Supabase
Purpose: authentication, database and account infrastructure.
Data: account identifiers, learning state, legal records, support records and related service data.
Privacy information
SERVICE PROVIDERS
Who helps operate XYSHIMA.
These specialist providers support the consumer service. Their role and the data involved depend on the feature a user chooses.
Cloudflare
Purpose: website and API hosting, delivery and security.
Data: requests, IP/network information, application payloads and operational logs as needed to deliver the service.
Privacy information
OpenAI
Purpose: AI tutoring, generated study content, file search and related model functions.
Data: prompts, selected learning context, tutor conversations and files sent when the feature requires them.
Privacy information
PayPal
Purpose: checkout, subscriptions, payment events and refunds.
Data: payment-account information controlled by PayPal plus transaction and subscription references returned to XYSHIMA.
Privacy information
International processing
A provider may process data in more than one country. Where GDPR requires it, XYSHIMA must use an applicable adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism and assess supplementary protections. Contact support@xyshima.com for account-specific questions.
Changes
Material additions or replacements will be reflected here. This page names operational providers but does not itself replace the contracts, data-processing terms or transfer safeguards required between XYSHIMA and each provider.