Trust
Subprocessors
Draft — not yet in effect
Draft — under review. This page describes how KiteQuad is built today and is being reviewed by counsel. It isn't a binding policy yet, and the wording may change before launch.
KiteQuad keeps its list of vendors short on purpose: the fewer companies that touch data, the simpler it is to keep student data safe and to tell you exactly where it is. Two vendors run the service.
| Vendor | What they do for KiteQuad | What they handle | Where |
|---|---|---|---|
| Cloudflare | Hosting, the database, file storage, and sending adult email. | Everything KiteQuad stores: teacher accounts, classes, student nicknames, what apps save, and the app files. Email to adults only — never student data. | United States (the database and file storage are created in Cloudflare's US jurisdiction). |
| Stripe | Takes a teacher's payment if they upgrade to a paid plan. | A teacher's own billing details: email and card. Nothing about students ever goes to Stripe. | United States. |
Optional sign-in
Where a school turns it on, a teacher may sign in with Google. Google then confirms that teacher's identity and shares their email and profile picture with KiteQuad. This is an adult teacher's choice at sign-in; Google receives no student data, and sign-in with Google is off unless it's configured.
No one else
KiteQuad uses no analytics service, no advertising network, and no error-tracking service on any page a student sees. Neither KiteQuad nor any vendor trains AI on student data. Adding a vendor is a recorded decision and a change to this page, and we'll note it in the changelog before it takes effect.
Contact
Questions about our vendors, or a request for their terms, go to support@kitequad.com.