# Security & Privacy Scorecard

## EPOKA Interactive System (EIS)

**Package:** com.epoka.eismobile  
**Version:** 1.0.7 (Build 13)  
**Scan Date:** 2026-01-25

## What This Means for You

Usage activity is tracked by Firebase Analytics and shared with Google services. User data may not be fully protected in how it is stored and transmitted. Outdated Google Play Services components from 2017 are still bundled with the app.

## Recommendation: Use With Caution

**Best For:** EPOKA students comfortable with Google analytics

## Key Findings

**Data Security** - 7 findings (1 critical, 4 high, 1 medium, 1 low)

**Network Security** - 4 findings (1 critical, 1 medium, 2 low)

**Code Safety** - 0 findings

**Privacy** - 6 findings (3 high, 3 medium)

## Privacy Concerns

### What Data is Collected

Firebase Analytics collects in-app behavior, session activity, and device details. Firebase Cloud Messaging and the Firebase Installations API register the device to receive push notifications. A deprecated Firebase Instance ID service is also present in this version of the app.

### Third-Party Data Sharing

Activity data is shared with Google through Firebase Analytics, Firebase Cloud Messaging, Firebase Installations API, and Google Sign-In. Google Play Services components from 2017 remain bundled and active within the app.

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 42/100 |
| Data Security | 28/100 |
| Network Security | 30/100 |
| Code Safety | 45/100 |
| Data Collection | 55/100 |
| Data Sharing | 85/100 |
| User Control | 35/100 |

## Positive Security Features

- No positive security practices were identified in this version of the app.

## Areas for Improvement

- How user data is stored and transmitted could be strengthened to better protect personal information.
- Google Play Services components from 2017 remain in use; updating them would bring the app in line with current Google security standards.
- User ability to opt out of data collection or limit what information is shared with third parties is currently restricted.

---

## About This Analysis

### App Details

| Field | Value |
|---|---|
| App Name | EPOKA Interactive System (EIS) |
| Package | com.epoka.eismobile |
| Version | 1.0.7 (Build 13) |
| Scan Date | 2026-01-25 |