Budget App & Tracker: Spendee Security & Privacy Scorecard
Android
Usage behavior and financial tracking habits are shared with Firebase, Google Analytics, and Facebook. Linking bank accounts or cards means user financial data may not be fully protected. User activity is used to improve targeting across advertising networks not selected by the user.
Best for
Budget tracking with Google and Facebook data sharing
Avoid if
You keep sensitive financial accounts linked to apps
Findings
- 3 critical
- 3 high
- 6 medium
- 3 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Unencrypted AsyncStorage Contains Financial Data and Authentication Tokens
- SSL Certificate Validation Can Be Bypassed via "Trusty" Mode
- JavaScript Interface Exposed to All Web Content
Top privacy issues
- Firebase Analytics Auto-Initialization Before User Consent (GDPR Violation)
- Third-Party Cookies Enable Cross-Site Tracking
- Advertising ID Collection Enabled by Default
Full analysis
Budget App & Tracker: Spendee
Security Score: 30/100 | Privacy Score: 35/100
What This Means for You
Usage behavior and financial tracking habits are shared with Firebase, Google Analytics, and Facebook. Linking bank accounts or cards means user financial data may not be fully protected. User activity is used to improve targeting across advertising networks not selected by the user.
Recommendation: Use With Caution
Best For: Budget tracking with Google and Facebook data sharing
Avoid If: Sensitive financial accounts are linked to apps
Key Findings
Data Security - 6 findings (1 critical, 1 high, 2 medium, 1 low, 1 info)
Network Security - 2 findings (1 critical, 1 medium)
Code Safety - 0 findings
Privacy - 3 findings (1 critical, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
Spendee collects transaction history, spending categories, linked bank account details, and in-app behavior. Device identifiers and usage patterns are gathered by analytics and advertising services running in the background.
Third-Party Data Sharing
Data is shared with the following services:
- Firebase (Google) - Cloud storage, authentication, messaging, and analytics
- Google Analytics - Behavioral tracking and usage profiling
- Facebook SDK - Cross-app behavioral profiling and advertising targeting
- Plaid - Linking to bank accounts and financial institutions
- Sentry - Application error and performance data
Understanding the Scores
| Category | Score |
|---|---|
| Security | 30/100 |
| Privacy | 35/100 |
| Data Security | 25/100 |
| Network Security | 45/100 |
| Code Safety | 50/100 |
| Data Collection | 85/100 |
| Data Sharing | 80/100 |
| User Control | 70/100 |
Positive Security Features
- Firebase Authentication provides a recognized infrastructure for managing user accounts and sign-in sessions.
- Crash and error reporting through Sentry and Firebase Crashlytics supports ongoing stability improvements.
- Google Sign-In is available as an authentication option, reducing password-related risks for users who choose it.
Areas for Improvement
- Data transmitted between the app and external services travels with less protection than expected for financial transactions.
- The volume of behavioral data shared with advertising networks should be reduced, especially for users who connect bank accounts or payment cards.
- Greater transparency about what financial data is retained, for how long, and who can access it would help users make an informed choice before linking accounts.
About This Analysis
Scores and findings are based on static analysis of the application package. Results reflect the state of the app at the time of analysis and are intended to help users make informed decisions about the apps they install.
App Details
- App Name: Budget App & Tracker: Spendee
- Package ID: com.cleevio.spendee
- Version: 5.5.49 (build 1740000068)
- Platform: Android
- Scan Date: January 26, 2026
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 32/100 |