Every third party we share personal data with to operate Khypri AI, and what they receive.
Last updated: August 1, 2026. We don't sell personal data, and we don't use any advertising or ad-tech sub-processors. Data is shared only with the vendors below, only to operate the platform. For the full legal detail, see our Privacy Policy (Section 5).
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| BigRock | Hosting, storage, and account/marketing email delivery | All account, academic, and technical data; email addresses for account and marketing communications | India |
As we scale, we may add Amazon Web Services (AWS) or Google Cloud as additional or replacement hosting infrastructure. We'll update this page and our Privacy Policy before that change takes effect.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| OpenAI | Generating and evaluating academic content | Academic input identified only by the child's parent-chosen display name — a child's legal name is never collected, so it's never sent here | United States |
| Google (Gemini / Vertex AI) | Generating and evaluating academic content | Academic input identified only by the child's parent-chosen display name — a child's legal name is never collected, so it's never sent here | United States |
We currently rely on these providers' published API data-use policies, which exclude API inputs from model training. No signed Data Processing Agreement is yet in place with either provider; we use their services on their standard terms.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Firebase Authentication (Google) | Parent/guardian identity verification, login, and password/credential management | The parent/guardian's email, mobile number, and authentication credentials only | United States |
Firebase is used only to authenticate the parent/guardian account holder. A child never has their own login, and no child data — display name, academic activity, or otherwise — is ever sent to Firebase (we don't collect a child's legal name in the first place). Once a parent is authenticated, all child-related data is created, stored, and processed exclusively in Khypri AI's and/or My Paper Genie's own databases (see Hosting & Email above), not in Firebase.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Razorpay | Processing subscription payments | Billing/payment details only — Khypri AI does not store full card numbers | India |
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Google Analytics (GA4) | Aggregate usage analytics on the khypri.com marketing site only | Cookie/usage data — only collected if you accept analytics cookies in the cookie banner; denied by default | United States |
Google Analytics only runs on our public marketing website, not inside the learning platform itself, and only after you actively opt in via the cookie banner. We use no advertising cookies and do not build behavioral advertising profiles.
For any question about our sub-processors or how your data is handled, contact our Data Protection Officer, Gaurav Chodnekar, at dpo@khypri.com. This page is reviewed quarterly and updated whenever a sub-processor changes.