Third-Party Services Register

1. Purpose

This register identifies the principal third-party services used by Moseyaround Limited in operating the Mosey website and mobile application.

It should be read alongside our:

• Privacy Policy
• Cookie Policy
• Security Statement

This register may be updated as providers are added, changed or removed.

2. Provider Selection

Before engaging a third-party provider, we aim to consider factors including:

• security
• reliability
• regulatory compliance
• privacy practices
• service availability
• operational resilience
• contractual safeguards

Providers are expected to maintain appropriate technical and organisational security measures.

3. Cloud Infrastructure

Firebase (Google)

Purpose

Firebase provides cloud infrastructure supporting the operation of the Mosey mobile application.

Typical services may include:

• authentication
• Cloud Firestore
• Cloud Functions
• Cloud Storage
• Firebase Cloud Messaging
• App Check
• Crash Reporting (if enabled)

Information Processed

Depending on the feature being used, Firebase may process:

• account identifiers
• authentication information
• profile information
• points balances
• activity records
• device information
• diagnostic information

Cloudflare

Purpose

Cloudflare helps provide:

• website delivery
• performance optimisation
• content caching
• DNS services
• security protections
• protection against malicious traffic

Information Processed

May include:

• IP addresses
• browser information
• request metadata
• security logs
• network diagnostics

4. Authentication Providers

Google Sign-In

Used to allow members to create and access their Mosey account using an existing Google account.

Typical information received may include:

• name
• email address
• profile image
• unique account identifier

Sign in with Apple

Allows members using Apple devices to create or access their Mosey account.

Depending on user choices, Apple may provide:

• Apple account identifier
• email address
• private relay email address
• display name

Phone Number Verification

Where members choose phone authentication, verification services may process:

• phone number
• verification codes
• authentication status

5. Communications

Third-party communication providers may be used for:

• transactional emails
• verification emails
• password reset messages
• service notifications
• customer support communications

Only information reasonably necessary to deliver the communication will normally be shared.

6. Rewards and Gift Cards

As Mosey develops, reward fulfilment may be provided through specialist reward providers.

Depending on the reward selected, information shared may include:

• member identifier
• reward selection
• delivery information
• redemption reference

Only the minimum information necessary to fulfil the reward will be shared.

7. Payment Providers

Where payments are accepted (for example subscriptions or premium features), payment processing will be carried out by specialist payment providers.

Moseyaround Limited does not intend to store full payment card details on its own systems.

Payment providers may process:

• payment details
• transaction references
• billing information
• fraud prevention information

8. Analytics Providers

Where analytics are enabled with appropriate consent, providers may process information relating to:

• application performance
• website usage
• feature usage
• technical diagnostics

Analytics information is used to improve the reliability and usability of Mosey.

9. International Data Transfers

Some third-party providers may process personal information outside the United Kingdom.

Where this occurs, Moseyaround Limited aims to ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

Depending on the provider and destination country, these safeguards may include:

• adequacy regulations recognised by the UK Government
• the UK International Data Transfer Agreement (IDTA)
• the UK Addendum to the European Commission's Standard Contractual Clauses
• other lawful transfer mechanisms permitted under UK data protection legislation

Additional information may be available within the provider's own privacy documentation.

10. Data Processing Agreements

Where a third-party provider processes personal information on behalf of Moseyaround Limited, we seek to have appropriate contractual arrangements in place.

These agreements typically address matters including:

• confidentiality
• security measures
• lawful processing
• sub-processors
• incident reporting
• deletion or return of data where appropriate

11. Ongoing Provider Reviews

Third-party providers are reviewed periodically to help ensure they continue to meet our operational, privacy and security expectations.

Reviews may consider:

• service reliability
• security performance
• regulatory compliance
• privacy commitments
• customer support
• business continuity
• changes to services or ownership

Where appropriate, providers may be replaced if they no longer meet our requirements.

12. Changes to Service Providers

As Mosey develops, we may introduce new providers or discontinue existing ones.

Changes may occur because of:

• new platform features
• improvements to security
• better technical capabilities
• commercial considerations
• changes in law or regulation

This register will be updated periodically to reflect significant changes.

13. Member Transparency

We believe members should understand which organisations help us operate Mosey.

Accordingly, we aim to:

• identify our principal service providers
• explain why they are used
• describe the categories of information they process
• update this register as the platform evolves

Where a provider materially changes how personal information is processed, we will update the relevant legal documentation where appropriate.

14. Third-Party Responsibility

Each third-party provider remains responsible for the services it supplies and for complying with its own legal obligations.

While Moseyaround Limited carefully selects its providers, we do not control the day-to-day operations of independent third-party organisations.

Where members interact directly with a third-party service, that provider's own terms, conditions and privacy documentation may also apply.

15. Changes to This Register

This Third-Party Services Register is intended to remain a living document.

We may update it to reflect:

• new providers
• discontinued services
• changes to processing activities
• regulatory developments
• improvements to transparency

Where updates materially affect how personal information is processed, we will also review the related sections of our Privacy Policy.

16. Contact Us

For questions about our use of third-party providers, please contact:

[email protected] – Privacy enquiries

[email protected] – General support

[email protected] – Legal enquiries

17. Relationship with Other Documents

This register forms part of the Mosey Legal Suite and should be read together with the:

• Privacy Policy
• Cookie Policy
• Security Statement
• Terms & Conditions

Where another document provides more detailed information about a specific processing activity, both documents should be read together.

18. Final Statement

Third-party providers enable many of the features that make Mosey possible, from secure sign-in and cloud infrastructure to communications and future reward fulfilment.

Moseyaround Limited is committed to choosing providers carefully, reviewing them regularly and being transparent about the role they play in delivering our services.

As Mosey grows, this register will continue to evolve to reflect changes in technology, partnerships and legal requirements.