# Security & Privacy Scorecard

## Yuka - Food & Cosmetic Scanner

**io.yuka.android** | Version 4.54.1 (build 834) | Scanned 2026-01-30

**Overall Security Score: 92/100** | **Privacy Score: 88/100**

## What This Means for You

Scans, usage patterns, and account activity are shared with Firebase Analytics, Google, and Facebook. Crash reports and performance data are sent to Google automatically. Barcode scans and product interactions help personalize the experience but are processed by multiple third-party services.

## Recommendation: Trustworthy

**Best For:** Health-conscious shoppers comfortable with Google and

## Key Findings

**Data Security** - 1 finding (1 low)

**Network Security** - 1 finding (1 low)

**Code Safety** - 0 findings

**Privacy** - 2 findings (1 medium, 1 low)

## Privacy Concerns

### What Data is Collected

- Barcode scans and product lookups
- Account activity and app usage patterns
- Crash reports and performance diagnostics, sent to Google automatically
- Device identifiers and behavioral interaction data

### Third-Party Data Sharing

- **Firebase Analytics** - usage and behavioral tracking
- **Google Play Services and ML Kit** - core app functions and crash reporting
- **Facebook SDK** - behavioral data, potentially used for advertising
- **Algolia Search** - product and ingredient search queries
- **Scandit DataCapture SDK** - barcode scanning processing
- **Pairip License Protection** - app license verification

## Understanding the Scores

| Category | Score |
|----------|-------|
| Security | 92/100 |
| Privacy | 88/100 |
| Data Security | 98/100 |
| Network Security | 95/100 |
| Code Safety | 92/100 |
| Data Collection | 85/100 |
| Data Sharing | 100/100 |
| User Control | 80/100 |

## Positive Security Features

- Network communications are well-protected, keeping user data secure in transit
- Data handling practices are strong, with high scores for how user information is stored and managed
- Third-party data sharing earned a perfect score, indicating controlled and transparent practices
- The app's code is built with careful security practices, reducing risk from software flaws

## Areas for Improvement

- Behavioral data is shared with Facebook, which may be unexpected in a health-focused app. Reviewing the app's privacy settings can help clarify what sharing can be adjusted.
- User controls over data preferences are limited, leaving fewer options to manage background data collection by third-party services.
- Crash and performance data is sent to Google automatically in the background, with limited opportunity for users to adjust this behavior.

---

## About This Analysis

This scorecard is based on static analysis of the app's code and data practices at the time of the scan. Scores reflect the app's behavior as observed during analysis.

### App Details

- **App Name:** Yuka - Food & Cosmetic Scanner
- **Package ID:** io.yuka.android
- **Version:** 4.54.1 (build 834)
- **Scan Date:** 2026-01-30
- **Platform:** Android