| Vercel Inc. | Hosts the website and runs the app’s server code. | All app data passes through while pages load. Short-lived request logs record IP address and page address, never page content. | United States (Portland, Oregon region) | 2026-09-25 |
| Neon (Databricks, Inc.) | Stores the database: accounts, schools, classrooms, children, and records. | Everything the app stores. | United States (AWS us-west-2, Oregon) | 2026-09-25 |
| Postmark (ActiveCampaign, LLC) | Sends sign-in codes, staff and family invites, and notices that a report is ready. | Email address, name of the person inviting, school name, and a child’s first name in family emails. Also our own alerts when something breaks, which carry account ID numbers but no names or email addresses. Postmark keeps message content up to 45 days. | United States | 2026-09-25 |
| Google LLC | Optional “Continue with Google” sign-in. | Receives a sign-in request; sends us your name, email address, and profile photo address. | United States | 2026-09-25 |
| Stripe, Inc. | Takes card payments for paid plans and works out sales tax on them (Stripe Tax). Card numbers go to Stripe, never to us. | For the person paying: billing name, email address, billing address, and card details. For the account: the plan, the number of classrooms paid for, any discount code used, whether a school’s next invoice is exempt from sales tax (not its exemption certificate), an account number that links the payment to the school or family, and the account number of the person who started checkout. No children’s data. | United States | 2026-09-26 |
| Wasabi Technologies LLC | Keeps a nightly backup copy of the database with a second company, so data can be recovered even if our database provider fails. | Everything the app stores, locked (encrypted) before it leaves our systems. Wasabi holds only the locked copy and never the key to open it. Each copy is deleted after 6 days. | United States | 2026-10-03 |
| GitHub, Inc. (Microsoft) | Runs the nightly backup job, which copies the database, locks (encrypts) the copy, and sends it to Wasabi. | Everything the app stores, for the few minutes the job runs. The job’s machine is erased when it ends; nothing is kept at GitHub. | United States | 2026-10-03 |
| getem (Aprative LLC, our own company) | Measures where customers come from: which pages, links, searches, and ads bring people who sign up, start a trial, record their first lesson, and pay. Its script runs only on the public sales pages (home, pricing, the charter waitlist, and sign-in), never on signed-in pages. | For visitors to those pages: a random visitor ID kept in a cookie, pages viewed, the page or ad that sent them, and browser type. For account holders other than family members a school invites: their account number, email address, how they heard about us if they say, the school’s name and account number when they set one up or join one, and when they sign in, start a trial, record their first lesson mark, or pay (plan and amount). No children’s data, and nothing about family members a school invites. When an ad account is connected, getem tells that ad platform (Meta, TikTok, Snap, or Google Analytics) about a sign-up or payment by a visitor who came from an ad, with a one-way scrambled (hashed) email address; for visitors in Europe only after they accept advertising cookies, and never when the browser sends a Global Privacy Control signal. | United States | 2026-10-25 |
| Quo (formerly OpenPhone), OpenPhone Technologies, Inc.Not yet in use | Texts two-step sign-in codes to people who choose text messages as their second step. | The mobile number of a person who chooses text messages, and the texts we send: a 6-digit code that stops working after 10 minutes. No children’s data. Quo keeps the texts in our account while we use the service. | United States | |