App analysis · 17.10.2026

Google Pay: Save and Pay

com.google.android.apps.nbu.paisa.user · version 354.1.3 (armeabi-v7a_release_flutter)

2SDKs found

1companies

1companies outside the EEA

17sensitive permissions

In short

SDKs found: 2. Companies: 1, of which outside the EEA — 1. Sensitive permissions: 17 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

Firebase Dynamic Links — Google LLC, United States outside EEA attribution / глубокие ссылки
Google Firebase Analytics — Google LLC, United States outside EEA analytics

Sensitive permissions (17)

background location — android.permission.ACCESS_BACKGROUND_LOCATION
approximate location — android.permission.ACCESS_COARSE_LOCATION
precise location — android.permission.ACCESS_FINE_LOCATION
accounts on the device — android.permission.GET_ACCOUNTS
contacts — android.permission.READ_CONTACTS
read SMS — android.permission.READ_SMS
receive SMS — android.permission.RECEIVE_SMS
send SMS — android.permission.SEND_SMS
camera — android.permission.CAMERA
microphone — android.permission.RECORD_AUDIO
write files on the device — android.permission.WRITE_EXTERNAL_STORAGE
installed app sizes — android.permission.GET_PACKAGE_SIZE
NFC: reading cards, documents and tags — android.permission.NFC
phone number — android.permission.READ_PHONE_NUMBERS
phone data (carrier, call state) — android.permission.READ_PHONE_STATE
biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
advertising ID — com.google.android.gms.permission.AD_ID

All manifest permissions (30)

android.permission.ACCESS_BACKGROUND_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_NETWORK_STATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.GET_PACKAGE_SIZE
android.permission.HIDE_OVERLAY_WINDOWS
android.permission.INTERNET
android.permission.MANAGE_ACCOUNTS
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.POST_NOTIFICATIONS
android.permission.READ_CONTACTS
android.permission.READ_PHONE_NUMBERS
android.permission.READ_PHONE_STATE
android.permission.READ_SMS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.RECEIVE_SMS
android.permission.RECORD_AUDIO
android.permission.SEND_SMS
android.permission.USE_BIOMETRIC
android.permission.VIBRATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
com.google.android.apps.nbu.paisa.user.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.google.android.gms.permission.AD_ID
com.google.android.providers.gsf.permission.READ_GSERVICES

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: com.google.android.apps.nbu.paisa.user.xapk (80.4 MB)

Package: com.google.android.apps.nbu.paisa.user · version 354.1.3 (armeabi-v7a_release_flutter) (code 3770829)

Android: minimum API 29, target API 37

File SHA-256: 3290d0593a7f57849b2f4b3d74769a432ecf1a4e4c873e6a2062a2d756a27bb0

Developer signature (SHA-256): c17b8e3e427bfcd99cc65ec24ff53ae917424292d723615b74636468e3223c0b

Signed by: Google Inc. (Mountain View, US) · outside EEA · key since 2016-01-28

Library: 75 SDK · 81 permissions · 13c27d15ac2e

File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app