Effective: 2026-10-23

Shuichi — Sub-processor List

Independent controller: Creem

Creem is the merchant of record: it sells Shuichi to you and processes your payment data as an independent controller, under its own privacy notice, not on our behalf; it shares order data with us under its Data Sharing Agreement, each of us as a controller. Creem receives your payment details directly (they never touch our servers). Its notification to our key server contains your name and email, which our server drops at once without storing them; it keeps the order or subscription id, Creem customer id, what you bought and the status of your subscription, and our server asks Creem for a subscription's current status and for a link to your billing portal when you press Manage subscription.

Processors

This is every third party that handles data on Shuichi's behalf, or that Shuichi's app or infrastructure connects to over the network, and what each one sees. "Sees" means: this party's own servers receive this data; it is not that we hand it to them separately.

Creem and our key server on Cloudflare Workers receive data only once paid plans are on sale; until then they receive nothing.

• Cloudflare (Workers and KV) — runs our own small server that receives Creem's webhook, signs your key, renews subscription keys (/renew), asks Creem for your billing-portal link (/portal), and remembers each purchase so a repeat notification returns the same key. Briefly receives your name and email inside Creem's notification and drops them before anything is stored; keeps the order or subscription id, Creem customer id, subscription status and dates, and the key issued to you (a subscription key carries no name or email; Lifetime keys are signed in memory and not stored); for renewal and portal requests also your IP address and fixed technical headers (User-Agent: Shuichi, Accept-Language: en), which the server does not store. Purchase records are kept as described in the Privacy Policy, "How long we keep each kind of data".

• Cloudflare (Email Routing) — receives every email sent to our hello@ and feedback@ addresses and forwards it to our Gmail mailbox; these addresses are not mailboxes themselves.
• Google (Gmail) — the mailbox those addresses forward to, provided by Google under its own terms. It holds the emails you send us and our replies — the only place we have your email address. We send no key emails, so purchases are not copied there.

• Cloudflare (Pages / R2), shuichi.app and updates.shuichi.app — hosts the marketing site and the software-update feed (Sparkle appcast + release archives, including the "payments open" line). Receives ordinary web-request data (IP address, requested path, User-Agent) for anyone visiting the site or checking for updates; nothing tied to a purchase.

Hosts the app downloads from directly (not our processors)

When you choose a larger speech model, Shuichi downloads it straight from a public host. These hosts act for themselves under their own terms, not on our behalf; we list them so you know who sees the request.

• Hugging Face (huggingface.co/ggerganov/whisper.cpp) — hosts the downloadable Whisper speech-recognition model files. Receives your IP address and the model filename when you choose to download a larger/different model in Settings, never anything you have said, typed, copied or written.

• GitHub (github.com/k2-fsa/sherpa-onnx releases) — hosts the downloadable Parakeet speech-recognition model archive. Same exposure as Hugging Face above, for the second speech-recognition engine.

Tools that run on your Mac, not on our servers

• Sparkle (the update-checking library) runs inside the app itself and talks only to updates.shuichi.app above; it is not an independent service that receives your data.

• Codex CLI / Claude Code, if their session logs are on your Mac, are tools you already run yourself; Shuichi only reads files they already write locally (see the Privacy Policy's "AI tool limits" section), and makes no network call to Anthropic, OpenAI, or anyone else for this feature.

Changes

We will add to this list before any new sub-processor goes live, not after.

Contact

hello@shuichi.app