Subprocessors

This page lists the subprocessors of SiYou (operated by Faivv Limited) — the third parties that process personal data on our behalf — together with the data each receives and why. It supports our Privacy Policy and our app-store privacy declarations, and is re-verified against the product on every release.

We do not sell personal data. Each subprocessor receives only the data needed for the specific function listed below, under contract terms that restrict further use.

• Services: Firebase Authentication, Cloud Storage, Cloud Messaging (FCM).
• Data: account email and sign-in identity; voice message audio files and playback links; device push tokens and AI-labelled notification previews.
• Purpose: account sign-in, voice message storage and playback, delivery of push notifications.

• Services: backend application hosting and PostgreSQL database.
• Data: application records — accounts, profile (My Card), pals, chat messages, memories and bios, group data, legal acceptance records.
• Purpose: primary storage and processing of the product's state.

• Services: website hosting for siyou.app, including edge IP geolocation.
• Data: standard web request data (IP address, browser type, requested pages), the country derived from your IP address, and short-lived request logs.
• Purpose: delivering the website and web chat experience, and enforcing our geographic restriction by redirecting visitors from the United States and China Mainland away from the app pages.

• Services: Cloudflare R2 object storage for external database backups.
• Data: PostgreSQL backup snapshots containing application records — accounts, profile data, chat messages, memories, group data, and legal acceptance records.
• Purpose: disaster-recovery backups of the primary database, retained for a maximum of 35 days.
• Note: backups are exported from Railway and uploaded to R2; no additional user data is sent to Cloudflare beyond what the database already contains.

• Services: the primary large language model behind companion chat, group chat, proactive messages, link summaries, memory processing and bio generation; speech-to-text transcription (Qwen Omni family); and AI image generation for AI Pal sketches.
• Data: message content and the profile/context fields needed to generate a reply; voice recordings you choose to send, for transcription only; the text of web pages you share in chat, which our server fetches and summarises; and sketch prompts with optional reference images.
• Purpose: powering the AI pal features, producing voice transcripts, and generating evolving pal sketches.
• Note: served via DashScope International (dashscope-intl.aliyuncs.com); this page is updated whenever the model or its settings change.

• Services: OpenRouter API with web plugin for web-search-powered news retrieval.
• Data: topic keywords and language preference only — no user chat content or profile data is sent.
• Purpose: fetching current news articles for proactive-chat conversation seeds.

• Services: Currents API for fetching news articles.
• Data: no user data is sent; the server fetches articles using our API key.
• Purpose: sourcing news content for proactive-chat conversation seeds.

• Services: IP geolocation lookup used by our mobile app and backend to enforce our geographic restriction at sign-up and sign-in. The website uses Vercel's edge geolocation instead (see §4).
• Data: your IP address at sign-up or sign-in, used only to determine your country and region.
• Purpose: blocking account registration and sign-in from jurisdictions where the service is unavailable.

• Services: Gmail API over HTTPS, used by our backend to send email from contact@siyou.app.
• Data: the email address you give us in a report, the text of your report, and labels of the room or Pal you identified — chat message content is never included.
• Purpose: sending report acknowledgements, one-time remedy links, and follow-up replies about your report.

• Sign in with Apple (mobile app) and Google sign-in: used only to create and authenticate your account. We receive the name and email your identity provider shares.

For access, correction, or deletion requests, or questions about any subprocessor listed here, contact contact@siyou.app.

When we add or remove a subprocessor, we update this page and, where material, the Privacy Policy and app-store declarations.