Subprocessors

Vercel — Application hosting, serverless functions, and content delivery. Processing region: USA / Global (edge).

Supabase — Managed Postgres database and authentication (account and learning data). Processing region: USA.

Stripe — Payment processing and subscription billing. We never store full card numbers. Processing region: USA / Global.

Resend — Transactional email (account confirmation, consent, and support messages). EEA/UK mail is dispatched from the EU (Ireland) region; email metadata and delivery logs are stored in the USA under SCCs. Processing region: EU (Ireland) dispatch / USA storage.

Upstash — Ephemeral key-value store used for rate limiting and short-lived session state. Processing region: USA / Global.

Cloudflare (Turnstile) — Bot and abuse protection on sign-up and sign-in forms. Processing region: Global.

Google (Gemini API) — AI assistance for the math help/support features. Student prompts are processed to generate responses. Processing region: USA / Global.

Wolfram|Alpha — Computational math engine used to check and explain certain answers. Processing region: USA.

Some subprocessors process data in the United States or other countries outside the EU/EEA. Where personal data of EU/EEA or UK individuals is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

We update this page when we add or remove a subprocessor. Schools and districts with a Data Processing Agreement can request advance notice of material changes so they may object where their agreement provides for it. Questions? Contact privacy@konessancemath.com.