CITT

    Scan results

    MyCredex

    Android

    MyCredex is a Romanian mobile lending app by CREDEX IFN S.A. offering quick financing from 300 to 50,000 lei with fixed interest rates from 9.99% annually. The app provides transparent, fast financial solutions for citizens aged 18-75, accepting diverse income sources.

    CITT SCORE
    58
    out of 100
    TRUSTish

    Quick Verdict

    Best for: Credex users comfortable with analytics and biometrics

    What It Means For You

    Usage and behavior are tracked by Firebase and Huawei analytics. The app collects biometric data for identity verification via third-party SDKs. Sensitive financial data stored on the device may not be fully protected if the device is compromised.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (14)

    Data Security

    4 total
    1 Critical
    1 High
    2 Medium

    Network Security

    1 total
    1 High

    Code Security

    5 total
    5 Medium

    Privacy

    3 total
    1 Critical
    1 High
    1 Medium

    Permission Usage

    1 total
    1 Medium

    Third-Party Services

    Firebase Analytics, OneSignal, Sentry, Huawei HiAnalytics, Idenfy SDK, FaceTec SDK, Google ML Kit

    Security Strengths

    • ✓Hardware-backed encryption (Keychain with AES-256-GCM)
    • ✓Strong WebView security defaults
    • ✓Backup disabled (allowBackup=false)
    • ✓Sentry privacy-first configuration
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    ads
    biometric
    camera

    Package

    com.axsys.credex.android

    Version

    1.1.3 (Build 78)

    Analysis Date

    Jan 20, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (1 critical, 1 high, 2 medium)

    Network Security - 1 finding (1 high)

    Code Safety - 0 findings

    Privacy - 3 findings (1 critical, 1 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    MyCredex collects biometric data including facial scans for identity verification. Multiple analytics services record how users interact with the app, including which features are used and when. This behavioral data builds a profile of in-app activity over time.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Firebase Analytics - Behavioral and usage tracking
    • Huawei HiAnalytics - Behavioral and usage tracking
    • OneSignal - Push notification delivery
    • Sentry - Error and crash reporting
    • Idenfy SDK - Identity document verification
    • FaceTec SDK - Biometric face matching
    • Google ML Kit - On-device machine learning features

    Understanding the Scores

    CategoryScore
    Security65/100
    Privacy50/100
    Data Security45/100
    Network Security75/100
    Code Safety70/100
    Data Collection55/100
    Data Sharing60/100
    User Control50/100

    Positive Security Features

    No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Sensitive financial data stored on the device needs stronger protection so that it remains secure if the device is lost, stolen, or accessed by someone else.
    • The app shares behavioral data with two separate analytics platforms simultaneously, giving users no meaningful way to limit that collection while still using the app.
    • User control over what personal information is gathered and retained is limited. Clearer choices about data retention and analytics participation would give users more say over their own information.

    About This Analysis

    This scorecard reflects automated static analysis of the app's code and configuration. Scores represent the app's security and privacy posture at the time of the scan and may change with future updates.

    App Details

    • App Name: MyCredex
    • Package: com.axsys.credex.android
    • Version: 1.1.3 (Build 78)
    • Platform: Android
    • Scan Date: 2026-01-20

    Right of Reply

    Developer not yet contacted