# Security & Privacy Scorecard

## Partiful: Fun Party Invites

**Version:** 2.11.07 (Build 1370693) | **Scanned:** December 19, 2025

---

## What This Means for You

User activity, device data, and interactions are shared with six third-party companies including Facebook, Google Analytics, FullStory, and Amplitude. FullStory can record in-app sessions, meaning taps and navigation may be replayed by the developer. Data flows to advertising and analytics networks beyond what is needed to send an invite.

## Recommendation: Use With Caution

**Best For:** Social planners comfortable with broad data sharing
**Avoid If:** You keep your social circle or location habits private

## Key Findings

**Data Security** - 1 finding (1 critical)

**Network Security** - 1 finding (1 critical)

**Code Safety** - 0 findings

**Privacy** - 2 findings (2 critical)

## Privacy Concerns

### What Data is Collected

Partiful collects device identifiers, behavioral data, and social interaction patterns. This includes who users invite to events, their contact list, and how they navigate within the app. Event attendance and social connections are part of the data profile.

### Third-Party Data Sharing

User data is shared with six external services:

- **FullStory** - Session recording: user taps and in-app navigation may be stored and replayed by the developer
- **Firebase** - App infrastructure and crash reporting
- **Google Analytics** - Behavioral tracking and usage analysis
- **Facebook SDK** - Social data and advertising targeting
- **Amplitude** - Product analytics and user behavior profiling
- **Sentry** - Error and performance monitoring

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 58/100 |
| Privacy | 45/100 |
| Data Security | 55/100 |
| Network Security | 85/100 |
| Code Safety | 65/100 |
| Data Collection | 50/100 |
| Data Sharing | 40/100 |
| User Control | 42/100 |

## Positive Security Features

- None identified for this version.

## Areas for Improvement

- The app shares behavioral data and social connections with advertising and analytics platforms beyond what is required to deliver its core features.
- Session recording through FullStory means in-app activity, including taps and navigation paths, may be stored and replayed by the developer or their partners.
- User ability to limit or opt out of data collection is restricted, with few user-facing controls over how information is used by third parties.

---

## About This Analysis

This scorecard is based on automated static analysis of the app binary. Scores reflect the security and privacy posture of the app at the time of the scan.

### App Details

| Field | Value |
|---|---|
| App Name | Partiful: Fun Party Invites |
| Package ID | com.partiful.partiful |
| Version | 2.11.07 (Build 1370693) |
| Scan Date | December 19, 2025 |
| Platform | Android |