Sub-processor List
LEARN-CO.DE LTD ("learn-co.de", "we", "us", "our")
Version 1.0 — Last updated 22 June 2026
We use a small number of carefully selected sub-processors to deliver the Service. Each is bound by data protection obligations no less protective than those in our Data Processing Agreement. We use the sub-processors listed here. We will give notice of material changes (additions or replacements) by updating this list, and schools may object on reasonable data protection grounds.
Current sub-processors
| Sub-processor | Service provided | Data processed | Location of processing |
|---|---|---|---|
| Google (Firebase / Firestore) | Database and data storage | All School data (accounts, educational data) | United Kingdom — Google Cloud London region (europe-west2) |
| Google (Firebase Authentication) | User authentication / sign-in | Account identifiers, authentication data | Operated by Google; may be processed outside the UK (including the United States) under appropriate safeguards (UK IDTA / SCCs) |
| Google Cloud Platform | Underlying cloud infrastructure for the above | As above | United Kingdom (London) for hosted data; otherwise under appropriate safeguards |
| Fly.io | Application hosting | Data in transit through the application; operational logs | United Kingdom — London (lhr) region |
| Stripe | Payment processing (subscriptions) | Administrator billing/contact data, transaction records (card data handled directly by Stripe) | UK / EU / US under appropriate safeguards |
| Google Workspace (Google) | Email — support correspondence and outbound transactional email (e.g. account notifications and delivery of data-export files); document handling | Recipient email / contact data and message content | UK / EEA where offered; otherwise under appropriate safeguards |
International transfers: Where any sub-processor processes data outside the UK, the transfer is protected by an appropriate safeguard recognised under UK data protection law (for example the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses).
Notice of changes
When we intend to add or replace a sub-processor, we will update this page (and where appropriate notify schools) at least 30 days in advance, giving schools the opportunity to object on reasonable data protection grounds before the change takes effect.
Contact
Questions about our sub-processors: dpo@learn-co.de