Budget App & Tracker: Spendee Security & Privacy Scorecard

Android

32
Overall trust score
Unsafe
30
Security
35
Privacy

Usage behavior and financial tracking habits are shared with Firebase, Google Analytics, and Facebook. Linking bank accounts or cards means user financial data may not be fully protected. User activity is used to improve targeting across advertising networks not selected by the user.

Best for

Budget tracking with Google and Facebook data sharing

Avoid if

You keep sensitive financial accounts linked to apps

Findings

  • 3 critical
  • 3 high
  • 6 medium
  • 3 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • Unencrypted AsyncStorage Contains Financial Data and Authentication Tokens
  • SSL Certificate Validation Can Be Bypassed via "Trusty" Mode
  • JavaScript Interface Exposed to All Web Content

Top privacy issues

  • Firebase Analytics Auto-Initialization Before User Consent (GDPR Violation)
  • Third-Party Cookies Enable Cross-Site Tracking
  • Advertising ID Collection Enabled by Default

Full analysis

Budget App & Tracker: Spendee

Security Score: 30/100 | Privacy Score: 35/100

What This Means for You

Usage behavior and financial tracking habits are shared with Firebase, Google Analytics, and Facebook. Linking bank accounts or cards means user financial data may not be fully protected. User activity is used to improve targeting across advertising networks not selected by the user.

Recommendation: Use With Caution

Best For: Budget tracking with Google and Facebook data sharing
Avoid If: Sensitive financial accounts are linked to apps

Key Findings

Data Security - 6 findings (1 critical, 1 high, 2 medium, 1 low, 1 info)

Network Security - 2 findings (1 critical, 1 medium)

Code Safety - 0 findings

Privacy - 3 findings (1 critical, 1 medium, 1 low)

Privacy Concerns

What Data is Collected

Spendee collects transaction history, spending categories, linked bank account details, and in-app behavior. Device identifiers and usage patterns are gathered by analytics and advertising services running in the background.

Third-Party Data Sharing

Data is shared with the following services:

  • Firebase (Google) - Cloud storage, authentication, messaging, and analytics
  • Google Analytics - Behavioral tracking and usage profiling
  • Facebook SDK - Cross-app behavioral profiling and advertising targeting
  • Plaid - Linking to bank accounts and financial institutions
  • Sentry - Application error and performance data

Understanding the Scores

Category Score
Security 30/100
Privacy 35/100
Data Security 25/100
Network Security 45/100
Code Safety 50/100
Data Collection 85/100
Data Sharing 80/100
User Control 70/100

Positive Security Features

  • Firebase Authentication provides a recognized infrastructure for managing user accounts and sign-in sessions.
  • Crash and error reporting through Sentry and Firebase Crashlytics supports ongoing stability improvements.
  • Google Sign-In is available as an authentication option, reducing password-related risks for users who choose it.

Areas for Improvement

  • Data transmitted between the app and external services travels with less protection than expected for financial transactions.
  • The volume of behavioral data shared with advertising networks should be reduced, especially for users who connect bank accounts or payment cards.
  • Greater transparency about what financial data is retained, for how long, and who can access it would help users make an informed choice before linking accounts.

About This Analysis

Scores and findings are based on static analysis of the application package. Results reflect the state of the app at the time of analysis and are intended to help users make informed decisions about the apps they install.

App Details

  • App Name: Budget App & Tracker: Spendee
  • Package ID: com.cleevio.spendee
  • Version: 5.5.49 (build 1740000068)
  • Platform: Android
  • Scan Date: January 26, 2026

Versions & scan history

ScanDateOverall score
#1 (current) 32/100