App analysis · 14.10.2026

RaiPay

al.raiffeisen.mobilepay · version 4.18.3.0

6SDKs found

5companies

5companies outside the EEA

8sensitive permissions

In short

SDKs found: 6. Companies: 5, of which outside the EEA — 5. Sensitive permissions: 8 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

Firebase Cloud Messaging — Google LLC, United States outside EEA push notifications
Google Firebase Analytics — Google LLC, United States outside EEA analytics
Countly — Countly Ltd, United Kingdom outside EEA analytics
Huawei Push Kit — Huawei, China outside EEA push notifications
Huawei AppGallery Connect — Huawei Technologies, China outside EEA crash reporting / performance
Microsoft App Center — Microsoft, United States outside EEA analytics / crash reporting

Sensitive permissions (8)

approximate location — android.permission.ACCESS_COARSE_LOCATION
precise location — android.permission.ACCESS_FINE_LOCATION
camera — android.permission.CAMERA
NFC: reading cards, documents and tags — android.permission.NFC
phone number — android.permission.READ_PHONE_NUMBERS
phone data (carrier, call state) — android.permission.READ_PHONE_STATE
biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
fingerprint — android.permission.USE_FINGERPRINT

All manifest permissions (28)

al.raiffeisen.mobilepay.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
al.raiffeisen.mobilepay.permission.PROCESS_PUSH_MSG
al.raiffeisen.mobilepay.permission.PUSH_PROVIDER
al.raiffeisen.mobilepay.permission.PUSH_PROVISIONING
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BROADCAST_CLOSE_SYSTEM_DIALOGS
android.permission.CAMERA
android.permission.CHANGE_WIFI_STATE
android.permission.FOREGROUND_SERVICE
android.permission.GET_TASKS
android.permission.INTERNET
android.permission.NFC
android.permission.POST_NOTIFICATIONS
android.permission.READ_PHONE_NUMBERS
android.permission.READ_PHONE_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REORDER_TASKS
android.permission.USE_BIOMETRIC
android.permission.USE_FINGERPRINT
android.permission.USE_FULL_SCREEN_INTENT
android.permission.VIBRATE
android.permission.WAKE_LOCK
com.google.android.c2dm.permission.RECEIVE
com.google.android.providers.gsf.permission.READ_GSERVICES
com.huawei.permission.ACCESS_HW_KEYSTORE

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: al.raiffeisen.mobilepay.apk (114.5 MB)

Package: al.raiffeisen.mobilepay · version 4.18.3.0 (code 8809)

Android: minimum API 26, target API 34

File SHA-256: 507878aa41c915b49d8489cb58b6506890ae8d55116e475b35dc91fe916e7010

Developer signature (SHA-256): d7cc429cead9baea01c552d6e130e1f8004150d4b142d8f91998e7f3c755b5f6

Signed by: Test · key since 2016-03-30

Library: 75 SDK · 81 permissions · 13c27d15ac2e

File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app