# Security & Privacy Scorecard

## Ubank Money App

## What This Means for You

In-app behavior, including how users tap and navigate, is profiled by a behavioral analytics service running inside the app. Usage data is shared with marketing and engagement platforms, which may result in targeted notifications based on banking activity. How data is secured on the device falls below the standard expected for a financial app.

## Recommendation: Use With Caution

**Best For:** Everyday banking users comfortable with behavioral analytics
**Avoid If:** Users who prefer banks not profile their tap patterns

## Key Findings

**Data Security** - 4 findings (1 critical, 1 high, 2 medium)

**Network Security** - 1 finding (1 high)

**Code Safety** - 0 findings

**Privacy** - 5 findings (1 critical, 1 high, 3 medium)

## Privacy Concerns

### What Data is Collected

The app collects behavioral data about how users tap, scroll, and navigate through screens. Device identifiers, session usage patterns, and signals tied to user interactions are gathered to support analytics, fraud detection, and marketing services. Financial activity generated during user sessions may be captured and used for engagement and notification purposes.

### Third-Party Data Sharing

Data is shared with the following third-party services:

- **BioCatch** - Behavioral biometrics profiling based on user tap and navigation patterns
- **MoEngage** - Mobile marketing and push notification targeting
- **Firebase** - Usage analytics and crash reporting
- **AppsFlyer** - Mobile attribution and marketing analytics
- **Tealium** - Data collection and audience management
- **Intercom** - Customer support and in-app messaging
- **Akamai Bot Manager** - Bot detection and traffic management
- **PingIdentity** - Identity and access management
- **Google Analytics** - Usage analytics

## Understanding the Scores

- **Security Score:** 72/100
- **Privacy Score:** 65/100
- **Data Security:** 60/100
- **Network Security:** 88/100
- **Code Safety:** 82/100
- **Data Collection:** 70/100
- **Data Sharing:** 75/100
- **User Control:** 68/100

Scores run from 0 to 100. Higher is better. Financial apps are held to a stricter standard than general consumer apps.

## Positive Security Features

This version of the app did not include observable security strengths in its current configuration.

## Areas for Improvement

- On-device data storage should be strengthened to better protect banking information if the device is accessed without authorization.
- The ability to control what behavioral data is collected and shared with marketing platforms should be more visible and easier to exercise from within the app.
- The number of third-party analytics and marketing services receiving user behavioral data is higher than expected for a financial application.

---

## About This Analysis

This scorecard is based on automated static analysis of the app binary. Results reflect the app version analyzed and may not capture all server-side behavior or changes introduced in later updates.

### App Details

| Field | Value |
|---|---|
| App Name | Ubank Money App |
| Package ID | au.com.bank86400 |
| Version | 11.257.1 (build 1125701) |
| Scan Date | 2026-02-09 |