Subprocessors
Last updated: July 9, 2026
Urban Algorithm LLC, which operates Flying Prep, uses the third-party service providers listed below (our "subprocessors") to operate the Services. Each entry describes what the provider does for us and the categories of data it may receive. This page supplements Section 4 of our Privacy Policy. For students enrolled through a school or organization, several analytics and advertising providers are not loaded at all, as noted in the relevant rows below.
| Subprocessor | Purpose | Data category |
|---|---|---|
| Supabase | Database, authentication, and file storage | Account profile, study and progress data, passwords (hashed by the auth system), authentication logs, and uploaded exam-score photos and voice recordings. |
| Vercel | Application hosting and edge delivery | Request data and IP addresses at the edge while serving the Services. |
| Cloudflare | Edge network and content delivery | Edge request data while routing and delivering site traffic. |
| Stripe | Payment processing for web subscriptions | Billing identity and a Stripe customer identifier. Card numbers are entered on Stripe-hosted fields and are never stored on our servers. |
| Apple | In-app purchases and Sign in with Apple | App Store transaction identifiers and receipts, and Apple-relayed sign-in identity when you use Sign in with Apple. |
| Google Analytics and Google Ads | Web analytics and advertising conversion measurement | Event names and non-identifying event parameters. We do not send names or email addresses to these services.Not loaded on student sessions (a logged-in account with an active organization seat) or on organization-flow pages such as invite, join, and organization acceptance. |
| Microsoft Clarity | Product analytics and session replay on marketing pages | Aggregated interaction data and session recordings used to understand how visitors use the marketing site.Not loaded on student sessions or on organization-flow pages, so student names and emails on those pages are not sent to this service. |
| Sentry | Application error monitoring | Error reports and diagnostic context. Session replay is used only for a sample of general sessions, with text masked and media blocked.Session replay is disabled for student sessions and on organization-flow pages; only error reporting remains active there. |
| Resend | Transactional email delivery | Recipient email addresses and the content of transactional emails (for example account, study, and organization notices). A copy of outbound mail is retained in an internal company mailbox on the flyingprep.com domain for delivery logging. |
| Inngest | Background job scheduling | Orchestrates background email, billing, and license jobs that operate over account data. |
| Affonso | Affiliate referral tracking | Affiliate referral codes on marketing pages.Loaded only on marketing pages and only when the affiliate program is enabled. Not loaded on student sessions or organization-flow pages. |
| Formspree | Contact-form handling | The name, email address, and message you submit through the contact form. |
| Anthropic and OpenAI | Educational content and audio generation | Exam and question content and text used to generate practice material and audio. Student personal information is not sent to these services. |
We may update this list as our service providers change. Questions about our subprocessors can be directed to [email protected].