# Security & Privacy Scorecard

## Budget App & Tracker: Spendee

**Security Score: 30/100 | Privacy Score: 35/100**

## What This Means for You

Usage behavior and financial tracking habits are shared with Firebase, Google Analytics, and Facebook. Linking bank accounts or cards means user financial data may not be fully protected. User activity is used to improve targeting across advertising networks not selected by the user.

## Recommendation: Use With Caution

**Best For:** Budget tracking with Google and Facebook data sharing
**Avoid If:** Sensitive financial accounts are linked to apps

## Key Findings

**Data Security** - 6 findings (1 critical, 1 high, 2 medium, 1 low, 1 info)

**Network Security** - 2 findings (1 critical, 1 medium)

**Code Safety** - 0 findings

**Privacy** - 3 findings (1 critical, 1 medium, 1 low)

## Privacy Concerns

### What Data is Collected

Spendee collects transaction history, spending categories, linked bank account details, and in-app behavior. Device identifiers and usage patterns are gathered by analytics and advertising services running in the background.

### Third-Party Data Sharing

Data is shared with the following services:

- **Firebase (Google)** - Cloud storage, authentication, messaging, and analytics
- **Google Analytics** - Behavioral tracking and usage profiling
- **Facebook SDK** - Cross-app behavioral profiling and advertising targeting
- **Plaid** - Linking to bank accounts and financial institutions
- **Sentry** - Application error and performance data

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 30/100 |
| Privacy | 35/100 |
| Data Security | 25/100 |
| Network Security | 45/100 |
| Code Safety | 50/100 |
| Data Collection | 85/100 |
| Data Sharing | 80/100 |
| User Control | 70/100 |

## Positive Security Features

- Firebase Authentication provides a recognized infrastructure for managing user accounts and sign-in sessions.
- Crash and error reporting through Sentry and Firebase Crashlytics supports ongoing stability improvements.
- Google Sign-In is available as an authentication option, reducing password-related risks for users who choose it.

## Areas for Improvement

- Data transmitted between the app and external services travels with less protection than expected for financial transactions.
- The volume of behavioral data shared with advertising networks should be reduced, especially for users who connect bank accounts or payment cards.
- Greater transparency about what financial data is retained, for how long, and who can access it would help users make an informed choice before linking accounts.

---

## About This Analysis

Scores and findings are based on static analysis of the application package. Results reflect the state of the app at the time of analysis and are intended to help users make informed decisions about the apps they install.

### App Details

- **App Name:** Budget App & Tracker: Spendee
- **Package ID:** com.cleevio.spendee
- **Version:** 5.5.49 (build 1740000068)
- **Platform:** Android
- **Scan Date:** January 26, 2026