| Hetzner Online GmbH |
Hosts our server |
Everything stored by Critto |
Germany |
EEA; Hetzner DPA |
| Dedale AI, Corp. (Boat) |
Runs your Den computer |
Den files, browser, saved logins and keys, Den tasks |
EU (DE, FI, FR); US company |
Boat's published privacy terms (no separate DPA available) |
| Cloudflare, Inc. |
Network, security, public card pages, routine task execution, browser sessions, backups |
Traffic, IP addresses, task messages, context, browser session data, generated images, encrypted backups |
Global execution; routine conversation and image storage in the EU |
DPA; Data Privacy Framework |
| WorkOS, Inc. |
Sign-in |
Email, name, sign-in records |
US |
DPA; SCCs and UK IDTA |
| Resend (Plus Five Five, Inc.) |
Sends our emails |
Email address, name, email content |
EU sending; US company |
DPA; Data Privacy Framework |
| OpenRouter, Inc. (proxy) and the zero-retention model hosts it routes to: see OpenRouter's sub-processor list |
Critto Smarts chats and Den work; safety and crisis checks; voice to text and text to voice |
What the request needs (chat content, excerpts, voice); not kept (zero data retention) |
US and others |
DPA with SCCs and UK Addendum |
| Anthropic, PBC (Claude models) |
Critto Smarts chats and Den work, only when one of their models is picked |
The request on that model (chat content, excerpts, pictures) and the reply; data may be retained by Anthropic for 30 days |
US |
DPA in Anthropic's commercial terms, with SCCs |
| Amazon Web Services, Inc. (Amazon Bedrock) |
Critto Smarts chats and Den work, only when one of their models is picked |
The request and the reply; not kept for models that offer zero retention; for others, AWS may keep them up to 30 days for abuse checks, never shared with the model maker |
US or EU, by region |
AWS GDPR Data Processing Addendum; SCCs outside the EEA |
| Cloudflare, Inc. (Workers AI and AI Gateway) |
Critto Smarts chats and Den work, only when one of their models is picked |
The request on that model and the reply; not kept, not used for training, logging off |
Global |
Cloudflare DPA; Data Privacy Framework |
| Meta Platforms, Inc. (Muse Image, Meta Model API) |
Makes pictures a critto draws on Critto Smarts |
The picture description and any pictures it starts from |
US |
Meta's Model API terms; Standard tier, not used to train Meta's models |
| Sampark, Inc. (Composio) |
Connects the apps you choose (calendar, email, files…) so your crittos can use them |
Sign-ins to those apps; what your crittos read or do in them; a random id for your account |
US |
DPA with SCCs and UK Addendum; zero data retention |
| TinyFish |
Web search and reading web pages for your crittos |
What a critto searches for and the pages it reads; never your name, email or account |
US |
TinyFish's terms |
| Geoapify GmbH |
Finds places near you when you ask a critto (maps, opening hours, walking times); finds your saved home's town, once, for local news in your morning brief |
What you're looking for and roughly where (about 100 m), or an address you saved; for the town, roughly where your saved home is (about 1 km); never your name, email or account |
Germany (EU) |
Geoapify's terms; no transfer outside the EU |
| Google LLC (Google Maps Platform) |
Finds places near you on the Pro plan (maps, opening hours, photos, walking times) |
What you're looking for and roughly where (about 100 m), or an address you saved; never your name, email or account |
US; global |
Google Cloud Data Processing Addendum; Data Privacy Framework |
| Norwegian Meteorological Institute (MET Norway) |
The weather in your morning brief, if you turn it on (credited "Weather data from MET Norway") |
Roughly where your saved home is (about 10 km); never your name, email or account |
Norway (EEA) |
EEA; MET Norway's terms of service |
| Google LLC (Google News) |
Local news in your morning brief, if you turn it on |
The name of your town, your language and country; never where you are exactly, your name, email or account |
US; global |
Google's terms; Data Privacy Framework |
| Google LLC (Firebase Cloud Messaging) |
Delivers notifications to Android phones, if you turn them on |
Your phone's notification token; the critto's name and a short preview (or just "Pip sent you a message" if you turn previews off); never secrets |
US; global |
Firebase data processing terms; Data Privacy Framework |
| Apple Inc. (Apple Push Notification service) |
Delivers notifications to iPhones and iPads, if you turn them on |
Your device's notification token; the same short notification as above |
US; global |
Apple Developer terms; Data Privacy Framework |
| Your browser's push service (Google, Mozilla, Apple or Microsoft) |
Delivers notifications to the web app, if you turn them on |
An encrypted notification they can't read |
Global |
End-to-end encrypted (Web Push) |
| Telegram FZ-LLC / Telegram Messenger Inc. |
Carries messages between a critto and the people you approve, if you connect your critto to Telegram |
The Telegram messages to and from your critto, and the sender's Telegram name and id |
UAE/BVI; global |
Telegram's privacy policy and terms |
| Discord, Inc. |
Carries messages between a critto and the people you approve, if you connect your critto to Discord |
The Discord messages to and from your critto, and the sender's Discord name and id |
US; global |
Discord's privacy policy and terms |
| Proton AG |
Our privacy and support mailbox (privacy@critto.app) |
What you write to us |
Switzerland |
Adequacy (EU and UK); Proton terms and DPA |
| Makisuo, Inc. (Maple) |
Server monitoring |
Internal ids, timings, errors; never message content or emails |
US |
DPA with Standard Contractual Clauses |
