Grej — Sub-processors

Early Access · Last updated 29 July 2026

Grej is operated by Humeko Oy (see the Privacy Policy for controller details). We use the third parties below to process personal data on our behalf as processors (sub-processors) in providing the Service. We keep this list current and update it before adding a new sub-processor. Questions: privacy@grej.app.

Sub-processors

Google Cloud Platform — Google

  • Purpose: Hosting — compute, database, and object storage.
  • Data processed: Account data; uploaded documents and images and data derived from them; operational logs.
  • Processing location: EU — europe-north1 (Finland).
  • Transfer basis: Within the EU/EEA. Cloud Data Processing Addendum (EU SCCs incorporated).

Google Cloud — Vertex AI — Google

  • Purpose: AI features — classification, field extraction, and the assistant.
  • Data processed: Uploaded content and prompts sent to the model.
  • Processing location: Google-selected region; may be outside the EU/EEA. Content remains stored in the EU (europe-north1) — this covers the model call only.
  • Transfer basis: Cloud Data Processing Addendum, incorporating the EU Standard Contractual Clauses (Module 2, controller-to-processor).

Expo — 650 Industries, Inc.

  • Purpose: Push-notification delivery.
  • Data processed: Device push token; notification content (e.g. "your manual is ready").
  • Processing location: United States.
  • Transfer basis: EU Standard Contractual Clauses (Expo Terms of Service §3.2, SCCs Module 2).

Sentry — Functional Software, Inc.

  • Purpose: Crash and error diagnostics.
  • Data processed: Error/crash events; device and coarse identifiers (no document content).
  • Processing location: EU — Germany.
  • Transfer basis: Within the EU/EEA.

Resend — Plus Five Five, Inc.

  • Purpose: Transactional email — delivering Early Access voucher codes and support replies.
  • Data processed: Recipient email address; message content (the voucher code / reply text).
  • Processing location: United States.
  • Transfer basis: EU Standard Contractual Clauses (Resend Data Processing Addendum).

Push delivery

After relay, push notifications reach your device through the platform's own service: Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android, when available).

Sign-in providers

If you choose to sign in with Apple or Google, that provider authenticates you and acts as an independent controller of your sign-in data.

What we don't use

We use no advertising, analytics, or tracking sub-processors, and no third-party payment processor.