CITT

    Scan results

    Suno - AI Music & Songs Maker

    Android

    Suno is an AI music generation app that transforms your ideas into fully-produced songs and beats powered by advanced AI. Create music from text prompts, audio, images, or videos with no instruments needed. Includes playlist creation, lyrics generation, and music discovery features.

    CITT SCORE
    52
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: AI music creators comfortable with standard analytics

    What It Means For You

    User activity is tracked by several third-party services including Braze, Segment, and Singular, which share usage patterns for marketing and attribution. Account and payment data flow through multiple external platforms. Users receive targeted messaging based on how they use the app.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (13)

    Data Security

    3 total
    1 Critical
    2 High

    Network Security

    2 total
    1 High
    1 Medium

    Code Security

    6 total
    3 Critical
    1 High
    2 Medium

    Privacy

    2 total
    2 High

    Third-Party Services

    RevenueCat, Braze, Segment, Firebase, Statsig, Singular, Lokalise, Clerk, hCaptcha, Google Play Billing, Google Cast, Ably, Media3

    Security Strengths

    • ✓Modern tech stack (Kotlin, Jetpack Compose)
    • ✓HTTPS enforced in production
    • ✓File access disabled in WebViews
    • ✓Room database prevents SQL injection
    • ✓App Links with autoVerify
    • ✓MODE_PRIVATE for SharedPreferences
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    social
    ads
    location
    sensitive data

    Package

    com.suno.android

    Version

    1.37.0 (Build 223)

    Analysis Date

    Dec 18, 2025

    Classes Analyzed

    18,473

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 3 findings (1 critical, 2 high)

    Network Security - 2 findings (1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 2 findings (2 high)

    Privacy Concerns

    What Data is Collected

    Suno collects behavioral and usage data including how users interact with music creation features, session activity, and engagement patterns. Account information, subscription details, and payment processing data are also collected. Device identifiers are used to link activity across sessions.

    Third-Party Data Sharing

    User data reaches multiple external companies. Braze and Segment receive behavioral and engagement data used for marketing automation and audience analytics. Singular receives attribution data to understand how the app was discovered and installed. Firebase handles performance and crash data. RevenueCat processes subscription and purchase history. Statsig runs experiments on app features presented to users. Ably, Clerk, hCaptcha, Google Play Billing, Google Cast, Lokalise, and Media3 each receive data relevant to their specific functions.

    Understanding the Scores

    CategoryScore
    Security48/100
    Privacy58/100
    Data Security42/100
    Network Security75/100
    Code Safety45/100
    Data Collection60/100
    Data Sharing55/100
    User Control50/100

    Positive Security Features

    • hCaptcha integration protects account actions from automated abuse.
    • Clerk provides a dedicated authentication layer for managing account access.

    Areas for Improvement

    • Usage data is shared with over a dozen third-party services; reducing this number would limit how broadly user behavior is profiled across the advertising ecosystem.
    • Stronger safeguards around how account and payment data are stored would better protect user information if any connected service experienced a problem.
    • More transparent controls over which analytics services receive user data would give users greater say in how their information is used.

    About This Analysis

    This scorecard reflects static analysis of the app's code and configuration at the time of the scan. Scores may change as the app is updated.

    App Details

    • App: Suno - AI Music & Songs
    • Package ID: com.suno.android
    • Version: 1.37.0 (Build 223)
    • Scan Date: 2025-12-18
    • Platform: Android

    Right of Reply

    Developer not yet contacted