# Security & Privacy Scorecard

## Gangster AI

**Security Score: 68/100 | Privacy Score: 55/100**

## What This Means for You

Usage is tracked by Google and Firebase to power AI features and serve targeted ads. Purchases are processed through Google Play and RevenueCat. Users have limited options to request deletion or correction of their data.

## Recommendation: Use With Caution

**Best For:** Casual AI fun with ad-supported free content
**Avoid If:** You want control over your account data

## Key Findings

**Data Security** - 3 findings (1 medium, 2 low)

**Network Security** - 0 findings

**Code Safety** - 0 findings

**Privacy** - 2 findings (2 high)

## Privacy Concerns

### What Data is Collected

- Usage and behavioral data collected via Google Firebase and Vertex AI
- Advertising identifiers and ad interaction data collected via Google AdMob
- Purchase history and subscription status via RevenueCat and Google Play Billing

### Third-Party Data Sharing

User data is shared with the following third-party services:

- **Google / Firebase** - Analytics and AI feature processing
- **Google AdMob** - Targeted advertising
- **RevenueCat** - Subscription and purchase tracking

## Understanding the Scores

| Category | Score |
|---|---|
| Security | 68/100 |
| Privacy | 55/100 |
| Data Security | 70/100 |
| Network Security | 100/100 |
| Code Safety | 65/100 |
| Data Collection | 60/100 |
| Data Sharing | 70/100 |
| User Control | 40/100 |

## Positive Security Features

No notable positive security features were identified in this version.

## Areas for Improvement

- Users have limited ability to request deletion or correction of personal data after it has been collected.
- Multiple Google services receive behavioral and usage data, and there is no way to opt out while still using core app features.
- The app's subscription handling through RevenueCat lacks clear disclosure of what data is retained after a purchase.

---

## About This Analysis

This scorecard is generated from automated static analysis of the published app binary. It reflects the app's data practices and security implementation at the time of the scan.

### App Details

- **App Name:** Gangster AI
- **Package ID:** org.sandovalandres.ai_gangster
- **Version:** 1.19 (Build 19)
- **Scan Date:** 2025-12-18