Processors and Sub-processors

This is the list of companies that handle personal data on our behalf. The Privacy Policy explains what we collect and why.

1. Current processors

• Cloudflare: hosting, network security, database storage and cookieless Web Analytics.
• Stripe: payment processing, invoices and refunds. With Managed Payments on, Stripe is also the merchant of record for paid plans.
• Resend: delivery of service email such as receipts and trial reminders.
• OpenRouter: routes AI requests for Ping and recaps to model providers.
• DeepSeek: AI model provider used for Ping and recaps.
• PostHog (EU region): product analytics without cookies.
• Sentry: error monitoring.

2. What each one does

• Cloudflare serves the pages, runs the API and stores the database. It also blocks abusive traffic and records cookieless page counts.
• Stripe handles checkout, invoices, tax and refunds. We never see or store your full card number.
• Resend sends service email: receipts, trial reminders and security notices. It is not used for marketing lists.
• OpenRouter is the routing layer for Ping and recaps. It forwards the request to the selected model provider.
• DeepSeek is the model provider for Ping and recaps.
• PostHog (EU region) records product events such as which feature was opened, without advertising cookies.
• Sentry records scrubbed error reports so a broken screen can be fixed.

3. What they receive

Each receives only what its job needs. Stripe receives your billing details and the plan you bought. Resend receives your email address and the message being sent. Cloudflare processes the account and study data needed to run the service. AI providers receive the text of your question and the lesson context, not your name or email. PostHog receives event names and coarse properties, not the text of your notes or answers. Sentry receives the error, the page it happened on, and technical browser details, with personal fields scrubbed.

4. Where the data goes

We are in the UK. Some providers process data in the United States or elsewhere. Where data leaves the UK or EEA we rely on adequacy decisions, the UK International Data Transfer Addendum or EU Standard Contractual Clauses, as the provider supports. The Privacy Policy sets out the safeguards in more detail.

5. How long it stays

Account and study data stays while your account is open. Deleting your account removes the server-side study data. Billing and tax records stay for the period the law requires, which is six years for UK accounting records. Backups and logs expire on their normal schedule, and anonymous analytics stay in aggregate.

6. Changes to this list

If we add or replace a processor, we update this page first. For a material change that affects personal data, we tell account holders in the app or by email before it starts.

7. Questions

Use the support address in the footer.