Everyone who touches your data.
The plain version
A short list of companies holds or moves something on our instructions. What each one does is below, and so is whether anything it holds leaves the EU.
We do not publish which company does which job, because a public list of that is more use to somebody attacking this than to you. If you want the names — as a member, a lawyer, an auditor or a regulator — write to privacy@tembral.com and we will send them. We keep a full written record of every one, and a supervisory authority can have it on request.
Three you can see for yourself — Apple, Google and Zoom — are not working on our instructions at all. Each is a service you choose, so each is named. That is the second half of this page.
One of them costs you something. If you sign in with Google, Google learns that your Google account connected to Tembral, every time you sign in. The other two ways in are still there and always will be.
What each one does
A processor is a company that holds or moves data on our instructions and for no purpose of its own.
Where it runs is the part with a legal consequence, so it is the part printed. Two of these are in the United States and everything else stays inside the EU.
- Holds your account, your first name, and what you choose to write about yourself
- Runs in the EU.
- Serves this website and receives what you type into the sign-up form
- Runs in the EU.
- Carries the live audio of a circle while it is running, and keeps none of it
- Runs in the EU.
- Sends the mail: the code that signs you in, and the link that confirms your address
- Runs in the United States.
- Counts anonymous usage, which cannot be matched to your account
- Runs in the EU.
- Hosts the mailbox these pages tell you to write to
- Runs in the EU.
- Runs the public feedback board, which opens in your browser and only if you go there
- Runs in the United States.
- Counts how this website is used, without a cookie and without your address
- Runs in the EU.
Apple, Google and Zoom, who are not processors
Neither of these takes instruction from us. Each runs its own service, under its own terms, with the person signing in.
- Apple
- The App Store, TestFlight, and Sign in with Apple. If you sign in that way, Apple may hand us one of its private relay addresses instead of your real one, and that relay address is then the only address we hold for you.
- Sign in with Google, and nothing else in this product.
If you sign in with Google, Google learns that your Google account connected to Tembral — a named men’s mental-health app — every time you sign in, not only the first time.
It learns nothing you write here. No reflection, no check-in, nothing you put in About you, nobody in your circle, and no name beyond what your own Google profile already carries. It also sees what any website sees when a browser arrives at it: your IP address, the time, and which browser you used.
The other two ways in are still there and always will be. You can sign in with an emailed code, or with Apple, and neither tells Google anything.
What is actually held, for how long, and how to have it deleted is set out on the privacy notice. Questions about any of this, including a question about one company on the list, go to privacy@tembral.com.
Last updated
This page was last changed on 6 September 2026. A new company is added here before it starts processing, not after.
One version, one date, no archive.
