Legal
Service Providers
Last updated: July 26, 2026
COPPA requires us to tell you every company that handles information through Rusty and why. This is the complete list.
Each of these companies processes information on our instructions only, under a contract that requires them to protect it. None of them is permitted to sell your child’s information or use it for their own advertising. You can raise a question about any of them with us at privacy@userusty.com and we will respond about all of them.
1.
Providers That Can Receive a Child's Information
| Company | What it does for Rusty | What it receives | Where |
|---|---|---|---|
| Google LLC | Gemini AI models on Google Cloud — understands the child's speech, generates Rusty's spoken reply, and helps notice safety concerns | Live speech during a session; the name Rusty uses, age, grade; interests only if personalization is on | United States |
| Supabase, Inc. | Database, authentication, file storage, and the server functions that run Rusty | Family account, child profiles, learning records, consent and verification records | United States |
| Apple Inc. | App distribution, Sign in with Apple, and payment processing | Purchase and receipt data; the identifier and email you allow Apple to share. No child learning data. | United States |
2.
Providers That Only Handle Adult Information
| Company | What it does for Rusty | What it receives | Where |
|---|---|---|---|
| Epic Games, Inc. | Kids Web Services — verifies that you are an adult before Rusty collects anything about a child | Your email address, coarse region, and a random reference code. No information about your child. | United States |
| Google LLC | Sign in with Google, for the parent account only | The identifier and email you allow Google to share | United States |
| RevenueCat, Inc. | Manages family subscription status and entitlements | A pseudonymous account identifier and subscription state. No child learning data. | United States |
| Resend (Plus Five Five, Inc.) | Sends account emails to parents, such as sign-in confirmations | Parent email address and the message content | United States |
3.
What We Do Not Use
Rusty has no advertising networks, no advertising or attribution SDKs, no social-media plug-ins, and no third-party analytics in the child experience. There is no behavioral-advertising partner of any kind, because Rusty does not run ads.
4.
Changes to This List
If we add a provider that can receive a child’s personal information, we will update this page. If the change is material to what we collect, use, or disclose, we will also send you a new direct notice and ask for your consent again, as described in our Privacy Policy.