Teylio · Terms of usePrivacy policyCompliance and safety commitmentsPublic list of subprocessorsLegal notice · Françaisעברית
Public list of subprocessors
v0.1 · 2026-09-06 · Working version drawn from Teylio's product and safety constitution; legal review in progress before access opens to families.
Principle
Each subprocessor is listed with its role, region, the data it receives and its retention. No subprocessor receives a child's name, e-mail or address; language models work on neutralised texts under a nickname, without retention or training. The list is reviewed at every addition.
| Name | Role | Region | Data | Retention |
|---|---|---|---|---|
| Supabase | Database and authentication hosting | Union européenne (Francfort) | Parent account, children's nicknames and settings, neutralised transcripts, creations, learner model | While the account exists (transcripts 90 days) |
| Vercel | Web application hosting | Union européenne / mondial (CDN) | Encrypted application traffic, technical logs without any child text | Limited technical logs |
| Anthropic (via OpenRouter) | Language models: safety, mentor, missions, evaluator | États-Unis | Child messages after personal-data neutralisation, under a nickname; never name, e-mail or address | No retention and no training requested (to be confirmed contractually for production) |
| OpenRouter | Model access gateway | États-Unis | Same content as above, in transit; data collection refused by configuration | Content collection refused by configuration (to be confirmed for production) |
| Paddle | Merchant of record: payment, VAT, invoicing | Royaume-Uni / Union européenne | Parent e-mail, country, payment method; no child data | MoR accounting obligations |
| Resend | E-mail delivery to parents | États-Unis / Union européenne | Parent e-mail, weekly reports, alerts | Limited delivery logs |