Trust Centre / Service providers
Service providers (sub-processors)Who helps us run Ponder.
The companies that host or process information for Ponder, what each one does, what information is involved and where it is processed.
Providers in use
Ponder’s main database, file storage and sign-in service is hosted in Sydney, Australia. We share with each provider only what it needs to do its job, under contract. We do not sell personal information.
| Provider | What it does for Ponder | Information involved | Where it is processed | Status |
|---|---|---|---|---|
| Supabase | Database, private file storage and sign-in | All account, family, school and learning records | Sydney, Australia (support staff may access from the USA) | Active |
| Vercel | Website hosting, the server functions that talk to the AI, voice, email and payment providers, and cookieless visit counts (Vercel Web Analytics) | Technical request data (IP address, browser, pages, country); content passing through Ponder’s server | Global edge network; server functions in Sydney, Australia | Active |
| Anthropic (Claude) | AI answers in Ask Ponder, hints in the Learn space, suggested learning plans and report-card reading | Questions and recent chat turns; de-identified learner profiles for plans; report cards (Ponder staff testing only) | USA | Active |
| NVIDIA | Speech recognition: turns spoken questions into text | Voice recordings of up to 30 seconds (not kept by Ponder) | USA [to be confirmed] | Active when configured |
| HeyGen | Ponder’s spoken voice (text to speech) | The text of Ponder’s own answers, hints and feedback only | USA | Active when configured |
| Resend (through Amazon SES) | Account, invitation and launch-list emails | Recipient email address, first name where used, and the email’s content | USA; emails are sent from Tokyo, Japan | Active |
| “Continue with Google” sign-in; web fonts on some pages | Sign-in: name, email and Google profile ID. Fonts: IP address and browser details | USA and other countries | Active |
Built but switched off
These providers are wired into Ponder’s code but are not switched on. We will update this list, and the Privacy Policy, before switching any of them on.
| Provider | What it would do | Information involved | Where it would be processed | Status |
|---|---|---|---|---|
| Stripe | Subscriptions and card payments | Billing and card details (held by Stripe; Ponder never stores card numbers) | Australia, USA and Ireland | Off |
| OpenAI | Turning a headshot into a cartoon-style photo avatar | One cropped face photo per request, no name or account details | USA [to be confirmed] | Off |
| HeyGen LiveAvatar | Ponder’s live talking avatar | The text of Ponder’s own answers; a short-lived video session | USA | Off |
| Microsoft | “Continue with Microsoft” sign-in | Name and email | Global | Off |
Ponder’s own marketing
Ponder uses Blotato and HeyGen to prepare and publish its own social media posts and videos. No learner, family or school information is sent to them. Ponder’s source code is hosted on GitHub; it contains no customer information.
Changes to this list
We update this page before a new provider starts handling personal information. Schools that subscribe get at least 30 days’ notice of a new provider that will process their records, as set out in the School and Organisation Terms. Questions: privacy@ponderlearning.com.