CITT

    Scan results

    Albert Heijn supermarkt

    Android

    Official Albert Heijn supermarket app for grocery shopping, loyalty management, and recipe discovery. Features barcode scanning, digital loyalty cards, shopping lists, and online ordering with home delivery or pickup options.

    CITT SCORE
    92
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Regular AH shoppers comfortable with standard analytics

    What It Means For You

    In-app activity, including browsing and purchase history, is shared with advertising and attribution partners such as Google Ads and AppsFlyer. Crash reports and performance data are automatically collected to improve the app. Payment details and account information are handled with strong protections.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (15)

    Data Security

    4 total
    2 Medium
    2 Info

    Network Security

    4 total
    1 Critical
    2 Medium
    1 Info

    Code Security

    1 total
    1 Low

    Privacy

    6 total
    1 Low
    5 Info

    Third-Party Services

    Adyen 3DS2, Batch, AppsFlyer, Firebase Crashlytics, Firebase Cloud Messaging, Firebase Performance, Firebase Remote Config, Embrace, Mopinion, Google Ads, Scandit, Flutter Secure Storage, Google reCAPTCHA

    Security Strengths

    • ✓Flutter Secure Storage with Android KeyStore
    • ✓Backup protection disabled
    • ✓Firebase Analytics explicitly disabled
    • ✓Batch SDK opted out by default
    • ✓Region-specific analytics controls
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    location
    camera
    ads
    sensitive data

    Package

    com.icemobile.albertheijn

    Version

    9.30.1

    Analysis Date

    Mar 3, 2026

    Classes Analyzed

    37,293

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 5 findings (2 medium, 3 info)

    Network Security - 4 findings (1 critical, 2 medium, 1 info)

    Code Safety - 0 findings

    Privacy - 6 findings (1 low, 5 info)

    Privacy Concerns

    What Data is Collected

    The app collects shopping history, browsing behavior within the app, and purchase activity. Performance and stability data, including crash reports, are gathered automatically in the background. Account details and payment information are required to use core features such as checkout and loyalty rewards.

    Third-Party Data Sharing

    User data is shared with the following third-party services:

    • Google Ads - Advertising and audience targeting
    • AppsFlyer - Attribution tracking to measure how users discovered the app
    • Firebase Crashlytics - Crash and stability reporting
    • Firebase Performance - App speed and reliability monitoring
    • Firebase Cloud Messaging - Push notifications
    • Firebase Remote Config - Feature configuration
    • Adyen 3DS2 - Payment processing
    • Batch - Push messaging and notifications
    • Embrace - Performance monitoring
    • Mopinion - In-app feedback collection
    • Scandit - Barcode and product scanning
    • Google reCAPTCHA - Fraud and bot protection

    Understanding the Scores

    CategoryScore
    Security85/100
    Privacy100/100
    Data Security92/100
    Network Security82/100
    Code Safety97/100
    Data Collection100/100
    Data Sharing100/100
    User Control100/100

    Positive Security Features

    • Payment processing runs through Adyen, a dedicated payment infrastructure that keeps card details separate from the app's own data systems.
    • Sensitive data stored on the device is protected using Flutter Secure Storage, which applies the phone's built-in security controls to keep saved information isolated from other apps.

    Areas for Improvement

    • One issue in the network layer affects how the app establishes secure connections to its servers. On untrusted networks such as public Wi-Fi, user data travels with less protection than expected.
    • Shopping and browsing data flows to multiple separate advertising and attribution services. Reducing the number of third-party data recipients would lower overall exposure.
    • Several medium-severity issues in data handling remain unresolved, which keeps the Data Security score below the level the app's otherwise strong Privacy performance would suggest.

    About This Analysis

    This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect the security and privacy practices found in the version analyzed and may change in future releases.

    App Details

    • App Name: Albert Heijn supermarkt
    • Package ID: com.icemobile.albertheijn
    • Version: 9.30.1
    • Scan Date: 2026-03-03
    • Platform: Android

    Right of Reply

    Developer not yet contacted