Subprocessor List
Service providers used to operate Foremates
Luduslabs Ltd · trading as Foremates
Version: October 2026
This document supports the Foremates Privacy Policy and Data Processing Agreement. It identifies service providers that may process personal data on behalf of Luduslabs Ltd when operating Foremates.
On this page
How to read this list
A “subprocessor” is a provider that may process customer-controlled personal data on Foremates’ behalf.
Some providers involved in payments, app stores or social login act as independent controllers for some of their processing rather than as Foremates subprocessors. They are listed separately for transparency.
The exact data processed depends on which Foremates features a customer or user enables.
Current subprocessors
Laravel Cloud
Purpose: core application hosting, database, file storage, background processing and the real-time connections used for messaging and live scoring.
Data: Customer Personal Data stored or processed by the Foremates service.
Processing location: provider infrastructure; region depends on Foremates configuration.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Laravel Nightwatch
Purpose: performance and error monitoring of the Foremates service.
Data: account identifiers including name and email address, IP address, request details, and error and log context.
Processing location: provider infrastructure; region depends on Foremates configuration.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Google / Firebase / Google Cloud
Purpose: push messaging, product analytics, crash reporting and, where enabled, delivery of app updates.
Data: device push tokens and notification content, account identifiers, device information, usage events and diagnostics.
Processing location: global infrastructure; specific regions depend on configured Google service.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Google / Gemini API
Purpose: AI-enabled features: generating course and hole content and, where the feature is used, personal golf insights.
Data: for golf insights, a player’s name and summary golf statistics, including handicap. Course and hole content is generated from course data and imagery, not personal data.
Processing location: global infrastructure; specific regions depend on configured Google service.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Sentry
Purpose: application error monitoring, crash reporting and performance diagnostics.
Data: diagnostic data, device/application metadata, error context and limited identifiers where included in an error event.
Processing location: the provider’s European Union data region (Germany).
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Postmark
Purpose: delivery of Foremates email, including verification codes, password resets, account notices, announcements and replies to website enquiries, with delivery, open and click reporting.
Data: email address, name, message metadata and message content required for delivery.
Processing location: provider infrastructure, potentially including the United States.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
RevenueCat
Purpose: app subscription entitlement and purchase-status management.
Data: account identifier, name and email address, golf profile details such as handicap and home club, device identifiers, IP address, and product and subscription status.
Processing location: provider infrastructure, potentially including the United States.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Resend
Purpose: the website sign-up list and communications sent to it.
Data: email address and first name.
Processing location: provider infrastructure, potentially including the United States.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Attio
Purpose: customer relationship management for website enquiries and sign-ups.
Data: name, email address, organisation, enquiry details and the record of marketing consent.
Processing location: provider infrastructure, potentially including the United States.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Slack
Purpose: internal team alerts when a website enquiry arrives.
Data: the enquiry details shown in the alert.
Processing location: provider infrastructure, potentially including the United States.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Vercel
Purpose: hosting of the Foremates website and its cookieless visit analytics.
Data: website request data such as IP address and browser details, and form submissions in transit.
Processing location: global infrastructure.
Transfer safeguards: provider contractual safeguards and applicable transfer mechanisms.
Other important third parties
The following providers may act as independent controllers, processors in a separate payment relationship, or a mixture of roles depending on the transaction. They are therefore not automatically classified as Foremates subprocessors for every activity.
Stripe
Purpose: payment processing, connected accounts, payouts, fraud prevention and identity/bank verification where applicable.
Foremates does not receive full card details entered directly into Stripe’s payment interface.
For connected-account KYC and payment-network obligations, Stripe may act as an independent controller or under its own legal role.
Apple
Purpose: App Store distribution, in-app subscriptions, Sign in with Apple and device/platform services.
Apple processes relevant data under its own terms and privacy responsibilities.
Purpose: Google Play distribution, store subscriptions and Google sign-in in addition to any processor services listed above.
Google may act independently for store and account services.
Golf, mapping and course-data providers
Purpose: course, mapping, facility or golf-data content used by enabled Foremates features.
Foremates currently uses GolfAPI for course and club data, Apple Maps and Google Maps for map display, and Open-Meteo for course weather. A course search or a search location may be sent to these providers. Foremates does not send them account identifiers.
Role: depends on the provider and data flow. Providers that receive customer personal data as processors must be added to the Current subprocessors section before that processing begins.
Changes to subprocessors
Foremates may update its subprocessors as the Service evolves.
For business customers covered by the Foremates DPA, material new subprocessors will be handled under the notice and objection process in that DPA.
Contact
Privacy and subprocessor questions: info@luduslabs.net
Foremates is operated by Luduslabs Ltd, company number 16312935.