| Provider | Purpose | Data processed | Engaged when | Region |
|---|---|---|---|---|
| Apple Inc. | App distribution, in-app purchases, iCloud/CloudKit, App Attest | Purchase/entitlement data; your collection in your own iCloud (not visible to us); anonymous attestation key id | Always; iCloud only if enabled | EU / US |
| Vercel Inc. | Static website hosting, CDN, security logs | Website request data such as IP address, user agent, requested URL, timestamp, diagnostics | When you visit krat13.app | Global / US / EU |
| Railway Corp. | Backend hosting + database | Anonymous attestation key id + counter; cached public metadata; transient requests | Backend-assisted features | US |
| Google LLC (Cloud Vision) | Premium Scan image recognition / OCR | Sleeve photos you submit to a scan | Only with Premium Scan | US / EU |
| Google LLC (Gemini API) | AI text features | The input you submit to an AI feature | Only with AI features | US / EU |
| Discogs (Zink Media, LLC) | Release/marketplace data; optional import | Search terms; your Discogs OAuth + imported data | Lookup & Discogs import | US |
| MetaBrainz Foundation | Music metadata, cover art | Barcode / search terms | When you scan or search | EU / US |
| Deezer S.A. | Album metadata, cover art | Artist / title search terms | When you scan, search, or add | EU |
| Jina AI GmbH (r.jina.ai) | Reader for store links from supported shops that block direct reads | The product-page URL you paste (no cookies/account data) | Only when you paste a supported store link | EU / US |
| Setlist.fm (mxd GmbH) | Artist concert history | Artist / search terms | When that feature is used | EU |
| PostHog, Inc. | Opt-in analytics | Random device id; aggregate event names | Only if you opt in | US (or EU) |
| Sentry (Functional Software, Inc.) | Crash reporting | Device type, OS version, stack trace | When crash reporting is active | US |
• Apple is merchant of record for purchases; we never receive your payment-card details.
• None of these are advertising networks, and we do not sell or "share" personal data for advertising.
• Metadata providers generally act as independent controllers for the limited lookup terms sent to them.
We apply appropriate safeguards (such as EU Standard Contractual Clauses) for transfers outside the EEA/UK. We may update this list as the Service evolves. Questions: irakliy.tatoshvili@gmail.com.