CITT

    Scan results

    App-Elles

    Android

    App-Elles is a French mobile app designed for victims and witnesses of gender-based and sexual violence, offering SOS alerts, emergency services contact, real-time location sharing, and resources across 15+ countries with encrypted communications and GDPR compliance.

    CITT SCORE
    50
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Women using a personal safety alert tool

    What It Means For You

    User location is accessed continuously to power alerts and proximity features, and the app scans for nearby Bluetooth beacons to monitor physical surroundings. Performance and usage data from user sessions is collected by Firebase and shared with third-party services. User controls are available, but some data leaves the device regardless.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (12)

    Data Security

    4 total
    1 Critical
    2 High
    1 Medium

    Network Security

    2 total
    2 Medium

    Code Security

    4 total
    1 Critical
    1 High
    2 Medium

    Privacy

    1 total
    1 Medium

    Third-Party Risk

    1 total
    1 Critical

    Third-Party Services

    WaryMe SDK, Firebase Cloud Messaging, Firebase Performance Monitoring, Google Maps SDK, Google Play Services, OpenStreetMap, AltBeacon, Nordic BLE Scanner, Glide, Google Tink

    Security Strengths

    • ✓Zero analytics and advertising tracking (best-in-class privacy)
    • ✓EncryptedSharedPreferences with AES-256-GCM and hardware-backed keys for App-Elles tokens
    • ✓No pre-consent tracking (GDPR/CCPA compliant)
    • ✓Code obfuscation with ProGuard/R8
    • ✓Minimal and secure WebView implementation
    • ✓Proper Bearer token authentication with auto-refresh
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    safety
    emergency
    location
    sensitive data
    camera
    contacts
    health
    social

    Package

    fr.resonantes.app_elles

    Version

    6.0.18

    Analysis Date

    Jan 20, 2026

    Classes Analyzed

    1,428

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (1 critical, 2 high, 1 medium)

    Network Security - 2 findings (2 medium)

    Code Safety - 0 findings

    Privacy - 1 finding (1 medium)

    Privacy Concerns

    What Data is Collected

    • Precise location data, accessed continuously while the app is running
    • Bluetooth proximity signals from nearby devices and beacons
    • Session performance and usage metrics

    Third-Party Data Sharing

    This app shares data with the following third-party services:

    • WaryMe SDK
    • Firebase Cloud Messaging
    • Firebase Performance Monitoring
    • Google Maps SDK
    • Google Play Services
    • OpenStreetMap
    • AltBeacon
    • Nordic BLE Scanner
    • Glide
    • Google Tink

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy55/100
    Data Security35/100
    Network Security75/100
    Code Safety40/100
    Data Collection85/100
    Data Sharing60/100
    User Control80/100

    Positive Security Features

    • No notable positive security features were identified in this version.

    Areas for Improvement

    • Sensitive data stored on the device may not be fully protected if the device is accessed by another person.
    • The app's code could be better hardened to reduce the risk of misuse by outside parties.
    • The range of data shared with third-party services could be narrowed to limit how much personal information leaves the app.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and observed behavior. Scores reflect security and privacy practices found in the version analyzed and may change with future updates.

    App Details

    • App Name: App-Elles
    • Package ID: fr.resonantes.app_elles
    • Version: 6.0.18
    • Scan Date: January 20, 2026

    Right of Reply

    Developer not yet contacted