CITT

    Scan results

    EPOKA Interactive System (EIS)

    Android

    EIS Mobile helps EPOKA University students manage their academic life through a single native app—view grades and records, select courses, request documents, track finances, and receive notifications all from one platform.

    CITT SCORE
    38
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: EPOKA students comfortable with Google analytics

    What It Means For You

    Usage activity is tracked by Firebase Analytics and shared with Google services. User data may not be fully protected in how it is stored and transmitted. Outdated Google Play Services components from 2017 are still bundled with the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (24)

    Data Security

    7 total
    1 Critical
    4 High
    1 Medium
    1 Low

    Network Security

    4 total
    1 Critical
    1 Medium
    2 Low

    Code Security

    4 total
    1 Critical
    1 Medium
    2 Low

    Privacy

    6 total
    3 High
    3 Medium

    Third-Party Risk

    1 total
    1 Critical

    Permission Usage

    2 total
    1 Medium
    1 Low

    Third-Party Services

    Firebase Cloud Messaging, Firebase Installations API, Firebase Analytics, Firebase Instance ID (deprecated v21.1.0), Google Sign-In, Google Play Services (v12.4.51 from 2017)

    Security Strengths

    • ✓No third-party data sharing (only Google services)
    • ✓No advertising or social media tracking SDKs
    • ✓Minimal permission footprint (no location, camera, contacts)
    • ✓Flutter architecture limits native attack surface
    • ✓All SharedPreferences use MODE_PRIVATE
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    education
    financial
    sensitive data
    student records
    university
    authentication
    notifications

    Package

    com.epoka.eismobile

    Version

    1.0.7 (Build 13)

    Analysis Date

    Jan 25, 2026

    Classes Analyzed

    1,804

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (1 critical, 4 high, 1 medium, 1 low)

    Network Security - 4 findings (1 critical, 1 medium, 2 low)

    Code Safety - 0 findings

    Privacy - 6 findings (3 high, 3 medium)

    Privacy Concerns

    What Data is Collected

    Firebase Analytics collects in-app behavior, session activity, and device details. Firebase Cloud Messaging and the Firebase Installations API register the device to receive push notifications. A deprecated Firebase Instance ID service is also present in this version of the app.

    Third-Party Data Sharing

    Activity data is shared with Google through Firebase Analytics, Firebase Cloud Messaging, Firebase Installations API, and Google Sign-In. Google Play Services components from 2017 remain bundled and active within the app.

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy42/100
    Data Security28/100
    Network Security30/100
    Code Safety45/100
    Data Collection55/100
    Data Sharing85/100
    User Control35/100

    Positive Security Features

    • No positive security practices were identified in this version of the app.

    Areas for Improvement

    • How user data is stored and transmitted could be strengthened to better protect personal information.
    • Google Play Services components from 2017 remain in use; updating them would bring the app in line with current Google security standards.
    • User ability to opt out of data collection or limit what information is shared with third parties is currently restricted.

    About This Analysis

    App Details

    FieldValue
    App NameEPOKA Interactive System (EIS)
    Packagecom.epoka.eismobile
    Version1.0.7 (Build 13)
    Scan Date2026-01-25

    Right of Reply

    Developer not yet contacted