Provider directory · privacy terms effective 27 July 2026
KREYD LABS LTD, trading as GUMMY UI, uses the services below to operate Gummy UI. This service-provider and subprocessor directory supplements the privacy notice; it does not expand the data collected or change the role a provider has under its applicable terms.
Each provider receives only the data needed for its stated service. Gummy UI's service instructions do not authorise advertising, sale of customer data, or product development unrelated to providing the contracted service.
Service: Production hosting, edge delivery, deployment and request handling.
Data context: Website requests, IP address, browser and device metadata, request timing, route and operational logs.
Role: Service provider and processor for hosting operations.
Service: Authentication, account recovery, sessions, organisations and invitations.
Data context: Name, email address, identity-provider identifier, session and security state, workspace and role.
Role: Service provider and processor for identity operations.
Service: Application data, backend functions and transactional product state.
Data context: Account and workspace references, entitlement state, licence records, download history and operational events.
Role: Service provider and processor for application operations.
Service: Transactional product, account, security and support email delivery.
Data context: Recipient email address, message type, delivery state and provider message reference.
Role: Service provider and processor for email operations.
Service: Availability monitoring, incident alerting and operational log review.
Data context: Health checks, route and response status, timestamps, errors and privacy-minimised diagnostic events.
Role: Service provider and processor for reliability operations.
Service: Encrypted off-provider backups and restore verification.
Data context: Encrypted backup objects containing the application records covered by the backup schedule.
Role: Service provider and processor for backup operations.
Service: Checkout, payment, tax support, invoices, refunds and transaction support.
Data context: Customer and order references, product, amount, currency, tax, payment and refund state. Gummy UI does not store full card details.
Role: Managed Payments provider; Stripe and Link are separately responsible for payment and transaction-support data as described in the privacy notice.
A provider may process data outside the United Kingdom when its service requires it. Where applicable, Gummy UI relies on a UK adequacy regulation or recognised contractual safeguards supplied through the provider's data-processing terms. The exact route depends on the provider, service and data involved; this page does not claim that every record follows one location or transfer path.
Requests for further information about an applicable transfer safeguard or provider data-processing agreement can be sent to support@kreydlabs.com. Contractual material may be subject to confidentiality, but we will respond with the information we can lawfully provide about the processing.
The directory is updated before a new production provider begins processing customer data for a materially new purpose. Important changes will also be reflected in the privacy notice and brought to account holders' attention where required. Removing a provider from active use does not shorten financial, security, legal-hold or backup retention already described in the privacy notice.
Checkout and paid-file delivery remain unavailable until their full production journeys pass. Listing Stripe here records the configured provider boundary; it is not evidence that customer payments are currently accepted. Read the privacy notice for purposes, retention and rights, or the security page for reporting guidance.