Scope of processing
This page summarizes how GoodOff processes personal data and which service providers help us do it. For people who use GoodOff with their own account, Nexobe, Inc. is the controller of their personal data. Our privacy policy at https://goodoff.co/privacy is the full description.
Data categories
We process the following categories of data:
- User account information
- Learning progress and statistics
- Flashcard content and study materials
- Usage analytics and performance data
Security measures
We implement comprehensive security measures:
- Encryption at rest and in transit
- Automated secret scanning and security review of code changes
- Access controls and authentication
- Incident response procedures
- Limited employee access on a need-to-know basis
Service providers
Our main service providers (sub-processors) are listed below. The full list, with what each one does and which data it handles, is in the Service providers section of our privacy policy.
- Supabase - Database, sign-in and file storage (US)
- DigitalOcean - API servers, background jobs, web app hosting and file storage (US)
- Cloudflare - goodoff.co hosting, network security and bot protection
- Stripe - Payment processing
- Google, OpenAI and Anthropic - AI services
Contact
For data processing inquiries:
- Email: privacy@goodoff.co