Subprocessors & Service Providers
The third parties that process data on our behalf to operate KudoKids
Last updated: August 17, 2026
Kudo Kids, LLC (doing business as KudoKids) uses the third-party providers listed below to operate the KudoKids app and the kudokids.org website. Each provider receives only the data necessary for its function. We keep this roster on its own page so that it stays current as routine service providers change.
Third parties that receive children's personal information are named in the Privacy Policy itself — in Section 7, “Third-Party Service Providers” — and never only on this page. Before any new provider receives children's personal information, we add it to the Privacy Policy, which re-prompts parents to accept the updated policy when the change is material.
This page is a reference roster. Where it and the Privacy Policy differ, the Privacy Policy governs.
1. Service infrastructure
Providers that process parent and family Service data. Those that receive children's personal information are also named in Section 7 of the Privacy Policy.
| Provider | What it does | What it receives | Privacy & DPA |
|---|---|---|---|
| Supabase, Inc. | Cloud database, parent authentication (email one-time passcode), file storage, and real-time subscriptions. | All family data, including children's personal information, stored on Supabase's infrastructure in the United States (AWS us-east-1 region). | Privacy Policy · DPA |
| Stripe, Inc. | Payment processing for subscriptions and one-time purchases on the website and in the app on non-iOS platforms. iOS in-app purchases go through Apple instead. | The parent's payment details (card number, billing address), sent directly to Stripe and never stored on KudoKids servers, plus the parent's email address and plan selection for receipt delivery and entitlement. No child data. | Privacy Policy |
| Resend | Email delivery to parents — approval requests, security alerts, weekly reports. | The parent's email address and the notification content. No child data. | Privacy Policy |
| Expo / Expo Application Services | Push notification delivery to devices, and delivery of over-the-air app updates. | The device push token — a persistent identifier under COPPA — and the notification content. Notification payloads may include references to child profiles. Separately, every installed app periodically checks Expo for an over-the-air update; those checks send the device's network address plus the app's runtime version, platform, and release channel, and never any family or child content. | Privacy Policy |
| Sentry | Error monitoring and diagnostics. | Error context (stack traces, device information) and the parent user ID. Session replay capture is turned off — no recording of the app screen is ever made or transmitted. In child mode, the trail of actions attached to an error is filtered down to a structural allowlist (screen navigation, app lifecycle, performance timings, and diagnostic log lines), identifiers are scrubbed out of it, and child identifiers are not transmitted. | Privacy Policy |
| Apple Inc.In-app purchases (iOS) | Processes subscription and one-time purchases made inside the iOS app, via App Store / StoreKit 2. | The parent's Apple ID, device identifier, payment instrument (handled entirely by Apple — KudoKids never sees card data), and transaction metadata (product identifier, purchase date). No child data. Purchases can only be started from the parent-gated subscription screen; child profiles cannot initiate or complete a purchase. | Privacy Policy |
| Apple Inc. / Google LLCSpeech recognition | Converts speech to text for voice features. On modern hardware this happens on the device and no audio is transmitted. | Nothing, on devices with on-device speech support. On older devices that lack it, the operating system's Apple or Google speech service may process the audio in the cloud as a fallback, under Apple's or Google's own policies. KudoKids never receives the audio and never stores audio recordings. | Apple · Google |
| Google LLCGemini API | Powers KudoKids AI — our optional, subscription-only assistant for parents — and generates a title for a support ticket. Available to parents and guardians only; children can never use it. | The parent's message, any photo the parent chooses to attach, and the family's parent-written task, routine, and reward names and coin values — or, for a support ticket, the ticket text. Children's profile names are replaced with anonymous placeholders before anything is sent, and children's ages, coin balances, activity history, and messages are never included. We use Google's paid API tier, whose terms prohibit Google from using this data to train its models; Google may retain prompts briefly solely for abuse monitoring. | Privacy Policy |
| Google LLC / YouTubeVideo playback | Plays videos from parent-approved sources inside KudoKids' built-in web browser, through YouTube's privacy-enhanced embed (youtube-nocookie.com). Playback happens only for sources a parent has approved. | During playback, the standard technical data any embedded video player receives — such as the device's network address and which approved video is playing. We never send Google the child's name, profile, or anything the child types in KudoKids, and we designate this playback as child-directed, which turns off personalized advertising in the player. | Privacy Policy |
2. Website-only vendors
These run on the kudokids.org marketing website only. None of them run inside the KudoKids app, none load on any child-reachable page — the pairing, sign-in, invite, redemption, and school-join routes a child could land on, where analytics and advertising are blocked regardless of consent — and none receive child data. Consent categories, defaults, and the Global Privacy Control signal are described in our Cookie Policy.
| Provider | What it does | What it receives | Consent gating | Privacy |
|---|---|---|---|---|
| Google LLCGoogle Analytics 4 | Aggregate website traffic analysis. | Page-view and site-usage events, with IP anonymization enabled and no advertising, remarketing, or demographic features activated. Separately, a completed founding checkout is reported to this same property server-side via the Measurement Protocol as first-party measurement, with advertising signals sent as denied unless advertising consent is active. | Analytics category. On by default for US visitors with a one-click opt-out; opt-in everywhere else. Global Privacy Control honored. Never loads on a child-reachable page. The server-side purchase measurement runs regardless of cookie choice. | Privacy Policy |
| Microsoft CorporationMicrosoft Clarity | Session analytics — heatmaps and session replays. | Recordings of scrolling, clicking, and page navigation. Text typed into forms is masked before it leaves the browser. We instruct Microsoft to deny advertising storage for every visitor. Microsoft collects this data as an independent controller. | Analyticscategory — same defaults as Google Analytics above. Never loads on a child-reachable page. | Privacy Statement |
| Meta Platforms, Inc.Pixel + Conversions API | Measurement and optimization of our Facebook and Instagram advertising. | The Pixel sets _fbp/_fbc cookies and sends event data (page views, content views, checkout starts, form submissions, purchases). Our server sends the Conversions API SHA-256 hashed values of information you provide in forms (email, name, phone, country, state) plus your IP address, browser user agent, and the values of the _fbp/_fbc cookies. On a completed purchase it additionally sends a hashed version of your KudoKids account identifier, so Meta can match the purchase to the browser that started it. This is a “sale” and a “share” of personal information under the CPRA and similar state laws — see Do Not Sell or Share. | Advertising category. On by default for US visitors with a one-click opt-out; opt-in everywhere else. Global Privacy Control honored. If advertising consent is not active, no Pixel event and no Conversions API event is sent. | Data Policy |
| Calendly LLC | The scheduling window behind our “Book a call” buttons on the schools and partner surfaces. | The name and email address you already entered on our form, plus a tag telling us which page the booking came from. Calendly also receives whatever you fill in on its own booking form (the time you pick and any answers you give it) and the standard connection information any website receives, such as your network address and browser. No child data is ever sent to Calendly. | Loads only on click. Nothing from Calendly runs on the page before you click to book, and closing the window ends it. Calendly sets its own cookies and shows its own cookie notice inside that window — those choices sit outside this site's analytics and advertising categories. | Privacy Notice |
| Netlify, Inc. | Hosts and serves the KudoKids website. | Server logs that include IP addresses and browser user agents, as part of standard web hosting. | Essential. Hosting is required to serve the site, so it is not a consent category. | Privacy Policy |
3. Internal and operational tooling
Listed for completeness. The asset-generation tools below are part of how we build KudoKids and receive no user, family, or child data at all. The operational tooling below is different: our staff use it to run support and day-to-day operations, so it can process what we hand it while doing that work. Each row says which is which.
| Provider | What it does | What it receives |
|---|---|---|
| Higgsfield, Inc. | Image and video generation, used as an internal tool to produce companion character art, splash assets, and celebration loops. Generated assets are uploaded once to KudoKids' own storage or bundled with the app binary. | No user-generated content, child data, or family data is ever sent to Higgsfield. Prompts describe generic art assets only and contain no user-identifying information. |
| Google LLCGemini image generation, Lyria music generation | Image and music generation, used as internal tools to produce illustrations, icons, and background music. Generated assets are uploaded once to KudoKids' own storage or bundled with the app binary. | No user-generated content, child data, or family data is ever sent to these tools. Prompts describe generic art and music only and contain no user-identifying information. (This is separate from the Gemini API entry in Section 1, which does process parent content.) |
| Anthropic PBCOperational tooling | Staff-operated AI tooling that our team uses to draft support replies and to carry out engineering and database operations. A person on our team initiates and reviews every use; it is not connected to the app and no parent or child can interact with it. | Whatever our staff supply while doing that work — typically the text of a support request and the account details needed to answer it, and, during engineering operations, data returned by queries our staff run against our own database. Our commercial terms prohibit Anthropic from using this data to train its models. Privacy Policy |
Separately, several components ship inside the KudoKids app but transmit nothing at runtime — Apple's Quick Look AR viewer and Google's Scene Viewer for augmented-reality companion previews, Apple's Face ID / Touch ID (LocalAuthentication), on-device face detectionfor the optional wellness camera features, and display fonts bundled at build time. They are described under “Additional providers” in Section 7 of the Privacy Policy.
Changes to this page
Providers that will receive children's personal information are added to the Privacy Policy first — which re-prompts parents to accept the updated policy when the change is material — never only here.
- 2026-08-17— page created; roster as of this date.
Questions
Email privacy@kudokids.org with any question about a provider on this page, or write to Kudo Kids, LLC, 4030 Wake Forest Road, STE 349, Raleigh, NC 27609.