Koydo SubProcessors
Version: 2026-10-02 (supersedes 2026-09-29) Effective Date: 2026-10-02 Authoritative Privacy Policy: /legal/privacy-policy §7
This page lists Koydo's direct processors and their material sub-processors. The Privacy Policy table at §7 is the authoritative description of what each processor does and what data it touches; this page adds the additional layer of who they use to do it.
Subscribe to changes. To receive email notice of additions or replacements at least 30 calendar days before they take effect, send a subscription request to privacy@koydo.app with subject "Subprocessor Subscribe." You may object to a new sub-processor within the 30-day notice window; Koydo will work in good faith to address reasonable objections, including by offering an alternative arrangement where feasible.
Plain-language summary
Koydo uses service providers only to operate the service, under contractual limits, and not for third-party advertising.
1. Direct Processors and SubProcessors
| Direct Processor | Function | Material Sub-Processors | Processing Location | Child Data? |
|---|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage, row-level security | Amazon Web Services (US-East infrastructure) | United States (us-east region) | Yes — under DPA + ZDR for AI flows |
| OpenAI, L.L.C. | AI tutoring, content generation, moderation, voice transcription | Microsoft Azure (compute and inference); OpenAI Ireland Limited (EEA-facing data flows) | United States (primary); Ireland for EEA data | Yes — DPA executed 2026-03-19 (v.010126), ZDR enabled |
| Anthropic, PBC | Alternate AI tutoring model (Claude family) | Amazon Web Services; Google Cloud Platform | United States | Yes — DPA pending; ZDR enabled in interim |
| Google LLC (Gemini API / Vertex AI) | Alternate AI tutoring model | Google Cloud Platform infrastructure | United States | Yes — DPA pending; ZDR enabled in interim |
| ElevenLabs, Inc. | Audio asset pre-generation only — server-side text-to-speech rendering of Koydo-authored scripts; static audio files baked into product. No live AI traffic; no User personal data sent. | Amazon Web Services | United States | No — content tooling, not a User-data processor |
| fal.ai | AI image generation for adult-facing creative surfaces | AWS-based inference infrastructure | United States | Limited — text prompts only; under-13 access requires AI disclosure consent |
| Stripe, Inc. | Payment processing for adult subscriptions | AWS; payment-network providers (Visa, Mastercard, etc.) per Stripe's published list | United States, with global card-network routing | No — adult accounts only |
| RevenueCat, Inc. | Mobile subscription management (iOS, Android) | AWS; Apple StoreKit; Google Play Billing | United States | No — adult accounts only |
| Vercel, Inc. | Web hosting, edge runtime, and optional web performance analytics | Amazon Web Services; Cloudflare (edge cache and DDoS protection) | United States; global edge | Limited — hosting processes essential network data; optional analytics are blocked for active profiles known to be under 18, and anonymous use requires adult-mode selection and consent |
| Sentry (Functional Software, Inc.) | Error monitoring and crash reporting | Google Cloud Platform | United States | Limited — minimized crash metadata only; Koydo removes user identity, request data, learner content, breadcrumbs, custom context, and attachments before transmission for every user, and disables automatic session tracking, replay, and performance traces |
| Google Workspace | Business email infrastructure (admin@, privacy@, legal@, etc.); Gmail API for vendor correspondence | Google LLC global infrastructure | Multi-region | Limited — admin correspondence only; no User content |
| Cloudflare, Inc. | DNS, CDN, DDoS protection, bot detection, Turnstile security checks, R2 object storage, and the Tablefort game-room server (Workers and Durable Objects) | Cloudflare global infrastructure | Global edge and configured object-storage locations. Tablefort room data is stored only while a room is active and is deleted automatically 2 hours after its last activity | Limited — network and browser/device signals are used for security; R2 stores Koydo service media and other objects placed there; Tablefort nicknames (children choose from a preset list), age groups, answers, scores and game settings, deleted after 2 hours |
Plain-language summary
Koydo uses service providers only to operate the service, under contractual limits, and not for third-party advertising.
2. Excluded / Not Used
Daily.co is integrated for a future Study Rooms video feature but is disabled while Koydo completes its contract and configuration review. It does not receive User data in the current configuration. If enabled after review, Focus Cam will remain unavailable to users under 13, audio and video recording will remain disabled, and Daily may process short-lived call metadata needed to operate and troubleshoot calls.
Mixpanel is integrated for optional product analytics but is disabled in Koydo's current linked web configuration. If enabled later, Mixpanel will remain limited to active profiles with a known age of at least 18 and recorded analytics consent. Unknown age, minor status, opt-out, and native-app contexts deny initialization.
The following providers have been evaluated and excluded for child-serving Koydo products:
| Provider | Reason for exclusion |
|---|---|
| xAI / Grok | Regulatory and content-safety risk for a child-serving platform; not used; do not re-enable |
| Meta Platforms (Facebook SDK, Pixel, etc.) | Advertising and behavioral-tracking infrastructure inconsistent with Koydo's no-advertising posture |
| TikTok Pixel / TikTok APIs | Same as above |
| Google Ads / DoubleClick | Same as above |
Plain-language summary
Daily.co is integrated for a future Study Rooms video feature but is disabled while Koydo completes its contract and configuration review.
3. DPA Status Snapshot
| Processor | DPA Status | Last Verified |
|---|---|---|
| Supabase | Signed | 2026-04-15 |
| OpenAI | Signed (v.010126, 2026-03-19, by Robert Waltos as CEO of Koydo LLC) | 2026-04-15 |
| Anthropic | Pending — vendor review in progress | 2026-04-15 |
| Google (Gemini) | Pending — vendor review in progress | 2026-04-15 |
| ElevenLabs | Pending — best-practice only (no User data flows; pre-gen content tooling) | 2026-04-15 |
| Stripe | Signed | 2026-04-15 |
| RevenueCat | Signed | 2026-04-15 |
| Vercel | Signed | 2026-04-15 |
| Mixpanel | Signed | 2026-04-15 |
| Sentry | Signed | 2026-04-15 |
Vendor correspondence and DPA evidence are maintained in Koydo's internal compliance records. Public notices summarize processor status without exposing private system details.
Sub-processor list v2026-10-02 — Effective October 2, 2026 — koydo.app/legal/subprocessors
Plain-language summary
Vendor correspondence and DPA evidence are maintained in Koydo's internal compliance records.