Sorin Data Processors & Subprocessors
Last updated: June 1, 2026.
How child data flows
- A child's chat text is passed through Privacy Guard, which removes or replaces direct identifiers, before it is sent to an AI provider for a response.
- Photos and voice audio a child shares are sent to an AI provider to deliver the requested feature (for example, answering a question about a picture, or transcribing talk-to-type input).
- Uploaded photos, voice audio, and generated images are stored in private cloud storage and served to the family through short-lived access links.
- Parent payment details are handled by the payment processor and are not collected from or associated with the child.
Subprocessor list
| Processor | Purpose | Data categories processed | Children's data involved | Region |
|---|---|---|---|---|
| Google (Gemini AI) | Generate chat responses; transcribe voice; create requested content | Privacy Guard-redacted chat text; uploaded photos; voice audio | Yes | Global (not residency-guaranteed) |
| Google Identity Services | Parent sign-in with Google (optional) | Parent account identifiers | No (parent only) | Global |
| OpenAI | Fallback chat responses when the primary AI is unavailable | Privacy Guard-redacted chat text | Yes (text only) | United States |
| DigitalOcean | Application hosting; storage of uploaded photos, audio, and generated images | All stored service data, including child media | Yes | United States |
| Cloudflare | Content delivery, edge security, and abuse protection | Connection metadata; traffic in transit | Incidental (transit) | Global |
| Lovable | Frontend application platform and first-party operational analytics | Page/usage telemetry and web vitals (PII scrubbed) | Operational telemetry only (PII scrubbed) | United States |
| Tinybird | Analytics data store for first-party operational telemetry | Page/usage telemetry and web vitals (PII scrubbed) | Operational telemetry only (PII scrubbed) | United States |
| Resend | Transactional email to parents | Parent email address and message content | No (parent only) | United States |
| Stripe | Verifiable parental consent and subscription payment processing (web / US link-out) | Parent billing details | No (parent only) | United States |
| RevenueCat | In-app purchase entitlement verification (App Store / Google Play) | Parent account id, store product / entitlement status | No (parent only) | United States |
| Apple App Store | Native iOS subscription billing where used | Parent App Store purchase records | No (parent only) | Varies by storefront |
| Google Play | Native Android subscription billing where used | Parent Play purchase records | No (parent only) | Varies by storefront |
Notes:
- Providers that handle children's data are limited by contract to processing it only to provide their service to Sorin.
- This list is current as of the "Last updated" date and may change; material changes affecting children's data will be reflected here.