Barry's Security & Privacy Scorecard
Android
In-app behavior and usage patterns are tracked by Mixpanel and shared with third parties. Payment processing goes through Stripe, which handles user card details. Account activity and session data are collected to personalize the user experience, and users have limited control over how that data is used or deleted.
Best for
Barry's regulars comfortable with behavioral analytics
Findings
- 0 critical
- 0 high
- 0 medium
- 0 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- Unencrypted OAuth Token Storage
- Unencrypted Room Database
- Missing Root Detection
Top privacy issues
- No Analytics Opt-Out Mechanism
- Pervasive User Identification and Profiling
- Special Category Health Data Tracking Without Explicit Consent
Full analysis
Barry's
App: Barry's
Package: com.marianatek.barrysbootcamp
Version: 1.43.3 (Build 1433)
Scan Date: 2026-02-12
Overall Score: 45/100 (Security) | 30/100 (Privacy)
What This Means for You
In-app behavior and usage patterns are tracked by Mixpanel and shared with third parties. Payment processing goes through Stripe, which handles user card details. Account activity and session data are collected to personalize the user experience, and users have limited control over how that data is used or deleted.
Recommendation: Use With Caution
Best For: Barry's regulars comfortable with behavioral analytics
Key Findings
Data Security - 6 findings (1 critical, 1 high, 2 medium, 2 low)
Network Security - 0 findings
Code Safety - 0 findings
Privacy - 6 findings (1 critical, 3 high, 1 medium, 1 low)
Privacy Concerns
What Data is Collected
- Account information and session data used to manage bookings and membership
- Behavioral and usage patterns captured through Mixpanel analytics
- Payment card details processed by Stripe
- Location data accessed through Google Maps
- Device and diagnostic data collected by Coralogix RUM
Third-Party Data Sharing
User data is shared with the following third-party services:
- Stripe - Handles user payment card details for class bookings
- Mixpanel - Receives in-app behavior and usage patterns
- Coralogix RUM - Collects real-time diagnostic and session data
- ConfigCat - Manages feature availability and app configuration
- Google Play Services - Core platform services
- Google Maps - Location and mapping features
- Google Pay - Alternative payment processing
- Google Identity - Manages sign-in and authentication
- AppAuth - Handles authorization flows
Understanding the Scores
| Category | Score |
|---|---|
| Security | 45/100 |
| Privacy | 30/100 |
| Data Security | 40/100 |
| Network Security | 100/100 |
| Code Safety | 55/100 |
| Data Collection | 35/100 |
| Data Sharing | 40/100 |
| User Control | 25/100 |
Positive Security Features
- No notable positive security features were identified in this version of the app.
Areas for Improvement
- Limit the behavioral data passed to analytics services so usage patterns are not shared with multiple third parties without explicit, informed consent.
- Improve user ability to request deletion of account activity and session history, as user control over personal data is currently limited.
- Reduce the number of third-party services that receive access to user data, particularly those involved in behavioral profiling.
About This Analysis
This scorecard is based on automated static analysis of the app's code and configuration. It reflects the app's data handling practices, security implementation, and privacy posture at the time of the scan.
App Details
- App Name: Barry's
- Package ID: com.marianatek.barrysbootcamp
- Version: 1.43.3 (Build 1433)
- Scan Date: 2026-02-12
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 38/100 |