Short version (DRAFT — pending legal review; not yet in force)
- These are the companies that help us run Kidbys and may process personal data on our behalf.
- User data and media are hosted in the EU. Where a provider is outside the EU, we use legal transfer safeguards.
- Providers marked Planned are integrated or designed in our software but not yet switched on for real users.
- None of these providers may use your data, or your child's, for their own advertising or to train their own AI models.
- We will update this page before adding a new provider that handles personal data.
Effective date: EFFECTIVE DATE
This list supports our Privacy Policy and Children's Privacy Notice. "Child data" means whether the provider may receive data about a child profile (never contact details, which we do not collect).
Status key: Beta = used in the current invite-only beta. Live = used for the public service. Planned = built or designed, not yet active for real users.
1. Infrastructure
| Provider | Purpose | Data | Child data | Location | Status | Transfer safeguard |
|---|---|---|---|---|---|---|
| Contabo GmbH | Dedicated beta server, beta database, private media storage and encrypted backups | All beta account, child-profile and media data | Yes | EU CONFIRM DATA CENTRE | Beta | EU processing |
| PRODUCTION HOSTING PROVIDER — repository default is DigitalOcean (App Platform, Managed PostgreSQL, Spaces) in Frankfurt (fra1) | Production application hosting, database, media storage and CDN | All account, child-profile and media data | Yes | EU CONFIRM REGION | Planned | EU processing; SCCs for any US support access |
| ClamAV (open source, run on our own servers) | Malware scanning of uploads | Uploaded files | Yes | Same as hosting | Beta | Not a third party |
2. Communications
| Provider | Purpose | Data | Child data | Location | Status | Transfer safeguard |
|---|---|---|---|---|---|---|
| Resend | Transactional email (verification, password reset, service notices) | Adult email address, message content | No | CONFIRM REGION | Beta | DPF / SCCs |
| Expo (650 Industries, Inc.) | Push notification delivery to Apple and Google push services | Push token, notification content | No (child profiles have no push tokens) | US | Planned | DPF / SCCs |
| Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) | Delivering push notifications to devices | Push token, notification content | No | US / global | Planned | Provider terms; DPF / SCCs |
3. Identity, sign-in and security
| Provider | Purpose | Data | Child data | Location | Status | Transfer safeguard |
|---|---|---|---|---|---|---|
| Stripe Identity (Stripe, Inc. / Stripe Payments Europe Ltd.) | Agent identity verification (ID document and selfie, processed in Stripe's hosted flow; Kidbys receives only status) | Adult ID document and selfie (held by Stripe); status returned to Kidbys | No | US / EU | Planned (not connected in the beta) | DPF / SCCs |
| JOINT LIVENESS PROVIDER — working candidate Veriff OÜ (Estonia), not contracted | Joint parent-and-child liveness check; Kidbys receives only pass or fail | Adult and child live video processed by the provider | Yes | EU | Planned | EU processing |
| Apple (Sign in with Apple) | Optional adult sign-in | Apple account identifier, email | No | US / global | Live when enabled | Apple terms; DPF |
| Google (Sign in with Google) | Optional adult sign-in | Google account identifier, email | No | US / global | Live when enabled | Google terms; DPF |
| Cloudflare, Inc. (Turnstile) | Optional bot protection at sign-up and sign-in | IP address, browser and device signals | No | Global | Planned / optional | DPF / SCCs |
4. Payments and commerce
| Provider | Purpose | Data | Child data | Location | Status | Transfer safeguard |
|---|---|---|---|---|---|---|
| Stripe (Payments, Checkout, Connect Express) | Card and Apple Pay payments, Spark packs on the web, held sale proceeds, Agent payouts | Adult payment, order and payout data; Stripe collects Agent KYC and bank details directly | No | US / EU | Planned (test mode only; disabled in beta) | DPF / SCCs |
| Apple (App Store In-App Purchase) | Subscriptions and Spark packs bought in the iOS app | Purchase records linked to an opaque account reference | No | Global | Planned (disabled in beta) | Apple terms |
| Google (Play Billing) | Subscriptions and Spark packs bought in the Android app | Purchase records linked to an opaque account reference | No | Global | Planned | Google terms |
| Printful | Print-on-demand production and shipping (primary) | Buyer name, shipping address, order details, print file of the artwork | Artwork image only | US / EU / other facilities | Planned | DPF / SCCs |
| Printify | Print-on-demand production and shipping (fallback) | Buyer name, shipping address, order details, print file of the artwork | Artwork image only | US / EU / other facilities | Planned | DPF / SCCs |
| TAX CALCULATION PROVIDER — e.g. Stripe Tax, if adopted | Sales tax and VAT calculation | Order and address data | No | TBD | Planned | TBD |
5. Safety and moderation
| Provider | Purpose | Data | Child data | Location | Status | Transfer safeguard |
|---|---|---|---|---|---|---|
| Microsoft Azure AI Content Safety | Automated image safety screening before publication | Uploaded artwork images | Yes (artwork) | EU region CONFIRM | Planned | EU processing; Microsoft DPA |
| CSAM HASH-MATCHING / DETECTION SERVICE — applications made to Google Content Safety API and Microsoft PhotoDNA; Thorn Safer as paid fallback | Detection of known and likely child sexual abuse material | Uploaded images or their hashes | Yes (artwork) | TBD | Planned | TBD |
| National Center for Missing & Exploited Children (NCMEC) | Statutory recipient of CyberTipline reports (independent recipient, not a processor) | Reported content and associated account data, only where required by law | Possibly | US | As required by law | Legal obligation |
6. Operations
| Provider | Purpose | Data | Child data | Location | Status | Transfer safeguard |
|---|---|---|---|---|---|---|
| Sentry (Functional Software, Inc.) | Crash and error reporting for the app and servers | Technical error data with user identity, tokens and personal data stripped before sending | No (redacted) | CONFIRM — Sentry offers an EU (Germany) data region | Planned (active only when configured) | DPF / SCCs |
| Runware | AI generation of Goal badge images | Goal name and description written by the Agent | No (Agents are told not to include personal details) | CONFIRM | Planned | DPF / SCCs |
| Apple (TestFlight) | Beta app distribution and tester feedback | Tester name, email, device data, crash logs, feedback | No | US / global | Beta | Apple terms |
| Expo (EAS Build) | Building and submitting the mobile app | No user personal data | No | US | Beta | Not applicable |
7. Not used
Kidbys does not use advertising networks, data brokers, third-party analytics or attribution SDKs, or social-media tracking pixels. Product analytics are processed on our own infrastructure.
8. Changes
We will update this page, and where required notify you, before a new subprocessor begins processing personal data. Questions: [email protected].