Subprocessors
Last updated: July 5, 2026
Kova uses the following vetted third-party service providers (“subprocessors”) to operate the Services. Each processes information on our behalf under its data-protection terms, limited to processing on our instructions. Kova data is stored and primarily processed in the United States; our CDN and edge-security provider (Cloudflare) may handle network traffic transiently at the globally distributed edge location nearest the request. We will post material additions to this list at least 14 days before they take effect; you may subscribe to changes by emailing privacy@flykova.com.
Apple, Inc. (APNs, PassKit)
Push notifications, boarding-pass parsing
Google LLC (Gemini API)
Reading text from images you choose to upload. Standard tier — Google may retain submitted content for ~30 days and use it to operate and improve their services. See Privacy Policy §7.
Functional Software, Inc. (Sentry)
Crash and error reporting (PII scrubbed)
Cloudflare, Inc.
CDN, DDoS protection, network
Self-managed infrastructure (Kova-operated)
Application servers, databases, caches
| Category | Provider | Purpose | Location | Policy |
|---|---|---|---|---|
| Authentication | Apple, Inc. | Sign in with Apple, account identity | United States | link |
| Payments | Stripe, Inc. | Web subscription billing | United States | link |
| Push & Wallet | Apple, Inc. (APNs, PassKit) | Push notifications, boarding-pass parsing | United States | link |
| Resend, Inc. | Transactional email delivery | United States | link | |
| Image OCR | Google LLC (Gemini API) | Reading text from images you choose to upload. Standard tier — Google may retain submitted content for ~30 days and use it to operate and improve their services. See Privacy Policy §7. | United States | link |
| Diagnostics | Functional Software, Inc. (Sentry) | Crash and error reporting (PII scrubbed) | United States | link |
| Infrastructure | Cloudflare, Inc. | CDN, DDoS protection, network | United States (global edge) | link |
| Hosting | Self-managed infrastructure (Kova-operated) | Application servers, databases, caches | United States | link |
| Backup storage | Backblaze, Inc. | Encrypted off-site database/file backups | United States | link |
A note on aviation data sources. Kova additionally queries public and commercial aviation data feeds for flight schedules, positions, and operational data. Those queries describe flights, not users, and are not subprocessors of personal data. We therefore do not list them above.
See the Privacy Policy for the categories of personal information handled, the purposes for processing, and your rights.