Urban Mechanics LTD uses the following third-party sub-processors to operate the KidsHustle platform. Each sub-processor is bound by a Data Processing Agreement (DPA) or equivalent contractual safeguards. This list is updated whenever a sub-processor is added, removed, or changed. For questions, contact support@kidshustle.app.
| Sub-Processor | Purpose | Data Categories | Location | Transfer Safeguards |
|---|---|---|---|---|
| Intercom R&D Unlimited CompanyCustomer Support | Customer support, AI support agent (Fin) | Name, email, user ID, support conversation content, device metadata | US | SCCs |
| Stripe, Inc.Payment & Identity | Payment processing, escrow, payouts, identity verification | Name, email, date of birth, payment details, identity documents | US / EEA | SCCs |
| Google Cloud PlatformInfrastructure | Application hosting and database infrastructure | All platform data (encrypted at rest and in transit) | EU (Belgium, Finland) | N/A (EU) |
| Google Gemini AIContent Moderation | AI-powered moderation of job listing content | Job description text and metadata | EU | N/A (EU) |
| SightengineImage Moderation | Automated image moderation for uploaded images | Images (not retained after processing) | Multi-region | DPA |
| GetStream.ioMessaging | In-app chat messaging and message moderation | Chat messages (text and images), user identifiers | EU | N/A (EU) |
| Elasticsearch ServerlessInfrastructure | Search functionality | EU | N/A (EU) | |
| customer.ioMarketing & Communications | Customer retention, marketing | EU | N/A (EU) | |
| PostHogAnalytics | Product analytics, session recordings, feature flags | Anonymised session data, device info, app usage patterns | EU | N/A (EU) |
| Postmark (ActiveCampaign)Email Delivery | Transactional email delivery | Email addresses, notification content | US | SCCs |
| Apple Push Notification ServiceNotifications | Push notifications to iOS devices | Device tokens, notification content | US | Apple DPA |
Where data is transferred outside the UK/EU, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter V, including the UK International Data Transfer Agreement (IDTA) where applicable.
All sub-processors are contractually required to process data only on our documented instructions and to implement appropriate technical and organisational security measures.
We do not sell personal data to any third party. No sub-processor listed here uses KidsHustle user data for their own purposes, including advertising or marketing.
This list is updated whenever a sub-processor is added, removed, or changed. The date at the top of this page reflects the most recent update. We will notify users of material changes in accordance with our Privacy Policy.