CITT

    Scan results

    Paris - Tu Tienda Online

    Android

    Paris App: Easy and secure shopping with exclusive discounts. Discover thousands of products in fashion, technology, beauty, home and more with special promotions. Experience personalized, fast and hassle-free shopping designed to adapt to your needs.

    CITT SCORE
    30
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Paris store shoppers comfortable with broad data sharing

    What It Means For You

    Browsing, purchase activity, and behavior are shared with advertising and analytics companies including Meta and AppsFlyer. Users have very limited control over what is collected or how it is used. Account and payment data may not be fully protected across multiple areas of the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (21)

    Data Security

    6 total
    1 Critical
    2 High
    3 Medium

    Network Security

    2 total
    2 High

    Code Security

    6 total
    2 Critical
    2 High
    2 Medium

    Privacy

    7 total
    4 Critical
    2 High
    1 Medium

    Third-Party Services

    Firebase, AppsFlyer, Constructor.io, NewRelic, SEON, Meta/Facebook, Google Play Services, Storyly, Chucker

    Security Strengths

    • ✓Root detection implemented
    • ✓Certificate pinning infrastructure configured
    • ✓Cleartext traffic disabled (HTTPS enforced)
    • ✓Backup protection enabled
    • ✓WebView debugging disabled in production
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    e-commerce
    sensitive data
    location
    ads
    tracking
    payment
    national id

    Package

    com.cencosud.parisapp.android

    Version

    4.2.3 (Build 329)

    Analysis Date

    Jan 23, 2026

    Classes Analyzed

    6,767

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 6 findings (1 critical, 2 high, 3 medium)

    Network Security - 2 findings (2 high)

    Code Safety - 0 findings

    Privacy - 7 findings (4 critical, 2 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    The app collects in-store browsing history, search queries, purchase records, device identifiers, and behavioral patterns across sessions. Collection begins when the app is opened, before any purchase or account login.

    Third-Party Data Sharing

    User activity is shared with the following third-party services:

    • Meta/Facebook - Advertising targeting and behavioral profiling
    • AppsFlyer - Marketing attribution and analytics tracking
    • Firebase - App analytics and performance data
    • Constructor.io - Search behavior and personalization
    • NewRelic - Application performance monitoring
    • SEON - Fraud detection services
    • Google Play Services - Core platform services
    • Storyly - In-app content personalization
    • Chucker - Network diagnostics

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy25/100
    Data Security30/100
    Network Security70/100
    Code Safety35/100
    Data Collection20/100
    Data Sharing25/100
    User Control15/100

    Positive Security Features

    • Standard transport security is applied to most network communications, reducing the risk of interception on public Wi-Fi networks.

    Areas for Improvement

    • The way account and payment information is protected needs significant strengthening to reduce exposure to unauthorized access.
    • The number of advertising and analytics companies that receive user behavioral data should be reduced, and users should be given clear options to limit sharing.
    • Meaningful controls over what is collected from the device and how it is used to build advertising profiles are currently missing.

    About This Analysis

    This scorecard reflects static analysis of the app as distributed. Scores and findings represent the state of the app at the time of this assessment. Apps are updated regularly, and security practices may change between versions.

    App Details

    FieldValue
    App NameParis - Tu Tienda Online
    Package IDcom.cencosud.parisapp.android
    Version4.2.3 (Build 329)
    Scan DateJanuary 23, 2026

    Right of Reply

    Developer not yet contacted