TRANSPARENCY
Subprocessors
The specialised services Kito uses to operate securely and reliably.
Current provider list
SupabaseUnited States / selected project region
PurposeAuthentication, PostgreSQL database, encrypted storage and Edge Functions.
DataParent and child profile data, learning content, files and operational records.
Google Cloud Document AIUnited States (Kito processor region)
PurposeOCR and text extraction from parent-uploaded material.
DataUploaded document content and request metadata.
AnthropicUnited States
PurposeSelective visual extraction plus structured generation and quality processing for grounded learning questions.
DataExtracted educational text, selected pages flagged for formulas, tables, charts or diagrams, and generation instructions; parent contact details are not intentionally included.
RevenueCatUnited States
PurposeSubscription entitlement and purchase-state management.
DataPseudonymous app user ID, product, entitlement and store transaction metadata.
ExpoUnited States
PurposeApp build and child-device push-notification delivery.
DataBuild metadata and, only after parent opt-in, a device push token and reminder payload.
Mobile app storesGlobal
PurposeApp distribution, purchases and platform services.
DataStore account, purchase and device/platform data under each store's own terms.
VercelGlobal edge network
PurposeHosting and security delivery for kito.education.
DataWebsite request data such as IP address, user agent and security logs.
Changes
We evaluate providers for necessity, security, privacy and contractual safeguards. We update this list before a provider begins materially different processing and notify parents where law or a consent choice requires it.