"papi profile" and "okhttp/3.11.0"

Question

Hi. I submitted a request for the data regarding my Microsoft account. I found out, and Microsoft support confirmed this, that apparently someone (my ex boyfriend, the only person who was around when I typed in my password) had connected an O365 subscription to my account. I am looking if there are any hints as to when and how he did it, and in the data there are multiple mentions of "papi profile" and "okhttp/3.11.0". I only used my Android phone during this time to access the account. I have tried my best to find out how these things work, but it's extremely confusing for me, and if someone could tell me if both of these terms are normal when someone uses a phone, or if one of them indicates computer usage, that would be extremely helpful.

I'm not sure if this is important, but I sometimes used a VPN for music during this time.

Thank you for reading this far.