Nutmeg

Nutmeg

Service Providers, Subprocessors and Other Recipients

Effective 2026-09-13 · Version 2026-09-13

The groups below describe each recipient’s role for the specific Nutmeg service. “Conditional” means the recipient receives data only when the related feature is used.

Processors and subprocessors

Supabase

Authentication, application database and uploaded-media storage

Data
Account, studio, lesson, message, uploaded-media and billing records
Role
Processor for hosted authentication, application data and uploaded media
Status
Active
Region
European Union for primary project data; support, edge services and subprocessors may operate elsewhere
Transfer basis
2021 Standard Contractual Clauses under Supabase's DPA where required
Last updated
2026-09-11
Provider documents
PrivacyDPA

Vercel

Hosting, server execution and operational logs

Data
Requests, IP addresses, account content in transit and operational logs
Role
Processor for hosted customer data; separate controller for its own account and service data
Status
Active
Region
United States for server processing, with global edge delivery and subprocessors
Transfer basis
2021 Standard Contractual Clauses under Vercel's DPA where required
Last updated
2026-09-10
Provider documents
PrivacyDPA

Resend

Authentication and transactional email

Data
Email addresses, names, delivery metadata and message content
Role
Processor for Nutmeg email content; separate controller for its own account and usage data
Status
Active
Region
Customer data stored in the United States; selected sending region affects routing rather than storage
Transfer basis
2021 Standard Contractual Clauses under Resend's DPA where required
Last updated
2026-09-10
Provider documents
PrivacyDPA

Cloudflare

Turnstile bot protection and inbound email routing

Data
Connection, device and challenge data; routed-email metadata and content
Role
Processor for covered customer content, with separate controller activities for Cloudflare service data
Status
Active
Region
Global network, including processing in the United States
Transfer basis
EU-US Data Privacy Framework and EU Standard Contractual Clauses under Cloudflare's DPA where applicable
Last updated
2026-09-08
Provider documents
PrivacyDPA

Sentry

Error and performance monitoring

Data
Scrubbed error, device, route and technical diagnostic data
Role
Processor for error-monitoring data
Status
Active
Region
United States service region
Transfer basis
Accepted Sentry DPA; EU-US Data Privacy Framework and 2021 Standard Contractual Clauses where applicable
Last updated
2026-09-11
Provider documents
PrivacyDPA

bunny.net

Video processing, storage and delivery

Data
User-uploaded video and playback/delivery metadata
Role
Processor for uploaded video and delivery telemetry
Status
Active
Region
Primary storage in Frankfurt, Germany; replication in Los Angeles, New York and Singapore; global CDN delivery
Transfer basis
Accepted Article 28 DPA with BunnyWay d.o.o. in Slovenia; under its DPA and applicable data-protection law, Bunny is responsible for appropriate safeguards when using a non-EEA subprocessor
Last updated
2026-09-11
Provider documents
PrivacyDPA

PostHog

Optional product analytics for public visitors and teachers after opt-in; never student or parent accounts

Data
Consent-gated pseudonymous usage and device events
Role
Processor when optional analytics is enabled
Status
Conditional
Region
United States service configuration
Transfer basis
Executed PostHog DPA incorporating the 2021 Standard Contractual Clauses (Module 2) and EU-US Data Privacy Framework where applicable
Last updated
2026-09-13
Provider documents
PrivacyDPA

Independent controllers and mixed-role recipients

Stripe

Connected-account and lesson-payment flow testing in sandbox mode; no real-money payments

Data
Identity, account, simulated transaction and payment-method data
Role
Processor or independent controller depending on the Stripe function
Status
Active
Region
Global infrastructure operated by Stripe and its providers
Transfer basis
2021 Standard Contractual Clauses and other safeguards under Stripe's applicable data-protection terms
Last updated
2026-09-10
Provider documents
PrivacyDPA

Google

Google sign-in, teacher-connected Calendar and the Gmail support mailbox

Data
Account identity, selected calendar events, and support-email metadata/content
Role
Independent or mixed role depending on sign-in, Calendar and consumer Gmail activity
Status
Active
Region
Global infrastructure; OAuth and Calendar API processing locations are not selected by Nutmeg
Transfer basis
International-transfer safeguards described in Google's privacy framework
Last updated
2026-09-10
Provider documents
Privacy

Direct browser recipients

DiceBear

Optional preset avatar images requested directly by the browser

Data
IP address, browser headers and requested avatar URL
Role
Direct browser recipient, not listed as a Nutmeg subprocessor
Status
Conditional
Region
According to DiceBear's own hosting and delivery arrangements
Transfer basis
The provider's own privacy terms apply to the direct request
Last updated
2026-09-08
Provider documents
Privacy

YouTube

Teacher-added YouTube video previews, thumbnails and playback

Data
IP address, browser headers, requested content and provider-side player data
Role
Direct browser recipient for teacher-selected external content
Status
Conditional
Region
According to Google's global infrastructure
Transfer basis
Google's own privacy and transfer terms apply
Last updated
2026-09-10
Provider documents
Privacy

Vimeo

Teacher-added Vimeo video previews, thumbnails and playback

Data
IP address, browser headers, requested content and provider-side player data
Role
Direct browser recipient for teacher-selected external content
Status
Conditional
Region
According to Vimeo's global infrastructure
Transfer basis
Vimeo's own privacy and transfer terms apply
Last updated
2026-09-10
Provider documents
Privacy

Dormant services

Proton

Reserved for possible delivery of account-export files

Data
None — no beta account export is delivered through Proton
Role
No current processing role
Status
Dormant
Region
Not applicable while dormant
Transfer basis
Not applicable while dormant
Last updated
2026-09-08
Provider documents
Privacy

Anthropic

Dormant optional AI-enrichment code

Data
None — AI enrichment is disabled
Role
No current processing role
Status
Dormant
Region
Not applicable while dormant
Transfer basis
Not applicable while dormant
Last updated
2026-09-08
Provider documents
Privacy