Subprocessors

Who	What for	Data	Where
Google LLC — Firebase (Firestore, Cloud Functions, Hosting, Authentication, Cloud Logging)	Storing bookings and accounts, running the service, serving booking pages, request logs (30 days)	Everything the service holds	Montréal, Canada (northamerica-northeast1); logs may be processed by Google globally
Google LLC — reCAPTCHA / App Check (when enabled)	Telling real visitors from bots on the booking page	Browser signals	Google global
Hostinger (email)	Sending booking emails	Client name, email, appointment details	EU/US
Apple Inc. — Push Notifications, Sign in with Apple, Maps	New-booking alerts to the business's phones; sign-in; maps in the app	Device tokens, notification text; Apple ID identifier; map searches stay on device	Apple global

Not used: advertising networks, analytics or tracking SDKs, payment processors.