Service Providers, Data Locations & Retention

Last updated: 15 July 2026. This page is referenced by our privacy policies and is kept current as our infrastructure evolves. It supplements the policies; the policies' commitments govern.

Kunobi Desktop

• Identity and sign-in (optional accounts) — Clerk Inc., United States. Account data retained while your account exists.
• Backend hosting (account features, notifications) — Google Cloud Platform (Google LLC), United States and other Google locations.
• Diagnostics storage and analysis (opt-in telemetry, crash counters, consented crash reports) — operated by Zondax on Google Cloud Platform infrastructure. Diagnostics are retained only as long as needed for analysis and then deleted or aggregated.
• Update and download delivery — Cloudflare, Inc. (global network). Cloudflare processes request metadata to deliver and secure updates and downloads; we do not use it to identify users.

Zondax Ping

• Sign-in, push delivery, app attestation — Google LLC (Firebase Authentication, Firebase Cloud Messaging, Firebase App Check), United States and other Google locations.
• Push delivery and attestation on iOS — Apple Inc. (APNs, App Attest/DeviceCheck), United States and other Apple locations.
• Backend hosting and storage — Google Cloud Platform (Google LLC). Push tokens and device registrations are retained while the device is registered and removed on account deletion.
• Incident data — retained as long as needed to provide the service or per your team's configuration.

Transfers

Where these providers process personal data outside Switzerland or the EEA (notably in the United States), we rely on recognized standard contractual clauses or an applicable adequacy decision. Contact dataprotection@zondax.ch for information about the safeguard applying to a specific transfer.