We share personal data with the following categories of third-party service providers, strictly for the purposes described in this Privacy Policy:

Supabase (Supabase Inc.): Authentication, database hosting, and file storage. Your account data, learning records, and uploaded content are stored on Supabase-managed infrastructure.
Stripe (Stripe Payments Europe, Ltd.): Payment processing. Stripe receives your payment details directly during checkout. Stripe's processing of your data is governed by Stripe's own privacy policy and applicable data processing agreements.
Resend (Resend, Inc.): Transactional email delivery. Your email address is shared with Resend for the purpose of sending account-related communications such as email verification, password resets, and service notifications.
Google Cloud / Gemini (Google LLC): AI-powered grading and feedback. User-submitted content (essay images, audio recordings) is transmitted to Google's AI services for processing. Google's use of this data is governed by their data processing terms and the Google Cloud Terms of Service.
Vercel (Vercel Inc.): Application hosting and content delivery network services.

We do not sell, rent, lease, or trade your personal data to third parties for their marketing or advertising purposes.

We may disclose your personal data if required to do so by law, regulation, legal process, or enforceable governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others, or to detect and prevent fraud or security incidents.