CITT

    Scan results

    Parsnip: Learn to Cook

    Android

    Learn to cook with Parsnip - the fun, effective app that helps you build real cooking skills through quick, bite-sized lessons. Interactive, game-like cooking lessons keep you motivated as you learn practical skills.

    CITT SCORE
    85
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Home cooks comfortable with standard analytics

    What It Means For You

    In-app behavior and usage patterns are shared with Segment, Firebase, and Branch.io for analytics and attribution. Purchase activity goes through RevenueCat and Google Play Billing. Account data is stored and managed via Firebase.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (8)

    Data Security

    2 total
    2 High

    Code Security

    2 total
    2 Medium

    Privacy

    3 total
    2 Critical
    1 High

    Third-Party Risk

    1 total
    1 Low

    Third-Party Services

    Segment Analytics, Firebase (Firestore, Auth, Cloud Functions, Remote Config, Crashlytics, Messaging, Analytics), Branch.io, Customer.io, RevenueCat, Google Play Billing, Google reCAPTCHA

    Security Strengths

    • ✓Firebase App Check enabled with Play Integrity attestation
    • ✓Backup disabled (prevents ADB data extraction)
    • ✓HTTPS everywhere (encrypted in transit)
    • ✓Firebase Auth tokens encrypted via Android Keystore
    • ✓Modern architecture (Kotlin, Jetpack Compose, Hilt DI, MVVM)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    education
    analytics
    tracking
    sensitive data
    subscription

    Package

    com.tapforce.parsnip

    Version

    2.2.0 (versionCode: 210)

    Analysis Date

    Feb 7, 2026

    Classes Analyzed

    18,412

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 2 findings (2 high)

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 3 findings (2 critical, 1 high)

    Privacy Concerns

    What Data is Collected

    Parsnip collects account information, in-app behavior, usage patterns, and purchase history. This data supports login, personalization, and payment processing.

    Third-Party Data Sharing

    Activity data is shared with the following third-party services:

    • Segment Analytics - behavioral data routing and analytics
    • Firebase - account management, crash reporting, push notifications, and remote configuration
    • Branch.io - attribution and referral tracking
    • Customer.io - user messaging and engagement
    • RevenueCat - subscription and purchase management
    • Google Play Billing - payment processing
    • Google reCAPTCHA - account security and bot protection

    Understanding the Scores

    CategoryScore
    Security90/100
    Privacy80/100
    Data Security88/100
    Network Security100/100
    Code Safety92/100
    Data Collection80/100
    Data Sharing85/100
    User Control80/100

    Positive Security Features

    • All network communication is handled securely across every connection the app makes.
    • The app's code structure reflects strong integrity and safety practices throughout.
    • Account management is built on a well-established, widely-used identity platform.

    Areas for Improvement

    • Behavioral data flows to multiple third-party services, each operating under its own data practices and retention policies outside the app developer's direct control.
    • Some data stored by the app warrants stronger protections, as reflected in the data security findings.
    • With several external services receiving user information, reviewing Parsnip's privacy policy can help users understand how each one uses and retains data.

    About This Analysis

    App Details

    FieldValue
    AppParsnip: Learn to Cook
    Packagecom.tapforce.parsnip
    Version2.2.0 (versionCode 210)
    Scan Date2026-02-07
    PlatformAndroid

    Right of Reply

    Developer not yet contacted