Who we use — vendor & processor transparency
Every third party any Erebos Lab app shares data with, in one place.
Each app’s privacy page already lists the processors it shares data with, sourced from the same `thirdParties` array that app’s data-safety table is generated from — never guessed, never copied from a generic vendor list. This page simply aggregates all 66 distinct processors declared across 43 apps into one canonical, cross-linked reference.
Items marked “unverified” are placeholders we have not yet confirmed and named — they render with a visible badge on the per-app privacy page too, so nothing is silently treated as fact before it is checked.
| Processor | Purpose | Used by | # apps |
|---|---|---|---|
| RevenueCat | Subscription and Premium entitlement state · Subscription and entitlement state · Optional “Huddle Pro” subscription billing (disabled by default) · Optional subscription billing via Apple/Google · Subscription billing via Apple/Google in-app purchases · In-app purchases and entitlements via Apple/Google · Optional “Cipher Pro” in-app purchase and subscription state · Optional CalGym Pro purchase and subscription status · Optional Pro subscription and entitlement state · Optional “Splits Pro” subscription and entitlement state · Premium subscription and entitlement state · Optional subscription and entitlement management via Apple/Google in-app purchases · In-app purchases, Season Pass subscription and entitlements via Apple/Google · In-app purchases, the Season Pass and entitlements via Apple/Google · Optional EcoMoney Plus subscription and entitlement state | KPSS Çalış — Lisans, KPSS Çalış — Önlisans, KPSS Çalış — Ortaöğretim, ALES Çalış, YDS Çalış, TYT Çalış, AYT Çalış, LGS Çalış, DGS Çalış, TUS Çalış, YDT Çalış, ÖABT Çalış, PMYO Çalış, EKPSS Çalış, Ehliyet Çalış, GMAT, GRE, CalDesk AI, Bump, Huddle, Aether Wallet, Echo, Aqua Sort: Water Color Puzzle, Cipher, CalGym, Better Notes, Splits, RunMap, Calc+, Fast Reader, Cube Blast: Block Puzzle, Color Rush: Block Sort, Hexa Stack: Color Sort, Screw Out: Pin Puzzle, Pixel Rush: Color Shooter, FLOWBLAST: Pixel Picture Blast, EcoMoney | 37 |
| Apple App Store | Subscription billing and receipts · In-app purchase billing and receipts · Optional CalGym Pro billing and receipts · Optional EcoMoney Plus billing and receipts | KPSS Çalış — Lisans, KPSS Çalış — Önlisans, KPSS Çalış — Ortaöğretim, ALES Çalış, YDS Çalış, TYT Çalış, AYT Çalış, LGS Çalış, DGS Çalış, TUS Çalış, YDT Çalış, ÖABT Çalış, PMYO Çalış, EKPSS Çalış, Ehliyet Çalış, GMAT, GRE, CalDesk AI, Bump, Cipher, CalGym, Better Notes, Splits, Fast Reader, EcoMoney | 25 |
| Google Play | Subscription billing and receipts · In-app purchase billing and receipts · Optional EcoMoney Plus billing and receipts | KPSS Çalış — Lisans, KPSS Çalış — Önlisans, KPSS Çalış — Ortaöğretim, ALES Çalış, YDS Çalış, TYT Çalış, AYT Çalış, LGS Çalış, DGS Çalış, TUS Çalış, YDT Çalış, ÖABT Çalış, PMYO Çalış, EKPSS Çalış, Ehliyet Çalış, GMAT, GRE, CalDesk AI, Bump, Cipher, Better Notes, Splits, Fast Reader, EcoMoney | 24 |
| exam-api (first-party — Cloudflare Workers + D1 at exam-api.yokharita.com) | Optional account, authentication, and cross-device progress sync — only when you sign in | KPSS Çalış — Lisans, KPSS Çalış — Önlisans, KPSS Çalış — Ortaöğretim, ALES Çalış, YDS Çalış, TYT Çalış, AYT Çalış, LGS Çalış, DGS Çalış, TUS Çalış, YDT Çalış, ÖABT Çalış, PMYO Çalış, EKPSS Çalış, Ehliyet Çalış, GMAT, GRE | 17 |
| Google AdMob | Advertising, only when you consent to tracking · Consent-gated free-tier advertising and ad measurement · Advertising, only in versions where ads are enabled and you consent · Rewarded and interstitial ads in the free version, after consent · Consent-gated free-tier advertising; Cipher Pro removes ads · Consent-gated free-tier advertising and ad measurement; removed by CalGym Pro · Non-personalized free-tier advertising, only after you consent; removed by Splits Pro · Non-personalized free-tier advertising, only after you consent · Advertising, only when you consent to tracking (ATT); removed by Pro · Non-personalized rewarded and interstitial ads in the free version, after consent | Bump, Aether Wallet, Comet Lanes, Aqua Sort: Water Color Puzzle, Cipher, CalGym, Splits, Calc+, Fast Reader, Cube Blast: Block Puzzle, Color Rush: Block Sort, Hexa Stack: Color Sort, Screw Out: Pin Puzzle, Pixel Rush: Color Shooter, FLOWBLAST: Pixel Picture Blast | 15 |
| Supabase | Application database, authentication, storage, and edge functions · Application database, authentication, storage, and real-time messaging · Sign-in and optional account data (self-hostable) · Optional cloud sync and edge functions that hold vendor API keys; the app degrades to offline states without it · Leaderboards, profiles, and self-hosted analytics sink · Optional cloud sync, profiles, and leaderboard (the app runs fully offline without it) · Optional account, authentication (email + Apple/Google sign-in), and notes cloud sync · Optional account and authentication (email + Apple/Google sign-in) · Optional account (email/password and Apple/Google sign-in) and cloud sync of vault content; used only when you enable cloud sync on the paid tier. Vault content is stored in Postgres and a private Storage bucket. | Bump, Side Quest, Huddle, Aether Wallet, Comet Lanes, Cipher, Better Notes, Splits, Calc+, Fast Reader | 10 |
| Apple | Optional “Sign in with Apple” · Optional “Sign in with Apple” for Community · Sign in with Apple, and Apple Health if you allow it | Bump, Side Quest, Cipher, CalGym, Better Notes, Splits, RunMap, Calc+, Fast Reader | 9 |
| Optional “Sign in with Google” · Optional “Sign in with Google” for Community · Sign in with Google | Bump, Side Quest, CalGym, Better Notes, Splits, RunMap, Calc+, Fast Reader | 8 | |
| Expo | Push notification delivery (via Apple/Google) · Optional push notification delivery · Push notification delivery (via Apple/Google) and OTA updates · Delivery of push notifications you turn on | CalDesk AI, Bump, Side Quest, Aether Wallet, Echo, Cipher, RunMap | 7 |
| Google User Messaging Platform (UMP) | Ad consent (GDPR/US state privacy) before any ad loads | Aqua Sort: Water Color Puzzle, Cube Blast: Block Puzzle, Color Rush: Block Sort, Hexa Stack: Color Sort, Screw Out: Pin Puzzle, Pixel Rush: Color Shooter, FLOWBLAST: Pixel Picture Blast | 7 |
| Erebos Lab arcade service (arcade-api.ereboslab.com, Cloudflare Workers + D1) | Leaderboard, optional cloud save, weekly events and competitions · Leaderboard and daily challenge, only if you turn on cloud features · Leaderboard, cloud save, daily challenge, events and monthly competition, only if you turn on cloud features | Aqua Sort: Water Color Puzzle, Cube Blast: Block Puzzle, Color Rush: Block Sort, Hexa Stack: Color Sort, Screw Out: Pin Puzzle, Pixel Rush: Color Shooter | 6 |
| Apple Maps / Google Maps | Map tiles for nearby and location-based quests · Map tiles only — react-native-maps uses Apple Maps on iOS and Google Maps on Android. The map provider receives your map viewport (approximate location) to render tiles, governed by its own privacy policy. · Map tiles: the map provider receives the visible map area to draw it, under its own privacy policy | Side Quest, Splits, RunMap | 3 |
| Anthropic (Claude) | Generate video scripts, hooks, and captions from your prompt or link, through our own AI gateway. · Generate AI reflections and answer “Ask your Journal” — your entry text is sent only when AI features are enabled | Menivor, Echo | 2 |
| Apple App Tracking Transparency | iOS permission prompt before the advertising identifier is used | Aqua Sort: Water Color Puzzle, FLOWBLAST: Pixel Picture Blast | 2 |
| Cloudflare | Web app hosting, content delivery, network security, and object storage (R2) for uploads and rendered videos. · Infrastructure host (Workers, D1 & R2) for the optional Sync & Backup server; only receives data if you turn sync on | Menivor, EcoMoney | 2 |
| Cloudflare R2 | Object storage (photos and files) · Object storage for listing photos and media | CalDesk AI, Al-Sat Marketplace | 2 |
| PostHog | Product analytics (opt-out available) · Product analytics (only when configured) | Bump, Comet Lanes | 2 |
| Sentry | Crash and error reporting · Crash and error reporting (only when configured) | Bump, Comet Lanes | 2 |
| AI model provider unverified | Powers the market-drafting assistant — to be named before final publish. | Predikt | 1 |
| Apple App Store / Google Play | Subscription billing and receipts | RunMap | 1 |
| Apple Game Center / Google Play Games | Leaderboards and achievements | Comet Lanes | 1 |
| Apple Health (HealthKit) | On-device only — reads heart rate / active energy during a workout and writes finished workouts to the Fitness app, with your permission. HealthKit data never leaves your device through CalGym. | CalGym | 1 |
| Apple, Google | Optional sign-in for cloud save | Comet Lanes | 1 |
| Apple, Google, Web3Auth | Optional sign-in and optional social-recovery embedded wallet | Aether Wallet | 1 |
| authentication & push notification provider unverified | Sign-in (including Google/Apple) and push delivery — to be named before final publish. | Predikt | 1 |
| Blockchain RPC & data providers (Alchemy, Helius, public RPC nodes, mempool.space) | Read balances, transactions, and NFTs from public chains — receive your wallet address and IP when queried | Aether Wallet | 1 |
| CalDesk (app-to-app deep link) | Optional: tapping “Add to CalDesk” hands a workout summary to the CalDesk app on the same device via a deep link. There is no shared backend; nothing is sent to a server. | CalGym | 1 |
| Clerk | Sign-in and account sessions. | Menivor | 1 |
| cloud backend & database provider unverified | Store account and play-money activity — to be named before final publish. | Predikt | 1 |
| Cloudflare Workers and D1 (first-party social backend) | Optional CalGym Community profiles and the workout summaries you publish | CalGym | 1 |
| CoinGecko, DefiLlama, GoPlus | Token prices, market/yield data, and security/approval scanning | Aether Wallet | 1 |
| Creem | Merchant of record for purchases made before the move to Dodo Payments; retains only those earlier records. | Menivor | 1 |
| Dodo Payments | Checkout, invoices, and tax as merchant of record for your purchase. | Menivor | 1 |
| e-invoice (e-Fatura/e-Arşiv) integrator unverified | Invoice issuance — optional, off by default; name the provider if enabled. | Al-Sat Marketplace | 1 |
| ElevenLabs | Premium text-to-speech narration and optional brand voice cloning. | Menivor | 1 |
| email / push notification worker unverified | Delivers email and (modeled) push notifications from an outbox — confirm the delivery provider before publish; device push is not yet wired. | Al-Sat Marketplace | 1 |
| Erebos Lab (our own server) | Optional audiobook export only: converts the text you export to audio with a self-hosted Kokoro voice model; nothing is kept after the response | Fast Reader | 1 |
| Expo / EAS | App runtime, updates, and build/delivery | Comet Lanes | 1 |
| fal.ai | AI video and image generation for AI-generated clips. | Menivor | 1 |
| fiat on-ramp provider (MoonPay / Ramp / Transak) unverified | Optional buy-crypto widget — not yet configured; to be named before enabling. | Aether Wallet | 1 |
| FLOWBLAST backend (api.flowblast.game, Erebos Lab’s own Cloudflare-hosted servers) | Daily challenge, relay, raid, friends, cloud save and first-party gameplay analytics | FLOWBLAST: Pixel Picture Blast | 1 |
| Google, Apple | Optional social sign-in | Predikt | 1 |
| Groq, OpenRouter (routing to Google Gemini), and Anthropic (Claude) | AI vision providers that process food photos and prompts for nutrition estimation. The app tries each provider in order (free tier first) until one succeeds. No name, email, or contact details are sent in these requests. | CalDesk AI | 1 |
| HeyGen | AI avatar presenter video generation. | Menivor | 1 |
| hosted search provider (Meilisearch/Typesense) unverified | Listing search — confirm if a hosted search index is used in production. | Al-Sat Marketplace | 1 |
| identity-verification & fiat on-ramp provider unverified | KYC and wallet funding for real-money features — to be named before final publish. | Predikt | 1 |
| iyzico | Hosted 3-D Secure card payment processing (card data handled by iyzico, not by us) | Al-Sat Marketplace | 1 |
| Jupiter, Across, Uniswap, Pimlico | Swaps, bridging, and account-abstraction bundling that you initiate | Aether Wallet | 1 |
| LiveKit | Real-time voice/video call transport (self-hostable) | Huddle | 1 |
| Microsoft | Fallback text-to-speech narration when our own voice server is busy. | Menivor | 1 |
| Neon | Managed Postgres for your account and credit ledger. | Menivor | 1 |
| Neon (Postgres) | Application database and account data | CalDesk AI | 1 |
| Neon (PostgreSQL) | Primary application database for accounts, listings, messages, and orders | Al-Sat Marketplace | 1 |
| OpenStreetMap / OpenTopoMap tile servers | Map tiles you download for running without signal; the tile server receives the requested map area | RunMap | 1 |
| Oracle Cloud Infrastructure | Application servers, video rendering, our own database/queue servers, and transactional email. | Menivor | 1 |
| PayTR (alternate payment provider) unverified | Alternate payment processor — wired but off by default; confirm whether enabled in production before naming. | Al-Sat Marketplace | 1 |
| Predikt order relay | Matches and settles the signed on-chain orders you submit (first-party; never takes custody of keys or USDC) | Predikt | 1 |
| Public blockchain networks & dispute-based oracle | On-chain settlement and resolution — no single party, including us, controls the outcome | Predikt | 1 |
| Push bridge (direct Apple APNs + Google FCM, self-hosted) | Push notification delivery via Apple (APNs) and Google (FCM) — no third-party push relay in between | Huddle | 1 |
| Relay server (Nostr protocol) | Chat backend that stores your messages and media (self-hostable; a default relay is used until you configure your own) | Huddle | 1 |
| Resend | Transactional email delivery | CalDesk AI | 1 |
| RevenueCat / react-native-iap | In-app purchases via Apple/Google | Comet Lanes | 1 |
| Scribase (operated by Erebos Lab) | Account sign-in and the database that stores your runs, plans and records | RunMap | 1 |
| Upload-Post | Publishes your videos to the social accounts you connect, for some platforms. | Menivor | 1 |
| weather data provider unverified | Weather used for weather-adjusted alarms — exact provider to be named before final publish. | Bump | 1 |
| yok API (first-party backend, Cloudflare) | Program catalog, search, saved favorites, your eligibility profile, and program-fit analyses — your account data lives here when you sign in | Yokharita | 1 |