Who else touches your data
Last updated 25 October 2026.
EveryDojo is not built from nothing. It runs on other companies' infrastructure, and some of them can reach your data in order to do their job. This is the complete list. If a company can touch member data, it is on this page.
| Company | What it does for us | What it can touch | Where the data sits |
|---|---|---|---|
| Neon | The PostgreSQL database EveryDojo runs on. | Everything: member records, dates of birth, addresses, health declarations, photos, messages, attendance, payment status. | United States (AWS us-east-1, Virginia)Company based: United States |
| Vercel | Hosting, serverless functions, the Blob store that holds club logos and photos, and counting visits to public pages (Vercel Web Analytics, no cookies). | All data passing through the app in transit; club logos, cover images and gallery photos at rest. For visit counts: the address of the public page visited, without any search terms, and never a signed-in page. | Functions in the United States; Blob storage in London.Company based: United States |
| Resend | Sends EveryDojo's email: sign in and confirm links, password resets, verification links, trial and event confirmations, and notices to families and clubs. | Recipient email address, the member or club name appearing in the message, and the message content. | Sent from Resend's Ireland region; Resend is a United States company.Company based: United States |
| Google (Workspace) | EveryDojo's own mailbox, hello@everydojo.com: messages people send to EveryDojo and our replies. Also the backup route for email if Resend is unavailable. | Messages sent to or from EveryDojo, with the names and email addresses of the people writing. | Global (Google infrastructure)Company based: United States / Ireland |
| Stripe | Card payments, where a club has set up card payments. Stripe verifies the instructor's identity and bank account, takes the parent's payment, and pays the club directly. | The instructor's own identity documents, bank account and business details, collected by Stripe inside EveryDojo but sent straight to Stripe. Payer name and card details for each payment. EveryDojo never stores any of it: card and identity data go from the browser to Stripe and never touch our servers or database. | European Economic Area and United StatesCompany based: Ireland (Stripe Payments Europe, Ltd.) / United States |
| GoCardless | Direct Debit collection, where a club has connected its own GoCardless account. | Payer name, email and bank mandate. Held by GoCardless under the club's own account, not by EveryDojo. | United Kingdom / European Economic AreaCompany based: United Kingdom |
| Anthropic (Claude) | AI assistant used by the founder to build and maintain EveryDojo. During development and support work it has been given access to the live database. | Whatever a maintenance or support task requires — which has included real member records, dates of birth, addresses and health flags. | United StatesCompany based: United States |
| Apple and Google push servicesNo member data | Deliver the phone alerts a person turns on in Get the app (Apple's push service for iPhone and iPad, Google's for Chrome and Android; Microsoft's or Mozilla's on their browsers). | The device's alert address and an encrypted message they cannot read. The words on the lock screen are general, like "Your club has an event for you": never a child's name. | Global (Apple and Google infrastructure)Company based: United States |
| postcodes.ioNo member data | Converts a UK postcode or town name into map coordinates for club search. | A postcode or place name only. No name, and nothing identifying a person. | United KingdomCompany based: United Kingdom |
Why Anthropic is on this list
EveryDojo is built and maintained by Rondas Exports Ltd, using an AI assistant, Claude, made by Anthropic. Doing real work on a live product — fixing a bug, transcribing licence records, checking why a page is slow — has meant giving that assistant access to the live database. Real member records, including dates of birth and health flags, have passed through it.
Most products in this position do not mention it. We think that is the wrong call. If a company can see your child's record, it belongs on this page, whether it is a database provider or an AI assistant.
What is not here
There is no advertising network, no analytics profiling, no data broker, and no third party that receives member data for its own purposes. EveryDojo does not sell data and does not share it with anyone for marketing.
Changes
If a new company is added that can reach member data, this page is updated at the same time. It is meant to stay accurate, not to be written once and forgotten.