Skip to content

Back to the IT review page

Subprocessors

The third parties that process data on our behalf, what each one does, and the data it receives.

  • Amazon Web Services (AWS)

    Purpose
    Cloud infrastructure — hosting, compute, storage, databases, networking, monitoring, email delivery (SES)
    Data Processed
    All Personal Data (at rest and in transit)
    Location
    US (us-east-1, N. Virginia)

  • Google Cloud

    Purpose
    Natural Language API (tokenization, syntax analysis), Speech-to-Text, Text-to-Speech
    Data Processed
    User message text, user audio recordings, text for speech synthesis
    Location
    US/Global

  • OpenAI

    Purpose
    LLM inference (grammar checking, translation, learning activities, bot chat responses), image generation (DALL-E), speech-to-text (Whisper), text embeddings, content moderation, model fine-tuning
    Data Processed
    User message text, user audio recordings, activity images, training data derived from user interactions
    Location
    US

  • Anthropic

    Purpose
    LLM inference for learning features (failover/alternative to OpenAI)
    Data Processed
    User message text
    Location
    US

  • Deepgram

    Purpose
    Speech-to-text transcription
    Data Processed
    User audio recordings
    Location
    US

  • Soniox

    Purpose
    Speech-to-text transcription
    Data Processed
    User audio recordings
    Location
    US

  • Google Analytics

    Purpose
    App and website analytics (the app reports through Google's Firebase SDK)
    Data Processed
    In the app: Matrix user ID, app instance ID, subscription status, user type, languages and CEFR level, in-app events (such as sign-up, login, message sent, activity started), screen views. On the website: visitor IP addresses (anonymized), cookies, page views, custom events (no signed-in user data)
    Location
    US/Global

  • Google Firebase Cloud Messaging (FCM)

    Purpose
    Push notification delivery
    Data Processed
    Device push tokens, app instance ID, notification content
    Location
    US/Global

  • Stripe

    Purpose
    Payment processing
    Data Processed
    Subscription and payment data (Processor does not store card details)
    Location
    US

  • Sentry

    Purpose
    Error monitoring and performance tracking
    Data Processed
    Error context (may include user IDs, request metadata)
    Location
    US