Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes

Build stack

Subway® Android tech stack

React Native Android app with Hermes, Jetpack Compose, bundled ML models for barcodes, Adyen payments, and dual feature flags

v101.4.4 · latest

Languages

4

Java · Kotlin · React Native / JavaScript

Third-party SDKs

40

19 categories

Permissions

38

32 native libs

Signals

64

capabilities, APIs, fonts

Analyzed June 22, 2026·Bundle com.subway.mobile.subwayapp03·Detection observed
Built withJava146Kotlin143JJetpack Compose117AAdobe Experience Platform20AAmplitude31BBranch53Firebase Analytics118Google Mobile Ads (AdMob)101Sentry36AAdyen10Google Sign-InOOneTrust20
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

Hybrid React Native + native UI

Architecture

Bundles Hermes bytecode, libreactnative.so, libreanimated.so and libreact_codegen_* alongside Jetpack Compose and Material Components, indicating mixed JS and native rendering layers.

libhermes.so · libreactnative.so · libreanimated.so · Jetpack Compose · +1

Runtime↓

On-device ML models for barcodes

On-device ML

Ships three TensorFlow Lite models including barcode_ssd_mobilenet_v1_dmp25_quant.tflite plus ML Kit (barcode/vision) and libbarhopper_v3.so, enabling local scanning and feature extraction.

barcode_ssd_mobilenet_v1_dmp25_quant.tflite · oned_auto_regressor_mobile.tflite · ML Kit (barcode/vision) · libbarhopper_v3.so

Keystore, biometrics and root checks

Security

Declares Android Keystore, biometric auth, root detection, FLAG_SECURE screenshot blocking and symmetric crypto, typical for protecting payment or auth flows.

Android Keystore · Biometric auth · Root detection · FLAG_SECURE

Signals↓

Dual feature flags plus heavy analytics

Dependencies

Integrates both LaunchDarkly and Statsig for flags, plus Amplitude, Branch, Adobe Experience Platform, Firebase Analytics and Sentry for monitoring and attribution.

LaunchDarkly · Statsig · Amplitude · Branch · +1

SDKs↓

Adyen payment integration

Notable

Registers adyen3ds2 and adyencheckout schemes and lists Adyen SDK, indicating use of Adyen for 3DS and checkout flows.

Adyen · adyen3ds2 · adyencheckout

Subway APIs and Firebase

Backend & API

References api.subway.com, dam.subway.com, id.subway.com and subway-mobile-app.firebaseio.com with Retrofit and Firebase services.

api.subway.com · dam.subway.com · subway-mobile-app.firebaseio.com · Retrofit · +1

Signals↓

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

29

Target SDK

36

ABIs

1

arm64-v8a

Signing

v2 · v3

Common Name: Subway

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

22

Services

16

Receivers

15

Providers

8

Exported (9)

activity:androidx.compose.ui.tooling.PreviewActivityactivity:com.adyen.checkout.dropin.internal.ui.DropInActivityactivity:com.adyen.threeds2.internal.ui.activity.ChallengeActivityactivity:com.subway.na.lower.MainActivityprovider:expo.modules.clipboard.ClipboardFileProviderreceiver:androidx.profileinstaller.ProfileInstallReceiverreceiver:androidx.work.impl.diagnostics.DiagnosticsReceiverreceiver:com.google.firebase.iid.FirebaseInstanceIdReceiverservice:androidx.work.impl.background.systemjob.SystemJobService

Manifest

Permissions

38 permissions requested in the manifest.
android.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.FOREGROUND_SERVICEandroid.permission.HIDE_OVERLAY_WINDOWSandroid.permission.INTERNETandroid.permission.MODIFY_AUDIO_SETTINGSandroid.permission.POST_NOTIFICATIONSandroid.permission.READ_APP_BADGEandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.RECEIVE_BOOT_COMPLETEDandroid.permission.RECORD_AUDIOandroid.permission.SYSTEM_ALERT_WINDOWandroid.permission.USE_BIOMETRICandroid.permission.USE_FINGERPRINTandroid.permission.VIBRATEandroid.permission.WAKE_LOCKandroid.permission.WRITE_EXTERNAL_STORAGEcom.anddoes.launcher.permission.UPDATE_COUNT

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libandroidx.graphics.path.solibanimation-decoder-gif.solibappmodules.solibavif_android.solibbarhopper_v3.solibc++_shared.solibd124.solibdatastore_shared_counter.solibexpo-modules-core.solibfbjni.solibgesturehandler.solibgifimage.solibhermes.solibhermestooling.solibimagepipeline.solibjsi.solibnative-filters.solibnative-imagetranscoder.solibreact-native-mmkv.solibreact_codegen_RNKC.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool (Retrofit detected).

Base URLs

https://api-nps.subway.comhttps://api-nps.subway.com/api/https://api.subway.comhttps://api.subway.com/digital/experience/v1https://dam.subway.com

API endpoints

/account/services/updateProfile/api//api/4509632503087104/envelope//api/_DataKt/api/getDeviceId/api/json/-JsonWriters/api/model/zzbm/api/model/zzbo/api/model/zzbq/api/model/zzbs/api/model/zzbu/api/model/zzbw/api/model/zzby/api/model/zzca/api/model/zzcc/api/model/zzce/api/model/zzcg/api/model/zzci/api/model/zzck/api/model/zzcm

URI schemes

adyen3ds2adyencheckoutandroid-appandroid.resourceanimassetassetsdirectexpo-notificationsldapmarketmobileapprawresourcertspweixinworkspecwswss

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreBiometric authClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionRoot detectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Java
146
Kotlin
143
React Native / JavaScript
45

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
40 of 40 SDKs
SDKCategoryVendorVersionAppsSource
AAdobe Experience PlatformAnalytics--20
AmplitudeProduct analytics and experimentation.AnalyticsAmplitude-31
BranchDeep linking and mobile attribution.AnalyticsBranch-53
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
Google Mobile Ads (AdMob)AdMob mobile advertising for Android.AdsGoogle-101
SentryError tracking and performance monitoring.Crash & PerformanceSentry-36
SentryError tracking and performance monitoring.Crash & PerformanceSentry-20
AdyenGlobal payments platform SDK.PaymentsAdyen-10
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
OOneTrustPrivacy & Consent--20
AaxiosNetworking--15-
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
VolleyHTTP networking library for Android.NetworkingGoogle-36
Apollo GraphQLType-safe GraphQL client.GraphQL / APIApollo GraphQL-39
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
Media3 (ExoPlayer)Media playback (ExoPlayer) for Android.MediaGoogle-88
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-64
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-30
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
AAWS SDKAWS / Amazon--14
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
AndroidSVGSVG parser and renderer for Android.RenderingBig Bad Logic-45
FFlashListRendering--12-
FrescoAndroid image loading, caching, and rendering library.RenderingMeta-34
GlideImage loading and caching for Android.RenderingBumptech-112
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
RReact Native ReanimatedRendering--23-
Rreact-native-svgRendering--26-
LaunchDarklyFeature flag management and experimentation.Feature FlagsLaunchDarkly-9
StatsigFeature flags and experimentation.Feature FlagsStatsig-14
RReduxArchitecture / DI--22-
40 SDK rows

Interface

UI & graphics

Frameworks and libraries Subway® uses to render its interface and animations.
FrescoGlideJetpack ComposeMaterial Components

Models

On-device ML models

Core ML and ML model bundles shipped inside the app for local inference.
barcode_ssd_mobilenet_v1_dmp25_quant.tfliteoned_auto_regressor_mobile.tfliteoned_feature_extractor_mobile.tflite

Assets

Bundled fonts

Custom font families packaged in the app bundle.
assets_fonts_subwaysanslcgappblackassets_fonts_subwaysanslcgappboldassets_fonts_subwaysanslcgappbolditalicassets_fonts_subwaysanslcgappmediumassets_fonts_subwaysanslcgappmediumitalicassets_fonts_subwaysanslcgappregularassets_fonts_subwaysanslcgappregularitalicassets_fonts_subwaysanslcgappsemiboldassets_fonts_subwaysanslcgappsemibolditalicassets_fonts_subwaysanslcgappsuperinter_boldinter_mediuminter_regularinter_semiboldjetbrains_mono_lightjetbrains_mono_mediumjetbrains_mono_regularnode_modules_expogooglefonts_spacegrotesk_300light_spacegrotesk_300lightnode_modules_expogooglefonts_spacegrotesk_400regular_spacegrotesk_400regularnode_modules_expogooglefonts_spacegrotesk_500medium_spacegrotesk_500mediumnode_modules_expogooglefonts_spacegrotesk_600semibold_spacegrotesk_600semiboldnode_modules_expogooglefonts_spacegrotesk_700bold_spacegrotesk_700boldroboto_medium_numbers

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)

Embedded web

JavaScript libraries

Detected inside bundled JavaScript from React Native or embedded web content.
@react-navigation@sentry@shopify/flash-listamplitudeaxiosreact-native-mmkvreact-native-reanimatedreact-native-svgreact-redux

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

Firebase projects

subway-mobile-appsubway-mobile-app.appspot.com · https://subway-mobile-app.firebaseio.com

SDK config keys

com.google.android.geo.API_KEYGoogle Maps
io.branch.sdk.BranchKeyBranch
io.sentry.auto-initSentry

Registered URL schemes

adyen3ds2adyencheckouthttpssubwayapp

Queries other apps

com.google.android.apps.mapscom.tencent.mmintent:*intent:https

Universal link hosts

com.subway.mobile.subwayapp03subway.app.linksubway.test-app.link

ATS exception domains

10.0.2.210.0.3.210.157.28.176127.0.0.1localhostus-east-1.elb.amazonaws.comus-west-2.elb.amazonaws.com
Allows arbitrary network loads

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

api-nps.subway.comapi.subway.comdam.subway.comid.subway.commedia.subway.comsubway-mobile-app.firebaseio.comsubway.app.linksubway.comwww.subway.com

First party

App modules

Likely first-party modules and resource bundles detected in Subway®.
com.subwaycom.subway.mobile

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDApproximate locationBiometric authDraw over other appsFingerprint authForeground serviceMicrophoneNotificationsPrecise locationStorage (read)Storage (write)

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreBiometric authClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionRoot detectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

api.branch.ioapi2.branch.ioapi3-eu.branch.iocdn.branch.iodocs.sentry.iohelp.branch.ioo447951.ingest.sentry.iopagead2.googlesyndication.comsentry.io

Accessed API samples

Ad SDK presentAdobe Experience PlatformAdvertising IDAmplitudeAnalytics SDK presentBranchFirebase AnalyticsFirebase MessagingGoogle Mobile Ads (AdMob)SentrySentry (native)Tracking/telemetry hosts in app strings

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

androidx.activity_activity1.10.1 · Google
androidx.activity_activity-compose1.10.1 · Google
androidx.activity_activity-ktx1.10.1 · Google
androidx.annotation_annotation-experimental1.5.0 · Google
androidx.appcompat_appcompat1.7.1 · Google
androidx.appcompat_appcompat-resources1.7.1 · Google
androidx.asynclayoutinflater_asynclayoutinflater1.0.0
androidx.autofill_autofill1.3.0-rc01 · Google
androidx.biometric_biometric1.2.0-alpha04 · Google
androidx.browser_browser1.8.0 · Google
androidx.cardview_cardview1.0.0 · Google
androidx.compose.animation_animation1.9.0 · Google
androidx.compose.animation_animation-core1.9.0 · Google
androidx.compose.foundation_foundation1.9.0 · Google
androidx.compose.foundation_foundation-layout1.9.0 · Google
androidx.compose.material3_material31.2.0 · Google
androidx.compose.material_material1.6.0
androidx.compose.material_material-icons-core1.6.0
androidx.compose.material_material-ripple1.6.0 · Google
androidx.compose.runtime_runtime1.9.0 · Google
androidx.compose.runtime_runtime-annotation1.9.0 · Google
androidx.compose.runtime_runtime-saveable1.9.0 · Google
androidx.compose.ui_ui1.9.0 · Google
androidx.compose.ui_ui-geometry1.9.0 · Google
androidx.compose.ui_ui-graphics1.9.0 · Google
androidx.compose.ui_ui-text1.9.0 · Google
androidx.compose.ui_ui-tooling1.9.0 · Google
androidx.compose.ui_ui-tooling-data1.9.0 · Google
androidx.compose.ui_ui-tooling-preview1.9.0 · Google
androidx.compose.ui_ui-unit1.9.0 · Google
androidx.compose.ui_ui-util1.9.0 · Google
androidx.constraintlayout_constraintlayout2.2.1 · Google
androidx.coordinatorlayout_coordinatorlayout1.2.0 · Google
androidx.core_core1.16.0 · Google
androidx.core_core-ktx1.16.0 · Google
androidx.core_core-splashscreen1.2.0-alpha02
androidx.core_core-viewtree1.0.0 · Google
androidx.cursoradapter_cursoradapter1.0.0 · Google
androidx.customview_customview1.1.0 · Google
androidx.customview_customview-poolingcontainer1.0.0 · Google
androidx.databinding_viewbinding8.11.0 · Google
androidx.datastore_datastore1.1.1 · Google
androidx.datastore_datastore-core1.1.1 · Google
androidx.datastore_datastore-preferences1.1.1 · Google
androidx.documentfile_documentfile1.1.0 · Google
androidx.drawerlayout_drawerlayout1.1.1 · Google
androidx.dynamicanimation_dynamicanimation1.1.0 · Google
androidx.dynamicanimation_dynamicanimation-ktx1.1.0
androidx.emoji2_emoji21.4.0 · Google
androidx.emoji2_emoji2-views-helper1.4.0 · Google
androidx.exifinterface_exifinterface1.3.6 · Google
androidx.fragment_fragment1.8.6 · Google
androidx.fragment_fragment-ktx1.8.6 · Google
androidx.graphics_graphics-path1.0.1 · Google
androidx.graphics_graphics-shapes1.0.1 · Google
androidx.interpolator_interpolator1.0.0 · Google
androidx.legacy_legacy-support-core-ui1.0.0
androidx.legacy_legacy-support-core-utils1.0.0 · Google
androidx.legacy_legacy-support-v41.0.0
androidx.lifecycle_lifecycle-extensions2.2.0
androidx.lifecycle_lifecycle-livedata2.9.0 · Google
androidx.lifecycle_lifecycle-livedata-core2.9.0 · Google
androidx.lifecycle_lifecycle-livedata-core-ktx2.9.0 · Google
androidx.lifecycle_lifecycle-livedata-ktx2.9.0 · Google
androidx.lifecycle_lifecycle-process2.9.0 · Google
androidx.lifecycle_lifecycle-runtime2.9.0 · Google
androidx.lifecycle_lifecycle-runtime-compose2.9.0 · Google
androidx.lifecycle_lifecycle-runtime-ktx2.9.0 · Google
androidx.lifecycle_lifecycle-service2.9.0 · Google
androidx.lifecycle_lifecycle-viewmodel2.9.0 · Google
androidx.lifecycle_lifecycle-viewmodel-compose2.9.0 · Google
androidx.lifecycle_lifecycle-viewmodel-ktx2.9.0 · Google
androidx.lifecycle_lifecycle-viewmodel-savedstate2.9.0 · Google
androidx.loader_loader1.0.0 · Google
androidx.localbroadcastmanager_localbroadcastmanager1.0.0 · Google
androidx.media_media1.7.0 · Google
androidx.navigation_navigation-common2.9.0 · Google
androidx.navigation_navigation-compose2.9.0 · Google
androidx.navigation_navigation-runtime2.9.0 · Google
androidx.print_print1.0.0 · Google
androidx.profileinstaller_profileinstaller1.4.0 · Google
androidx.recyclerview_recyclerview1.4.0 · Google
androidx.room_room-ktx2.8.4 · Google
androidx.room_room-runtime2.8.4 · Google
androidx.savedstate_savedstate1.3.0 · Google
androidx.savedstate_savedstate-compose1.3.0 · Google
androidx.savedstate_savedstate-ktx1.3.0 · Google
androidx.slidingpanelayout_slidingpanelayout1.0.0
androidx.sqlite_sqlite2.6.2 · Google
androidx.sqlite_sqlite-bundled2.6.2
androidx.sqlite_sqlite-framework2.6.2 · Google
androidx.startup_startup-runtime1.1.1 · Google
androidx.swiperefreshlayout_swiperefreshlayout1.1.0 · Google
androidx.tracing_tracing1.2.0 · Google
androidx.tracing_tracing-ktx1.2.0 · Google
androidx.transition_transition1.5.0 · Google
androidx.vectordrawable_vectordrawable1.1.0 · Google
androidx.vectordrawable_vectordrawable-animated1.1.0 · Google
androidx.versionedparcelable_versionedparcelable1.1.1 · Google
androidx.viewpager2_viewpager21.1.0-beta02 · Google
androidx.viewpager_viewpager1.0.0 · Google
androidx.webkit_webkit1.14.0 · Google
androidx.work_work-runtime2.9.1 · Google
com.google.android.material_material1.13.0 · material-components
com.google.gson?
com.google.protobuf?
com.squareup.moshi?
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains
kotlinx_coroutines_android1.10.2
kotlinx_coroutines_core1.10.2
kotlinx_coroutines_play_services1.10.2
org.koin?

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →
Subway® app icon

Live from Google Play

Subway®

SUBWAY Restaurants
Open in Google Play(opens in new tab)Developer site(opens in new tab)RSS feed

Rating

4.1 (515,699)

Price

Free

Installs

10M+ installs

Version

v102.0.0

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack