# Security & Privacy Scorecard

## Monerujo - Monero Wallet

## What This Means for You

Transactions stay on the device and are broadcast directly to the Monero network. Exchange rate data is fetched from Kraken, Yadio, and the European Central Bank, and swap services are handled through Exolix. None of these services receive wallet keys or personal identity.

## Recommendation: Very Secure

**Best For:** Monero holders who want a self-custody wallet

## Key Findings

**Data Security** - 0 findings

**Network Security** - 2 findings (1 medium, 1 info)

**Code Safety** - 0 findings

**Privacy** - 0 findings

## Privacy Concerns

### What Data is Collected

Monerujo collects no personal data. The app operates entirely on the device. Exchange rate lookups send only a request for current pricing, with no identifying information attached.

### Third-Party Data Sharing

Exchange rate data is fetched from Kraken, Yadio, and the European Central Bank. Swap transactions are routed through Exolix. These services receive only the data required to fulfill their function (current rates, swap amounts) and do not receive wallet keys, address history, or identity.

## Understanding the Scores

- **Security:** 96/100
- **Privacy:** 97/100
- **Data Security:** 100/100
- **Network Security:** 95/100
- **Code Safety:** 100/100
- **Data Collection:** 100/100
- **Data Sharing:** 100/100
- **User Control:** 100/100

## Positive Security Features

- Optional Tor network routing keeps the user's IP address private when broadcasting transactions
- No advertising or behavioral tracking libraries are present in the app
- No personal data is collected or transmitted outside the device
- Wallet keys remain on the device at all times and are never sent to any server

## Areas for Improvement

- Connections to external price-fetching and swap services could use stronger transport protections to reduce the risk of data being read on untrusted networks.
- Some network configuration settings do not apply the strongest available options, though this poses a low practical risk under typical usage conditions.

---

## About This Analysis

### App Details

- **App:** Monerujo - Monero Wallet
- **Package:** com.m2049r.xmrwallet
- **Version:** 4.1.7 'Exolix'
- **Platform:** Android
- **Scan Date:** 2026-03-21