Sub-processors

9 October 2026

We use a small set of vetted processors to run Kludda. This page lists what each one does, where it is located, what it receives, and what transfer safeguard applies.

Vercel

Website and application hosting (serves the app; processes request metadata and logs). United States — SCCs / EU–US Data Privacy Framework.

Bjole AB self-hosted infrastructure

Application database, authentication (self-hosted email one-time-code login), storage of generated images, and anonymous, cookieless product analytics (self-hosted Umami). Operated by us in Sweden (EU).

Bjole AB GPU render server

Image generation in our own styles (coloring pages, storybook pages, character portraits). Operated by us on our own infrastructure in Sweden (EU).

fal.ai (Features & Labels, Inc.)

Cloud image generation. Used as a fallback when our own GPU server is unavailable (including for Photo → Drawing), and always for storybook pages that use an uploaded photo or a character portrait as reference and for the pencil style. Receives the prompt text and, for those features, the image involved — never your email address or account identifiers. United States — fal.ai’s standard data processing agreement with the EU Standard Contractual Clauses (Module 2). fal.ai may use anonymised usage data to develop its models.

LLM gateway (llm.bjole.dev / OpenRouter)

Automated safety classification of prompts, and of photos you upload, before generation. Prompt text and the uploaded image are processed; no email or account identifiers are sent. Routed via providers in the United States — Standard Contractual Clauses.

Email delivery (Resend)

Delivery of one-time login codes, service messages, and report notifications. United States — Standard Contractual Clauses.

Changes

We update this list when our processors change. Questions: privacy@bjole.dev.

Bjole AB · Org.nr 559526-2824