# Security & Privacy Scorecard

## Avans One

**Version:** 1.2.0 (Build 35)  
**Analyzed:** 2026-03-25

## What This Means for You

Usage behavior is tracked by Firebase Analytics and Datadog to monitor app performance. User activity may be used to improve the service, but is not shared with advertising networks. Google Sign-In handles login, meaning Google sees when and how often the app is used.

## Recommendation: Trustworthy

**Best For:** Avans students managing their schedule daily

## Key Findings

**Data Security** - 2 findings (1 medium, 1 info)

**Network Security** - 2 findings (2 info)

**Code Safety** - 0 findings

**Privacy** - 4 findings (2 high, 2 medium)

## Privacy Concerns

### What Data is Collected

The app collects account identity through Google Sign-In and monitors app usage through Firebase Analytics and Datadog RUM. This includes session activity, feature interactions, and device performance metrics sent to Google and Datadog servers.

### Third-Party Data Sharing

Data is shared with the following services:

- **Firebase Analytics** (Google) - collects usage and behavioral patterns
- **Firebase Cloud Messaging** (Google) - delivers push notifications to the device
- **Datadog RUM** - monitors app performance and session activity
- **Google Sign-In** (Google) - manages account login
- **Google ML Kit Barcode** (Google) - processes barcode scanning on the device
- **Apollo GraphQL** - handles data requests between the app and its servers
- **Expo Updates** - manages app update delivery

All identified services serve functional or analytical purposes, not advertising.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 96/100 |
| Privacy | 75/100 |
| Data Security | 96/100 |
| Network Security | 100/100 |
| Code Safety | 98/100 |
| Data Collection | 73/100 |
| Data Sharing | 100/100 |
| User Control | 78/100 |

## Positive Security Features

- Strong network communication practices, reflected in a perfect Network Security score
- High code safety standards maintained throughout the app

## Areas for Improvement

- The app could provide clearer information about what behavioral data is collected and how long it is retained.
- Users would benefit from more granular controls over analytics and data collection preferences.
- Privacy disclosures could be more transparent about the scope of information shared with Google services.

---

## About This Analysis

This scorecard is based on static analysis of the app's code, examining security and privacy practices. Scores reflect the app's behavior at the version analyzed and may not reflect subsequent updates.

### App Details

- **App Name:** Avans One
- **Package ID:** com.avans.avansonern
- **Version:** 1.2.0 (Build 35)
- **Scan Date:** 2026-03-25