# Security & Privacy Scorecard

## Xe Money Transfer & Converter

**Overall Security Score: 42/100**
**Privacy Score: 55/100**

## What This Means for You

In-app behavior and transfer activity is shared with advertising and analytics companies, including an ad network. Identity and financial account data passes through third-party verification services. Data protection practices for financial information stored on the device mean user data may not be fully protected.

## Recommendation: Use With Caution

**Best For:** Occasional currency conversions and international transfers
**Avoid If:** Keeping financial activity out of ad networks is a priority

## Key Findings

**Data Security** - 7 findings (2 critical, 2 high, 3 medium)

**Network Security** - 2 findings (2 medium)

**Code Safety** - 0 findings

**Privacy** - 3 findings (2 high, 1 medium)

## Privacy Concerns

### What Data is Collected

The app collects identity information for account verification, financial transaction details, and behavioral data about how the app is used and which features are accessed.

### Third-Party Data Sharing

Data is shared with the following third-party services:

- **Plaid Link** - Financial account linking and verification
- **Veriff** - Identity verification
- **Accertify InAuth** - Device and fraud risk assessment
- **Segment** - Customer data routing and analytics
- **Amplitude** - Behavioral analytics
- **AppsFlyer** - Marketing attribution and analytics
- **Iterable** - Marketing communications
- **Firebase** - App analytics and crash reporting
- **Google Analytics** - Usage analytics
- **AppLovin** - Advertising network

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 42/100 |
| Privacy | 55/100 |
| Data Security | 35/100 |
| Network Security | 60/100 |
| Code Safety | 40/100 |
| Data Collection | 50/100 |
| Data Sharing | 65/100 |
| User Control | 45/100 |

## Positive Security Features

- No positive security features to report for this version.

## Areas for Improvement

- Financial data stored on the device has less protection than expected for a money transfer app, increasing the risk if the device is accessed by someone else.
- In-app behavior is shared with an advertising network (AppLovin), which is unusual for a financial app and gives advertising companies insight into a user's financial habits.
- Identity and account details pass through multiple third-party services, broadening the number of organizations that handle sensitive financial information.

---

## About This Analysis

### App Details

- **App:** Xe Money Transfer & Converter
- **Package:** com.xe.currency
- **Version:** 7.30.3 (Build 73003138)
- **Scan Date:** 2026-02-01