Gwak GwakLegal document
Service providers (sub-processors)
ฉบับภาษาไทย — the Thai version prevails.
This page is the list that sections 9 and 10 of the Privacy policy and section 11 of the Terms and conditions refer to: the service providers who work for Gwak Gwak and receive personal data, what each does, the data it receives and where it processes it. Last updated 2026-11-16. Published at https://gwakgwak.app/en/subprocessors/.
Sub-processors
5 providers
| Provider | Category | What it does | Data it receives | Where it processes data |
|---|---|---|---|---|
| Hostatom | Server and database provider | The virtual server that runs the Service, the database, the job queue and our own logging system, and space for a second backup copy that is encrypted before it is sent | Account data, shop data, a shop's member data, activity records, logs and encrypted backups | Thailand |
| Cloudflare | Network and data delivery provider | Every request between the app and our servers passes through its network; delivers product pictures and logos to whoever opens them | The content of requests and responses, IP addresses and the device details sent with a request | A global network, including outside Thailand |
| Cloudflare R2 | File and backup storage provider | Stores product pictures and shop logos, the photos attached to bills, shifts and expenses, and encrypted database backups | Photos, which may show people, and encrypted backups | The Asia-Pacific region, which may be outside Thailand |
| Resend | Email delivery provider | Sends sign-in code and account notice emails | The recipient's email address and the email's content | Outside Thailand (sent from Japan, data stored in the United States) |
| ThaiBulkSMS | SMS delivery provider | Sends sign-in code and account notice text messages | The recipient's mobile number and the message's content | Thailand |
Providers you choose to use
6 providers
LINE, Google and Apple do not process data on our behalf. Each is a controller of the data on its own side, and receives or sends data only when you choose its service. Sections 4 and 5 of the Privacy policy have the details.
| Provider | Category | What it does | Data it receives or sends us | Where it processes data |
|---|---|---|---|---|
| LINE (LY Corporation) | Sign-in provider | Confirms a sign-in with LINE | Your LINE user ID, name, profile picture and email address | Outside Thailand (Japan and the other countries named in LY Corporation’s privacy policy) or Thailand |
| Sign-in provider | Confirms a sign-in with Google | Your Google user ID, name, profile picture, email address and whether it is confirmed; on iPhone and iPad its sign-in software in the app may also collect an approximate location, a device identifier and data about how the sign-in is used | Outside Thailand (United States) | |
| Apple | Sign-in provider | Confirms a sign-in with Apple, and revokes Gwak Gwak's access when you delete your account in the app | Your Apple user ID, email address or Apple's relay address, and your name on the first sign-in if you share it | Outside Thailand (United States) |
| Google on Android, Apple on iOS | Map provider | Draws a shift's map | Your IP address and the area shown; on Android, its map software in the app also sends the device's model and operating system version, an identifier it generates, how the map is moved and zoomed, and its own crash data | May be outside Thailand |
| Apple or Google, by the device's platform | The device's speech service | Turns your words into text when you search products by voice | Your speech and the product names that help recognise it | May be outside Thailand |
| Apple or Google, by the device's platform | Platform crash reports | Collects the app's crash reports as your device settings allow | Crash reports and diagnostics about the app | May be outside Thailand |
Our logging system, and the crash reports the app sends, run on our own server, so they are not on this list. Services that receive no personal data are not on it either.
Changes to this list
We update this page before adding or replacing a provider that receives personal data. For a provider that processes members' data, or other data we process on a shop's behalf, we tell the shop in the app or by email at least 30 days in advance, as section 11 of the Terms and conditions says.
We send or transfer data abroad only as sections 28 and 29 of the Personal Data Protection Act B.E. 2562 (2019) allow. You can ask for details of the safeguards at support@gwak-gwak.com.