Sub-processors

ShelfLife is operated by Fisherbird LLC. We use a small number of vendors ("sub-processors") to run the Service. Each processes personal data on our behalf under a written agreement that binds it to confidentiality and security obligations. This page mirrors Section 5.1 of our Privacy Policy.

Current sub-processors

• Amazon Web Services, Inc. — application hosting, database (DynamoDB), object storage (S3), authentication (Amazon Cognito), email delivery (Simple Email Service), and serverless compute (Lambda). Processing region: us-east-2 (Ohio, United States).
• 650 Industries, Inc. (d/b/a Expo) — push-notification delivery. When we send you a notification (such as a Book Signal response or a new follower), we pass a device push token and the notification's contents to Expo's push service, which relays it to Apple (APNs) or Google (FCM). United States.
• Cloudflare, Inc. — Cloudflare Turnstile, an anti-bot challenge used on our waitlist form. United States.
• Functional Software, Inc. (d/b/a Sentry) — application error and crash monitoring for our web and mobile apps. When the app hits an error, a diagnostic report (error message, stack trace, app version, device/browser type, and the screen where it happened) is sent to Sentry so we can fix it. We configure Sentry not to collect your IP address and do not attach your account identity to these reports. United States.
• Open Library / Internet Archive — public book-metadata lookups. We send only a book identifier (such as an OLID or ISBN); we do not send any data that identifies you. United States.

Changes

We will give at least 30 days' notice of changes that materially affect the categories of data processed by our sub-processors. Questions: admins@theshelflifeapp.com.