# Security & Privacy Scorecard

## Parsnip: Learn to Cook

**Overall Score: 85/100**

## What This Means for You

In-app behavior and usage patterns are shared with Segment, Firebase, and Branch.io for analytics and attribution. Purchase activity goes through RevenueCat and Google Play Billing. Account data is stored and managed via Firebase.

## Recommendation: Trustworthy

**Best For:** Home cooks comfortable with standard analytics

## Key Findings

**Data Security** - 2 findings (2 high)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 3 findings (2 critical, 1 high)

## Privacy Concerns

### What Data is Collected

Parsnip collects account information, in-app behavior, usage patterns, and purchase history. This data supports login, personalization, and payment processing.

### Third-Party Data Sharing

Activity data is shared with the following third-party services:

- **Segment Analytics** - behavioral data routing and analytics
- **Firebase** - account management, crash reporting, push notifications, and remote configuration
- **Branch.io** - attribution and referral tracking
- **Customer.io** - user messaging and engagement
- **RevenueCat** - subscription and purchase management
- **Google Play Billing** - payment processing
- **Google reCAPTCHA** - account security and bot protection

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 90/100 |
| Privacy | 80/100 |
| Data Security | 88/100 |
| Network Security | 100/100 |
| Code Safety | 92/100 |
| Data Collection | 80/100 |
| Data Sharing | 85/100 |
| User Control | 80/100 |

## Positive Security Features

- All network communication is handled securely across every connection the app makes.
- The app's code structure reflects strong integrity and safety practices throughout.
- Account management is built on a well-established, widely-used identity platform.

## Areas for Improvement

- Behavioral data flows to multiple third-party services, each operating under its own data practices and retention policies outside the app developer's direct control.
- Some data stored by the app warrants stronger protections, as reflected in the data security findings.
- With several external services receiving user information, reviewing Parsnip's privacy policy can help users understand how each one uses and retains data.

---

## About This Analysis

### App Details

| Field | Value |
|---|---|
| App | Parsnip: Learn to Cook |
| Package | com.tapforce.parsnip |
| Version | 2.2.0 (versionCode 210) |
| Scan Date | 2026-02-07 |
| Platform | Android |