Sorin Data Processors & Subprocessors
Last updated: June 1, 2026.
How child data flows
- A child's chat text is passed through Aegis, which removes or replaces direct identifiers, before it is sent to an AI provider for a response.
- Photos and voice audio a child shares are sent to an AI provider to deliver the requested feature (for example, answering a question about a picture, or transcribing talk-to-type input).
- Uploaded photos, voice audio, and generated images are stored in private cloud storage and served to the family through short-lived access links.
- Parent payment details are handled by the payment processor and are not collected from or associated with the child.
Subprocessor list
| Processor | Purpose | Data categories processed | Children's data involved | Region |
|---|---|---|---|---|
| Google (Gemini AI) | Generate chat responses; transcribe voice; create requested content | Aegis-redacted chat text; uploaded photos; voice audio | Yes | Global (not residency-guaranteed) |
| Google Identity Services | Parent sign-in with Google (optional) | Parent account identifiers | No (parent only) | Global |
| OpenAI | Fallback chat responses when the primary AI is unavailable | Aegis-redacted chat text | Yes (text only) | United States |
| DigitalOcean | Application hosting; storage of uploaded photos, audio, and generated images | All stored service data, including child media | Yes | United States |
| Cloudflare | Content delivery, edge security, and abuse protection | Connection metadata; traffic in transit | Incidental (transit) | Global |
| Lovable | Frontend application platform and first-party operational analytics | Page/usage telemetry and web vitals (PII scrubbed) | Operational telemetry only (PII scrubbed) | United States |
| Tinybird | Analytics data store for first-party operational telemetry | Page/usage telemetry and web vitals (PII scrubbed) | Operational telemetry only (PII scrubbed) | United States |
| Resend | Transactional email to parents | Parent email address and message content | No (parent only) | United States |
| Stripe | Verifiable parental consent and subscription payment processing | Parent billing details | No (parent only) | United States |
Notes:
- Providers that handle children's data are limited by contract to processing it only to provide their service to Sorin.
- This list is current as of the "Last updated" date and may change; material changes affecting children's data will be reflected here.