Kleveroo is built and operated by Smith Digital Ventures LLC (dba Kleveroo Games). We use third-party service providers to host, secure, operate, and improve the product. These providers maintain their own privacy, security, and compliance programs.
Kleveroo does not intentionally collect student personal information for hosted Board Battle play, and students do not need accounts to participate in hosted Board Battle games.
Not used: Kleveroo does not send prompts, uploaded files, extracted text, or generated content to Perplexity, Anthropic, advertising networks, or third-party analytics tools. Product analytics are first-party and stored in our own database.
Cloudflare
- Purpose
- Edge delivery, HTTPS termination, CDN, and protection against attack traffic.
- Data processed or shared
- IP addresses, request headers, and the URLs you request.
- May involve personal data
- Yes — IP address is treated as personal data in many jurisdictions.
- Student data intentionally shared
- No.
- Notes
- Every visitor request passes through this layer before reaching the application. It is a network and security layer, not a content store.
Supabase
- Purpose
- Database, authentication, file storage, and realtime infrastructure for live rooms.
- Data processed or shared
- Account records, boards you create, saved items, game and room records, uploaded clue images, and first-party product telemetry.
- May involve personal data
- Yes — email address, display name, and content you create.
- Student data intentionally shared
- No. Hosted Board Battle play creates no student records. Live Trivia stores only the nickname a player types in, which we do not ask to be a real name.
- Notes
- Provisioned through Kleveroo's managed backend infrastructure. Access is constrained by row-level security rules enforced by the database itself. See our security page for detail.
Google sign-in
- Purpose
- Optional identity provider, only where you choose 'Sign in with Google' instead of email and password.
- Data processed or shared
- Your email address, basic profile details, and Google account identifier.
- May involve personal data
- Yes — email address and profile details.
- Student data intentionally shared
- No.
- Notes
- Only involved if you pick this sign-in method. Accounts created with email and password never touch it.
OpenAI
- Purpose
- AI model provider for board, category, clue, and answer generation using GPT-5 family models.
- Data processed or shared
- Your prompt and any text extracted from files you upload; returns the generated board content.
- May involve personal data
- Only if you put personal information into a prompt or an uploaded file.
- Student data intentionally shared
- No — not intentionally.
- Notes
- Requests are routed through Kleveroo's managed AI gateway. Based on our current provider settings, your content is not used to train these models. If that changes we will update this page and the privacy notice.
Google AI / Gemini
- Purpose
- AI model provider for uploaded-file text extraction, clue difficulty ranking, and board metadata suggestions using Gemini family models.
- Data processed or shared
- Text from files you upload, draft clues, and board metadata; returns extracted text and suggestions.
- May involve personal data
- Only if you put personal information into a prompt or an uploaded file.
- Student data intentionally shared
- No — not intentionally.
- Notes
- Requests are routed through Kleveroo's managed AI gateway. Used for the supporting steps around generation rather than the main board draft. Same guidance applies: do not upload sensitive student records.
Stripe
- Purpose
- Payments, subscriptions, invoices, billing email, sales tax / VAT / GST, and card handling for Kleveroo+ and AI credits. Stripe is the reseller of record.
- Data processed or shared
- Billing email, payment method details, purchase amounts, and subscription status. Card numbers are entered directly into Stripe's hosted checkout.
- May involve personal data
- Yes — billing identity and payment records.
- Student data intentionally shared
- No. Students never reach a payment surface.
- Notes
- Kleveroo never receives or stores a full card number, expiry, or security code. We keep only the Stripe identifiers needed to reconcile a purchase with an account.
Lovable
- Purpose
- Current service provider for deployment management, managed operational tooling, transactional service support, and AI request routing.
- Data processed or shared
- Operational service traffic, transactional email data, and AI request routing metadata where applicable.
- May involve personal data
- Yes, where account or request data passes through operational services.
- Student data intentionally shared
- No — not intentionally. Users are instructed not to submit sensitive student information.
Kleveroo uses a small number of third-party service providers to host, secure, operate, and improve the product. Some services are provisioned through managed platform infrastructure. Vendor certifications and security programs apply to those vendors' systems and controls, not to Kleveroo as an independently certified organization.
What this list is not
This page reflects the service providers Kleveroo currently uses to operate the product. If your school, district, or company needs privacy, security, or vendor paperwork, email support@kleveroo.com and we'll review the request. Privacy and data requests can also be submitted through /data-requests.
This page reflects the providers in use as of August 30, 2026. If we add or remove a provider that handles personal data, we'll update this page and the privacy notice.
Related: Trust Center, Security, Privacy Notice, Student Privacy.