CITT

    Scan results

    Avans One

    Android

    Avans One is a user-friendly educational app for Avans Hogeschool students offering personal schedule viewing, study results tracking, classroom availability search, Brightspace announcements, digital student cards, and grade notifications in one convenient platform.

    CITT SCORE
    81
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Avans students managing their schedule daily

    What It Means For You

    Usage behavior is tracked by Firebase Analytics and Datadog to monitor app performance. User activity may be used to improve the service, but is not shared with advertising networks. Google Sign-In handles login, meaning Google sees when and how often the app is used.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (11)

    Data Security

    2 total
    1 Medium
    1 Info

    Network Security

    2 total
    2 Info

    Code Security

    2 total
    1 Medium
    1 Info

    Privacy

    4 total
    2 High
    2 Medium

    Third-Party Risk

    1 total
    1 Info

    Third-Party Services

    Firebase Analytics, Firebase Cloud Messaging, Datadog RUM, Google Sign-In, Google ML Kit Barcode, Apollo GraphQL, Expo Updates

    Security Strengths

    • ✓Expo SecureStore with Android KeyStore Encryption
    • ✓HTTPS Enforced by Platform Defaults
    • ✓No Custom TLS Validation Bypasses
    • ✓No Server-Side Secrets in Client Code
    • ✓No Known CVEs in Deployed SDK Versions
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    educational
    analytics
    advertising id
    gdpr concern
    student data
    behavioral tracking

    Package

    com.avans.avansonern

    Version

    1.2.0 (Build 35)

    Analysis Date

    Mar 25, 2026

    Classes Analyzed

    24,635

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 2 findings (1 medium, 1 info)

    Network Security - 2 findings (2 info)

    Code Safety - 0 findings

    Privacy - 4 findings (2 high, 2 medium)

    Privacy Concerns

    What Data is Collected

    The app collects account identity through Google Sign-In and monitors app usage through Firebase Analytics and Datadog RUM. This includes session activity, feature interactions, and device performance metrics sent to Google and Datadog servers.

    Third-Party Data Sharing

    Data is shared with the following services:

    • Firebase Analytics (Google) - collects usage and behavioral patterns
    • Firebase Cloud Messaging (Google) - delivers push notifications to the device
    • Datadog RUM - monitors app performance and session activity
    • Google Sign-In (Google) - manages account login
    • Google ML Kit Barcode (Google) - processes barcode scanning on the device
    • Apollo GraphQL - handles data requests between the app and its servers
    • Expo Updates - manages app update delivery

    All identified services serve functional or analytical purposes, not advertising.

    Understanding the Scores

    CategoryScore
    Security96/100
    Privacy75/100
    Data Security96/100
    Network Security100/100
    Code Safety98/100
    Data Collection73/100
    Data Sharing100/100
    User Control78/100

    Positive Security Features

    • Strong network communication practices, reflected in a perfect Network Security score
    • High code safety standards maintained throughout the app

    Areas for Improvement

    • The app could provide clearer information about what behavioral data is collected and how long it is retained.
    • Users would benefit from more granular controls over analytics and data collection preferences.
    • Privacy disclosures could be more transparent about the scope of information shared with Google services.

    About This Analysis

    This scorecard is based on static analysis of the app's code, examining security and privacy practices. Scores reflect the app's behavior at the version analyzed and may not reflect subsequent updates.

    App Details

    • App Name: Avans One
    • Package ID: com.avans.avansonern
    • Version: 1.2.0 (Build 35)
    • Scan Date: 2026-03-25

    Right of Reply

    Developer not yet contacted