. This is the current list. It sits here rather than inside the privacy policy so that changing a provider does not mean rewriting the policy.

  • Supabase

    The database, the sign-in system and file storage. Holds your account, orders, bookings, saved restaurants and votes.

    United States (US East)

  • Fly.io

    Runs our application servers, the part that answers the requests the website makes.

    United States (US East)

  • Vercel

    Hosting for the websites themselves. In serving a page it processes standard request data such as your IP address.

    United States (global edge network)

  • Resend

    Sends transactional email: order and booking confirmations and updates. Handles your email address and the contents of those messages.

    United States

  • PostHog

    Product analytics: which parts of the site get used, so we can improve them. Tied to an internal ID, never your name, email or phone.

    United States

  • Sentry

    Error monitoring, so failures get found and fixed. Personal information is redacted before it is sent.

    United States

  • Google Maps / Places

    Maps shown to restaurant staff, and a one-time import of public business details such as name and address.

    Global (Google) · Operator cockpit only, not the diner site

ProviderWhat it handlesWhere data is stored
SupabaseThe database, the sign-in system and file storage. Holds your account, orders, bookings, saved restaurants and votes.United States (US East)
Fly.ioRuns our application servers, the part that answers the requests the website makes.United States (US East)
VercelHosting for the websites themselves. In serving a page it processes standard request data such as your IP address.United States (global edge network)
ResendSends transactional email: order and booking confirmations and updates. Handles your email address and the contents of those messages.United States
PostHogProduct analytics: which parts of the site get used, so we can improve them. Tied to an internal ID, never your name, email or phone.United States
SentryError monitoring, so failures get found and fixed. Personal information is redacted before it is sent.United States
Google Maps / PlacesMaps shown to restaurant staff, and a one-time import of public business details such as name and address.Operator cockpit only, not the diner siteGlobal (Google)

WhatsApp is not on this list, and here is why

Some restaurants show a WhatsApp number, and tapping it opens WhatsApp with a message ready to send. That is you contacting the restaurant directly. We do not send anything to WhatsApp and we cannot see the conversation, so WhatsApp is not processing data on our behalf. What happens in that chat is covered by WhatsApp’s own privacy policy and by the restaurant’s.

Changes

This list changes as the platform does. The date at the top is when it last changed. Providers outside Trinidad & Tobago are covered by section 10 of the privacy policy.