Every third party we share personal data with to operate Khypri AI, and what they receive.
Last updated: September 20, 2026. We don't sell personal data, and we don't use any advertising or ad-tech sub-processors. Data is shared only with the vendors below, only to operate the platform. For the full legal detail, see our Privacy Policy (Section 5).
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| BigRock | Hosting, storage, and account/marketing email delivery | All account, academic, and technical data; email addresses for account and marketing communications | India |
As we scale, we may add Amazon Web Services (AWS) or Google Cloud as additional or replacement hosting infrastructure. We'll update this page and our Privacy Policy before that change takes effect.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| OpenAI | Generating and evaluating academic content | Academic input identified only by the child's parent-chosen display name — a child's legal name is never collected, so it's never sent here | United States |
| Google (Gemini) | Generating and evaluating academic content, and writing the short safety summaries sent to parents | Academic input identified only by the child's parent-chosen display name — a child's legal name is never collected, so it's never sent here | United States |
We process data with these providers under their standard enterprise data processing addenda and published API privacy commitments, which strictly exclude API inputs from model training.
Google (Gemini) is also used to write the short, one-to-two-sentence summary of a serious safety concern that is sent to a parent (see Section 4.3 of our Privacy Policy). For that purpose it receives the child’s recent messages to the AI tutor and the tutor’s replies, identified only by the child’s display name.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Firebase Authentication (Google) | Parent/guardian identity verification, login, and password/credential management | The parent/guardian's email, mobile number, and authentication credentials only | United States |
Firebase is used only to authenticate the parent/guardian account holder. A child never has their own login, and no child data — display name, academic activity, or otherwise — is ever sent to Firebase (we don't collect a child's legal name in the first place). Once a parent is authenticated, all child-related data is created, stored, and processed exclusively in Khypri AI's and/or My Paper Genie's own databases (see Hosting & Email above), not in Firebase.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Delivering one-time passcodes, account and security alerts, and child-safety alerts to the parent's WhatsApp | The parent's mobile number, the content of the message, and delivery status. Nothing is sent to a child | Outside India (Meta operates servers in several countries) |
Messages are sent only to the parent/guardian's number, under the required “Essential alerts” consent (and, for progress updates, only if the parent has opted in). We use WhatsApp on Meta's standard terms, and Meta's own WhatsApp terms and privacy policy apply to the parent's use of WhatsApp.
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Razorpay | Processing subscription payments | Billing/payment details only — Khypri AI does not store full card numbers | India |
| Sub-processor | Purpose | Data received | Location |
|---|---|---|---|
| Google Analytics (GA4) | Aggregate usage analytics on the khypri.com marketing site only | Cookie/usage data — only collected if you accept analytics cookies in the cookie banner; denied by default | United States |
Google Analytics only runs on our public marketing website, not inside the learning platform itself, and only after you actively opt in via the cookie banner. We use no advertising cookies and do not build behavioral advertising profiles.
For any question about our sub-processors or how your data is handled, contact our Data Protection Officer, Debasmita Maharana, at dpo@khypri.com. This page is reviewed quarterly and updated whenever a sub-processor changes.