Sub-processors
This page lists the third-party service providers ("sub-processors") that process personal data on behalf of Island Breeze Affiliates Inc. (d/b/a IBA Music) to deliver the IBA Companion app, the IBA Music admin dashboard, and related web tools. IBA Music remains the data controller for all personal data described in our Privacy Policy. Each sub-processor listed here acts only on IBA Music's documented instructions and is bound by a contract consistent with Article 28 of the EU GDPR (or the closest analogous US requirements where GDPR does not directly apply).
If we add or remove a sub-processor, the change is reflected here and in Privacy Policy §7. The Privacy Policy is the authoritative statement of how IBA Music collects and uses your information; this page exists to make the sub-processor list easy to consume on its own.
Current sub-processors
| Provider | Purpose | Data location | Legal link |
|---|---|---|---|
| Apple Inc. | Apple Push Notification service (APNs); Sign in with Apple; EventKit framework for on-device Apple Calendar sync; ActivityKit for the Set Tracker Live Activity; Apple WeatherKit for the optional venue precipitation forecast shown inside the Live Activity (queries use venue coordinates, not device location) | USA, global edge | apple.com/legal/privacy |
| Google LLC | Google Calendar API (opt-in, calendar.app.created scope only) and Google Sign-In for authentication. |
USA, global edge | policies.google.com/privacy |
| Microsoft Corporation | Microsoft Azure Active Directory — IBA Companion offers Microsoft 365 sign-in to musicians whose IBA Music account is linked to a Microsoft identity. Microsoft Graph is also used on the IBA Music admin side to sync performance bookings with IBA Music staff Outlook calendars; that admin use is not part of the IBA Companion app. | USA, global edge | privacy.microsoft.com |
| Cloudflare, Inc. | Edge hosting for admin.ibamusic.com and related tools; Cloudflare D1 database storage (performance schedule, check-ins, song metadata); Cloudflare R2 object storage (IBA Music's multitrack audio stems used by the Practice feature); Cloudflare Pages hosting for this legal subdomain | USA, global edge | cloudflare.com/privacypolicy |
All listed providers process personal data only as needed to provide the services described above. None of them are authorized to use IBA Music user data for their own advertising, analytics, or product-development purposes.
What is not here
IBA Music does not use:
- Any advertising networks
- Any mobile ad SDKs (Google Ads, Meta Audience Network, AppLovin, Unity Ads, etc.)
- Any analytics SDKs (Firebase Analytics, Amplitude, Mixpanel, Segment, Hotjar, etc.)
- Any third-party crash-reporting SDK (Sentry, Crashlytics, Bugsnag, etc.). IBA Music does not operate a custom diagnostic telemetry pipeline of its own; the only crash reports we may see are those Apple shares with us through App Store Connect when a user opts in via the system "Share With App Developers" setting.
- Any Firebase product. IBA Companion does not include Firebase Analytics, Crashlytics, Performance, Remote Config, Cloud Messaging, or App Check.
- Any data broker or CRM enrichment provider
- Any generative-AI provider in a user-facing decision path
If any of those facts change, we will update this page before the change takes effect.
Changes
When we add, remove, or materially change the scope of a sub-processor, we update this page and the Privacy Policy. The "Last updated" date in the footer is pulled automatically from the git commit history of this file so you can verify the last time it changed.
Questions
Email privacy@ibamusic.com.