How KiwiBee uses third-party APIs

Last updated: 2026-05-27

KiwiBee is a free teacher-resources platform. To keep the worksheets, classroom tools, and AI generators free, we use a small number of third-party APIs for content distribution, payments, and email. This page documents each integration in detail so that platform partners (Pinterest, Stripe, Google, Resend, Supabase) and our own users can verify what we send and receive.

Pinterest API

We use the Pinterest API (v5) to automatically publish free worksheet pins to KiwiBee-owned Pinterest boards so that teachers can discover our resources directly from Pinterest search.

Data we send

• Worksheet title (e.g., "Addition Within 20 — Grade 1")
• Worksheet description (a short summary the admin wrote on upload)
• Preview image URL (publicly hosted on our Supabase Storage CDN)
• Destination link back to the worksheet detail page on kiwibee.io
• Subject + grade tags, used only to choose the right destination board

Data we receive

• Pin ID and board ID, stored only so we can audit what we've published
• API rate-limit headers (standard)

Impact on teachers

Teachers don't connect their own Pinterest accounts to KiwiBee. The integration runs against KiwiBee-owned Pinterest boards only — no user-level Pinterest access, no profile reads, no follower lists, no impersonation.

Opt-out

Worksheets uploaded by KiwiBee admin only get pinned when an admin chooses to. Community-uploaded resources are never auto-pinned. If you'd like a specific KiwiBee worksheet removed from Pinterest, email us at hello@kiwibee.io and we'll delete the pin within 7 days.

OAuth scopes: OAuth scopes requested: pins:read, pins:write, boards:read. We do not request user_accounts:read, user_followers:read, or any private board scopes.

Stripe API

We use the Stripe API to process the optional $5/month upgrade that unlocks unlimited worksheet downloads. Stripe stores and processes payment information; KiwiBee never sees raw card data.

Data we send

• Teacher's email address (to attach the Stripe customer record)
• Subscription plan ID (we sell only one price: $5/month)
• A Stripe-issued customer ID, stored on the teacher's KiwiBee profile

Data we receive

• Subscription status (active, past_due, canceled)
• Webhook events when status changes
• Receipts and invoices, sent directly to the teacher by Stripe

Impact on teachers

Stripe is PCI-DSS compliant and handles all sensitive payment data. KiwiBee never sees or stores card numbers, CVCs, or bank details. Teachers manage their subscription (update card, cancel) entirely inside Stripe's Customer Portal.

Google OAuth (Supabase Auth provider)

If a teacher chooses "Sign in with Google" instead of email magic link, we use Google OAuth via Supabase Auth to verify their identity.

Data we send

• Standard OAuth challenge (no KiwiBee user data)

Data we receive

• Google account email + display name + avatar URL
• A stable Google user ID, used only to recognize the teacher on return visits

Impact on teachers

We never receive contacts, calendars, Drive contents, or any other Google data — only the basic OpenID profile. Sign-in with Google is optional; the email magic-link path needs no Google data at all.

Resend API (transactional email)

We use Resend to deliver transactional emails: magic-link sign-in codes, account confirmations, payment receipts, and subscription notifications. Resend acts as our SMTP relay.

Data we send

• Recipient email address
• Email subject + body (plain-text and HTML)

Data we receive

• Delivery status (sent, bounced, opened — when tracked)

Impact on teachers

Resend processes only the email content we send, never inbound mail or address books. Teachers can unsubscribe from any marketing email; transactional sign-in / billing emails are sent only in response to their own actions.

Supabase (auth, storage, database)

Supabase hosts our teacher accounts, worksheet downloads, and AI generation history. All data lives in our own dedicated Supabase project.

Data we send

• Teacher profile (email, country, grade levels taught, subjects)
• Download records (worksheet ID, timestamp) for quota enforcement
• AI generation records (the prompts and outputs you create)

Impact on teachers

Teachers can request export or deletion of all their data at hello@kiwibee.io. Account deletion cascades to all downloads, AI generations, and profile records.

Questions or data requests

If you have any question about how we use these APIs, or want to request access, export, correction, or deletion of your data, contact us at hello@kiwibee.io.