Subprocessors

Last updated: September 17, 2026

I use a small number of service providers to run Guayaba Education. Each one processes data only on my behalf and only as needed to provide the service. Here is the complete list and what each one does.

• Cloudflare hosts the applications and the database, and transcribes teacher-uploaded exam audio. All application data passes through and rests on its infrastructure. (United States)
• Anthropic provides the AI that evaluates essays and drafts teacher activities from public sources. Essay text and the optional first name label are sent at evaluation time and are not used to train AI models. Student portal answers are not sent to Anthropic. (United States)
• Stripe processes payments. Card details go directly to Stripe; I never see or store them. Student accounts have no payment features. (United States)
• Google provides my business email, and handles Google sign-in for accounts that choose it, sending me only the account's name and email address. (United States)
• Resend delivers service emails to teachers, like account messages. Students receive no marketing or transactional email from Guayaba. (United States)
• Supadata (operated by Dumpling Software UG, Germany) provides transcripts of public YouTube videos so teachers can draft questions. It receives public video identifiers only, never any teacher or student personal data.

Embedded content is not a subprocessor: portal video activities embed YouTube in privacy-enhanced mode (youtube-nocookie.com), and reading activities link to publishers' own sites. No student account data is shared with either.

No provider on this list receives student rosters, student demographics, or student contact information beyond what is described above, because I never collect them. If this list changes, I will update this page.