CITT

    Scan results

    आर्य महासंघ

    Android

    Arya Mahasangh is an educational app promoting Sanatan Dharma principles and cultural organization. It enables community members to connect, organize, and participate in religious and cultural activities while maintaining family records and member profiles.

    CITT SCORE
    40
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Members comfortable with basic cloud-connected community

    What It Means For You

    Location data is looked up via an external service (ipapi.co) and map data is loaded from third-party CDNs, meaning the user's IP and location are shared outside the app. Crash reports are sent to Sentry, and account data is stored on Supabase cloud servers. Several findings suggest stored user information may not be fully protected.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (10)

    Data Security

    2 total
    2 Critical

    Network Security

    1 total
    1 High

    Code Security

    3 total
    1 Critical
    2 Medium

    Privacy

    4 total
    2 High
    1 Medium
    1 Low

    Third-Party Services

    Supabase, Sentry, Google Play Services, Leaflet (unpkg.com CDN), OpenStreetMap Nominatim, ipapi.co

    Security Strengths

    • ✓Code obfuscation implemented
    • ✓Modern SDK versions with no known CVEs
    • ✓HTTPS for all API communication
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    education
    social
    sensitive data
    family data
    contacts
    location
    ads

    Package

    com.aryamahasangh

    Version

    1.0.18 (Build 10018)

    Analysis Date

    Feb 2, 2026

    Classes Analyzed

    9,631

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 2 findings (2 critical)

    Network Security - 1 finding (1 high)

    Code Safety - 0 findings

    Privacy - 4 findings (2 high, 1 medium, 1 low)

    Privacy Concerns

    What Data is Collected

    The user's IP address and approximate location are collected each time the app's map features are used. Account details provided by users are stored on Supabase cloud servers. When the app encounters a problem, diagnostic information about the device and session is transmitted to Sentry for crash reporting.

    Third-Party Data Sharing

    The user's IP address and derived location are sent to ipapi.co automatically each time the app performs a location lookup. Map tiles and geographic data are fetched from OpenStreetMap Nominatim and unpkg.com CDN servers, which also receive the user's IP address as part of those requests. Google Play Services receives standard usage signals as part of Android platform integration.

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy45/100
    Data Security25/100
    Network Security80/100
    Code Safety40/100
    Data Collection60/100
    Data Sharing55/100
    User Control70/100

    Positive Security Features

    • Network communications are handled using standard secure transport protocols, resulting in a relatively strong network security score.
    • Basic user account controls are present, giving users some ability to manage their own data within the app.

    Areas for Improvement

    • The app's protection of stored account data may not be sufficient, meaning user personal information may not be fully protected from unauthorized access.
    • User location and IP address are shared with multiple outside services, with limited disclosure or controls available to users.
    • The app's internal data handling could be substantially strengthened to better protect information processed on the device.

    About This Analysis

    Independent automated analysis of the app's code and data-handling practices. Results reflect this specific app version and may not capture changes introduced in later releases.

    App Details

    • App: आर्य महासंघ
    • Package: com.aryamahasangh
    • Version: 1.0.18 (Build 10018)
    • Scan Date: 2026-02-02
    • Developer: (not listed)

    Right of Reply

    Developer not yet contacted