CITT

    Scan results

    Bluecoins Finance & Budget

    Android

    Bluecoins is a minimalist finance and budget management app for expense tracking, account reconciliation, and financial reporting. Features cloud sync via Google Drive/Dropbox, multi-currency support, and generates customizable reports. Rated 4.4★ from 40k+ reviews.

    CITT SCORE
    40
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Budget tracking with Dropbox and Google Drive sync

    Not For: Storing sensitive account details in the app

    What It Means For You

    Financial records in this app are handled with some data protections that fall short of expectations. Ads are powered by Google, and app usage is tracked by Firebase Analytics. Budgets and records can sync to Dropbox, Google Drive, or OneDrive.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (20)

    Data Security

    7 total
    2 Critical
    2 High
    2 Medium
    1 Low

    Network Security

    1 total
    1 High

    Code Security

    5 total
    2 High
    3 Medium

    Privacy

    4 total
    2 High
    2 Medium

    Third-Party Risk

    3 total
    3 Medium

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, Google Mobile Ads, Dropbox SDK, Google Drive SDK, Microsoft OneDrive SDK, Google Tink, Apache HttpClient

    Security Strengths

    • ✓Modern Android architecture (Jetpack Compose, Kotlin, Hilt)
    • ✓OAuth 2.0 for cloud authentication
    • ✓Biometric authentication support
    • ✓Android backup correctly disabled
    • ✓No custom deep links (reduced attack surface)
    • ✓YubiKey hardware security key support
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    financial
    sensitive data
    cloud sync
    ads
    analytics
    sms

    Package

    com.rammigsoftware.bluecoins

    Version

    13.0.589

    Analysis Date

    Feb 2, 2026

    Classes Analyzed

    5,571

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (2 critical, 2 high, 2 medium, 1 low)

    Network Security - 1 finding (1 high)

    Code Safety - 0 findings

    Privacy - 4 findings (2 high, 2 medium)

    Privacy Concerns

    What Data is Collected

    • App usage and behavior: Firebase Analytics monitors how users navigate and use features throughout the app
    • Crash and diagnostic data: Firebase Crashlytics collects technical reports when the app encounters errors
    • Advertising data: Google Mobile Ads collects identifiers to show targeted advertisements

    Third-Party Data Sharing

    • Google - Receives usage patterns, diagnostic reports, and advertising identifiers
    • Dropbox, Google Drive, Microsoft OneDrive - Receive copies of financial records if cloud sync is enabled

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy45/100
    Data Security25/100
    Network Security70/100
    Code Safety60/100
    Data Collection55/100
    Data Sharing50/100
    User Control60/100

    Positive Security Features

    No positive security practices were identified in this version of the app.

    Areas for Improvement

    • Financial data stored on the device lacks sufficient protection, making it possible for other software to access records without user consent.
    • A weakness in how the app handles network connections means data traveling between the phone and cloud services may not be fully protected on public Wi-Fi.
    • The app shares usage behavior and advertising identifiers with Google, with limited options available for users to reduce or opt out of this sharing.

    About This Analysis

    This scorecard is based on static analysis of the app's code and configuration. It reflects the state of the app at the time of the scan and may not capture issues introduced in later versions.

    App Details

    • App: Bluecoins Finance & Budget
    • Package ID: com.rammigsoftware.bluecoins
    • Version: 13.0.589
    • Scan Date: February 2, 2026
    • Platform: Android

    Right of Reply

    Developer not yet contacted