Who processes data
Last updated 3 September 2026. This list records the outside organisations that handle information when providing Weekabout.
Some organisations act as processors on our instructions. Others, such as Apple when it operates the App Store, may act as independent controllers under their own terms. We check the applicable data-protection terms before enabling a supplier.
- Service
- Hosting for the application, database and backups.
- Information
- All information stored by the service.
- Processing locations
- France, European Economic Area.
- International transfer
- Yes. Information moves from the United Kingdom to the EEA.
- Safeguards
- The UK recognises the EEA as providing adequate protection. OVHcloud's Data Processing Agreement forms part of its contractual terms.
- Service
- Transactional email, including sign-in links, invitations and service notifications.
- Information
- Email addresses, delivery information and message content. An invitation contains the inviting parent's chosen name. A notification may contain limited calendar information if the recipient has enabled detailed notifications.
- Processing locations
- We use AhaSend's European SMTP server in Germany. Its current subprocessors provide infrastructure in Germany, Finland, Bulgaria and Norway, all within the EEA. AhaSend B.V. is based in the Netherlands. We do not use its optional US server.
- International transfer
- Information moves from the United Kingdom to the EEA. AhaSend's optional US processing is not enabled. Email delivery may involve the recipient's own email provider outside the EEA.
- Safeguards
- The UK's adequacy regulations cover transfers to the EEA. AhaSend's Data Processing Agreement applies to the service and its subprocessors.
- Subprocessors
- Hetzner Online GmbH, for infrastructure in Germany and Finland; DA International Group Ltd, for infrastructure in Bulgaria; and Blix Solutions AS, for infrastructure in Norway.
- Automated content checks
- AhaSend's DPA says that, during a new customer's initial onboarding period, it checks email content for spam, phishing and other prohibited use with a language model hosted on its own infrastructure in the EEA. It says no content is sent to an external AI provider and that this check ends after onboarding.
- Service
- App Store purchases and Apple Push Notification service for users who enable push notifications.
- Information
- Apple handles purchase and payment information under its own terms. Weekabout receives a signed purchase receipt and retains only the resulting entitlement. For push notifications, Apple receives a device token and the notification payload.
- Processing locations
- Apple operates globally, including outside the United Kingdom and EEA.
- International transfer
- Yes.
- Safeguards
- Apple's applicable data-processing and international transfer terms under the Apple Developer Program agreements. Apple may act as an independent controller for App Store activity and as a service provider for push delivery.
Before adding a supplier that will receive personal information, we assess what it will receive, its processing locations, its contract and any international-transfer safeguards. We update this page before the supplier starts processing information.
We notify account holders by email before a material change where possible. If an urgent security or legal change cannot be announced in advance, we give notice as soon as practicable. The date at the top of this page shows when the list last changed.
No advertising network, no analytics service, no tracking of any kind, and no third-party fonts or scripts on any page. Our usage statistics are counts we keep ourselves — how many times a page was seen on a day — tied to nobody.
Weekabout does not send calendar content to an external language-model provider or use a language model as a product feature. AhaSend's temporary, EEA-hosted abuse check for new email customers is described above.