Last updated: May 24, 2026
Olik Split engages a small number of third-party providers ("sub-processors") to deliver core product functionality such as authentication, push notifications, crash reporting, AI receipt scanning, and subscription billing. Each provider is bound by its own privacy commitments and contracts. We review this list as our infrastructure evolves and will update it whenever a sub-processor is added, removed, or replaced. For full context on what data we collect and why, see our Privacy Policy.
| Sub-processor | Purpose | Data shared | Region |
|---|---|---|---|
| Firebase Cloud Messaging (Google LLC) | Push notification delivery on Android. | Device FCM token, notification payload (title, body). | Global (Google infrastructure, primarily US/EU). |
| Firebase Analytics (Google LLC) | Anonymous, aggregate product analytics (screen views, feature usage). | Per-install identifier, screen/event names, country, locale. No personal identifiers. | Global (Google infrastructure). |
| Firebase Crashlytics (Google LLC) | Crash reporting on Android. | Stack traces, device model, OS version, app build. No expense or account data. | Global (Google infrastructure). |
| Firebase Remote Config (Google LLC) | Server-side feature flags and configuration delivery. | Read-only on the client. No user data is uploaded. | Global (Google infrastructure). |
| Google AdMob (Google LLC) | Banner, native, interstitial, and rewarded ads on the free tier. | Advertising identifier (per OS settings), ad event metadata, coarse location signals from IP. | Global (Google infrastructure). |
| Anthropic, PBC | Server-side AI receipt scanning (premium tier and rewarded-ad unlocks). | Receipt image and resulting line items. No account email, name, or other personal identifiers in the prompt. Not used to train models per API terms. | United States. |
| Cloudflare R2 (Cloudflare, Inc.) | Encrypted-in-transit storage for receipt images uploaded for AI scanning. | Receipt image bytes, signed-URL access only. Images are deleted shortly after the OCR job completes. | Global edge network (no fixed region; data deleted within hours). |
| Google Play Billing (Google LLC) | Premium subscription billing on Android. | Platform-issued purchase token, entitlement state. We never see your payment instrument. | Global (Google infrastructure). |
| Apple StoreKit (Apple Inc.) | Premium subscription billing on iOS and macOS. | Platform-issued purchase token, entitlement state. We never see your payment instrument. | Global (Apple infrastructure). |
| Google ML Kit (Google LLC) | On-device OCR for free non-AI receipt scans on Android. | None. Images are processed locally and never sent to Google cloud services. | On-device (no transfer). |
| Apple Vision (Apple Inc.) | On-device OCR for free non-AI receipt scans on iOS. | None. Images are processed locally and never sent to Apple cloud services. | On-device (no transfer). |
Our application servers and PostgreSQL database run on industry-standard managed hosting platforms. Database backups, TLS termination, and request routing are handled by these providers as part of their managed services. We do not name specific hosting vendors here for operational-security reasons, but we will disclose them under NDA on request to enterprise customers.
If we engage a new sub-processor or replace an existing one, we will update this page. Material changes are also reflected in the Privacy Policy. For questions, contact support@oliksplit.app.