# Security & Privacy Scorecard

## Barry's

**App:** Barry's  
**Package:** com.marianatek.barrysbootcamp  
**Version:** 1.43.3 (Build 1433)  
**Scan Date:** 2026-02-12  

**Overall Score:** 45/100 (Security) | 30/100 (Privacy)

## What This Means for You

In-app behavior and usage patterns are tracked by Mixpanel and shared with third parties. Payment processing goes through Stripe, which handles user card details. Account activity and session data are collected to personalize the user experience, and users have limited control over how that data is used or deleted.

## Recommendation: Use With Caution

**Best For:** Barry's regulars comfortable with behavioral analytics

## Key Findings

**Data Security** - 6 findings (1 critical, 1 high, 2 medium, 2 low)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 6 findings (1 critical, 3 high, 1 medium, 1 low)

## Privacy Concerns

### What Data is Collected

- Account information and session data used to manage bookings and membership
- Behavioral and usage patterns captured through Mixpanel analytics
- Payment card details processed by Stripe
- Location data accessed through Google Maps
- Device and diagnostic data collected by Coralogix RUM

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Stripe** - Handles user payment card details for class bookings
- **Mixpanel** - Receives in-app behavior and usage patterns
- **Coralogix RUM** - Collects real-time diagnostic and session data
- **ConfigCat** - Manages feature availability and app configuration
- **Google Play Services** - Core platform services
- **Google Maps** - Location and mapping features
- **Google Pay** - Alternative payment processing
- **Google Identity** - Manages sign-in and authentication
- **AppAuth** - Handles authorization flows

## Understanding the Scores

| Category | Score |
|----------|-------|
| Security | 45/100 |
| Privacy | 30/100 |
| Data Security | 40/100 |
| Network Security | 100/100 |
| Code Safety | 55/100 |
| Data Collection | 35/100 |
| Data Sharing | 40/100 |
| User Control | 25/100 |

## Positive Security Features

- No notable positive security features were identified in this version of the app.

## Areas for Improvement

- Limit the behavioral data passed to analytics services so usage patterns are not shared with multiple third parties without explicit, informed consent.
- Improve user ability to request deletion of account activity and session history, as user control over personal data is currently limited.
- Reduce the number of third-party services that receive access to user data, particularly those involved in behavioral profiling.

---

## About This Analysis

This scorecard is based on automated static analysis of the app's code and configuration. It reflects the app's data handling practices, security implementation, and privacy posture at the time of the scan.

### App Details

- **App Name:** Barry's
- **Package ID:** com.marianatek.barrysbootcamp
- **Version:** 1.43.3 (Build 1433)
- **Scan Date:** 2026-02-12
- **Platform:** Android