Subprocessors
Last updated 2026-10-09
A subprocessor is a company we use to help run Ducktate. This page names every one, what it does, the data involved, and where it is. It also lists the AI providers you can connect under your own account. For how we use your data, see our Privacy Policy.
Services we use to run Ducktate
Gravitas AI LLC uses these services. Some run only when you use a feature (for example, Stripe runs only when you buy). "Region" is where the service stores or processes the data, as far as we have set or know it.
| Provider | What it does | Data involved | Region |
|---|---|---|---|
| Supabase | Accounts and sign-in, plans, feedback and diagnostic bundles, waitlist, do-not-email list, iPhone pairing | Email address, account IDs, display name, Terms acceptance, plan status, referral and access codes, feedback text, diagnostic bundles you choose to send, waitlist entries, billing event records | Canada (database) |
| Google Cloud (Cloud Run, Firestore, Vertex AI, Cloud KMS, Cloud Logging) | Runs Ducktate Cloud: cleanup, meeting notes, cloud note details, key wrapping, service logs | Text of dictations and meetings while they are processed (meeting job text up to 24 hours), usage records without text, cloud note details and wrapped keys | United States (us-central1) |
| Google Gemini (through Vertex AI) | The AI models that clean text in Ducktate Cloud | Text of dictations, meetings and questions sent for cleanup. Google says it does not train on it. | Google global infrastructure |
| Google LLC: Google Analytics | Website traffic measurement | Pages viewed, browser and device, referrer, approximate location; cookies _ga and _ga_<id> | Google global infrastructure |
| Google LLC: Google sign-in | Lets you sign in with Google on the Mac, the iPhone and the website | Your Google account email address and sign-in identifiers | Google global infrastructure |
| Google LLC: Google Fonts | Fonts on the account page | Your IP address when your browser fetches the font | Google global infrastructure |
| Cloudflare | Hosts the website and the web notes app, serves app downloads and updates, stores cloud notes (R2) | Request data such as IP address; cloud notes and attachments (encrypted) | Global network; R2 storage location not fixed by us |
| Cloudflare Web Analytics | Counts website visits | Page address (without the query string), browser and referrer | Global network |
| PostHog | Analytics for the website, the Mac app and the iPhone app (on by default; you can turn it off) | Usage events, pageviews, clicks, heatmaps, errors and crashes; your account ID if you sign in, and your email address from the Mac app when signed in. Never your dictation text, transcripts or notes. | United States |
| Stripe | Payments for Pro on our website | Email address, account ID, name, billing address and card (held by Stripe), subscription | United States |
| Resend | Sends waitlist, invite and other email | Your email address and the message | Not stated by us |
| Slack | Internal notices to our team about feedback, code redemptions and service alerts | Your email address and the first 2,000 characters of feedback you send; for code redemptions, your email address and invited name | Not stated by us |
| Apple | Sign in with Apple on the iPhone; your own iCloud for iPhone note sync | Sign in with Apple identifiers; your notes in your own iCloud, under Apple's terms | Apple |
| RevenueCat | Software kit in the Mac app for a Mac App Store channel that is not active | A random ID, or your account ID after sign-in; never your email address | United States |
| Hugging Face | Hosts optional larger speech models you can download | None of your content: only a download of model files | Not applicable |
| esm.sh | Delivers the Supabase sign-in code on the account and referral pages | Your IP address when your browser fetches the code | Global network |
AI providers you connect yourself
You choose the cleanup engine. When you connect one of these, you use your own account, API key or server, and the provider handles your text under your agreement with them, not ours. Ducktate never stores your Claude credentials.
| Provider | When it runs | Data involved |
|---|---|---|
| OpenAI (ChatGPT) | Only if you select ChatGPT and sign in with your own account | The transcript text and limited note context, sent under your account |
| Anthropic (Claude) | Only if you select Claude, using the Claude command-line tool installed on your Mac | The transcript text, processed under your own Anthropic account |
| OpenRouter | Only if you are on Pro and connect your own OpenRouter API key | The transcript text and limited note context, sent under your key |
| Ollama (your own server) | Only if you select Ollama and enter your server address | The transcript text, sent to a server you operate |
| Your own sync server | Only if you turn on vault sync and enter your own server address and key | Your note content, sent to a server you operate (not to us) |
Running a local model instead keeps AI cleanup entirely on your Mac, with no provider involved.
Changes to this list
We may add, remove, or replace subprocessors as the product evolves. When we do, we will update this page and its "Last updated" date. For how this fits our broader data practices, see our Privacy Policy.
Questions
Gravitas AI LLC, maker of Ducktate
7754 Okeechobee Blvd PMB 384, West Palm Beach, Florida 33410, United States
Privacy questions: [email protected]