Service Providers
Published 1 October 2026. In effect from that date.
In this version: New. The companies that process personal data for us, what for, and where.
On this page
About this list
These are the companies that process personal data for Bontal LLC to run Colivioo. Each works under a contract that limits it to our instructions, or, for app stores and sign-in providers, under its own terms with you. When we add or replace a provider, we publish a new version of this page.
Running Colivioo
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Hetzner Online GmbH | The servers that run Colivioo, its databases and its file storage | All data held by Colivioo | Germany |
| Cloudflare, Inc. | Content delivery, security and protection against attacks | IP address, requests, photos served to you | Global |
| Backblaze, Inc. | File storage for photos and documents, and database backups | Photos, documents, attachments, database backups | United States |
| Amazon Web Services, Inc. (Amazon SES) | Sending email | Email address, email content | Regions we choose, including Singapore |
| Apple Inc. (Apple Push Notification service) | Push notifications on Apple devices | Device token, notification content | United States |
| Google LLC (Firebase Cloud Messaging) | Push notifications on Android | Device token, notification content | United States |
| Telegram Messenger Inc. | Notifications through our Telegram bot, and the Telegram Mini App | Telegram account ID, notification content | Global |
| TypeSafe | Automated assistance (Jev): scam warnings and suggestions | Text of messages and forms being checked | United States |
| Functional Software, Inc. (Sentry) | Error monitoring for our servers | Technical error details, which may include IP address and account ID | United States |
Payments
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Stripe Payments Singapore Pte. Ltd. and affiliates | Payments on the website | Name, email address, payment details, purchase history | Singapore, United States |
| Apple Inc. (App Store) | In-app purchases on iPhone, iPad and Mac | Purchase and subscription status | United States |
| Google LLC (Google Play) | In-app purchases on Android | Purchase and subscription status | United States |
Sign-in and verification
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Google LLC | Sign in with Google | Name, email address, account identifier | United States |
| Apple Inc. | Sign in with Apple | Name, email or private relay address, account identifier | United States |
| Telegram Messenger Inc. | Sign in with Telegram, and phone number verification | Telegram account ID, name, phone number | Global |
| Didit Identity, Inc. and Didit Identity Spain, S.L. | ID verification, if you choose it | Document photos and details, selfie and face comparison, IP address and device | United States, European Union |
| Google LLC (Firebase App Check) | Confirming requests come from our genuine apps | Device and app integrity signals | United States |
Maps, places and transport
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Singapore Land Authority (OneMap) | Address search, travel times and routes to your saved places | Addresses and places being searched, start and end points of routes | Singapore |
| Land Transport Authority (DataMall) | Train service alerts | None about you | Singapore |
| OpenStreetMap Foundation, CARTO | Map tiles and place lookup on the website | IP address, the area of the map you view | European Union, United States |
| Google LLC (Google Maps) | Maps in the Android app | IP address, device, the area of the map you view | United States |
| Apple Inc. (Apple Maps) | Maps in the iPhone, iPad and Mac apps | The area of the map you view, handled under Apple’s privacy terms | United States |
Analytics and diagnostics
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Google LLC (Google Analytics) | Website analytics, only with your consent | Pages visited, device, approximate location from IP | United States |
| Cloudflare, Inc. (Web Analytics) | Counting page views without cookies | Pages visited, referrer, device type, country from IP address | Global |
| Microsoft Corporation (Clarity) | Website usage analytics and anonymised session replay, only with your consent | Clicks, scrolling, pages, device | United States |
| Google LLC (Firebase Crashlytics, Performance Monitoring, Remote Config) | Crash reports and performance of the Android app, and switching features on and off | Device, app version, crash and performance details, installation identifier | United States |
Operator tools
| Provider | What it does for us | Data involved | Location |
|---|---|---|---|
| Meta Platforms, Inc. (WhatsApp Business Platform) | Sending WhatsApp messages from an operator to its residents, if the operator turns it on | Phone number, message content | United States |
Software we run ourselves
We also run open-source software on our own servers at Hetzner, including PostgreSQL (database), Redis (cache), MinIO (file storage), Traefik (web traffic), and Grafana, Loki and Prometheus (monitoring and logs). These are tools we operate, not companies we share data with: your data stays on our servers and is not sent to the people who make the software.