App analysis · 18.10.2026

Luma: Events & Invites

com.luma.mobile · version 2.3.1

3SDKs found
3companies
3companies outside the EEA
7sensitive permissions

In short

SDKs found: 3. Companies: 3, of which outside the EEA — 3. Sensitive permissions: 7 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

  • Sentry — Functional Software Inc., United States outside EEA crash reporting
  • Firebase Cloud Messaging — Google LLC, United States outside EEA push notifications
  • Stripe — Stripe, Inc., United States outside EEA payments

Sensitive permissions (7)

  • approximate location — android.permission.ACCESS_COARSE_LOCATION
  • precise location — android.permission.ACCESS_FINE_LOCATION
  • contacts — android.permission.READ_CONTACTS
  • camera — android.permission.CAMERA
  • NFC: reading cards, documents and tags — android.permission.NFC
  • biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
  • fingerprint — android.permission.USE_FINGERPRINT
All manifest permissions (17)
  • android.permission.ACCESS_COARSE_LOCATION
  • android.permission.ACCESS_FINE_LOCATION
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.CAMERA
  • android.permission.INTERNET
  • android.permission.NFC
  • android.permission.POST_NOTIFICATIONS
  • android.permission.READ_CONTACTS
  • android.permission.USE_BIOMETRIC
  • android.permission.USE_FINGERPRINT
  • android.permission.VIBRATE
  • android.permission.WAKE_LOCK
  • com.android.vending.CHECK_LICENSE
  • com.google.android.c2dm.permission.RECEIVE
  • com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
  • com.luma.mobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: com.luma.mobile.xapk (35.0 MB)
Package: com.luma.mobile · version 2.3.1 (code 1104)
Android: minimum API 29, target API 37
File SHA-256: 5ca3dc6b8a739c3b9f0021b444651181cd0c9a64d9bc1015fc9a28507a6581cc
Developer signature (SHA-256): a3fe76de7a7a8b9ec08a53d531189eaa79756e5fff5691097910aa1b08a321ce
Signed by: Google Inc. (Mountain View, US) · outside EEA · key since 2026-01-07
Library: 75 SDK · 81 permissions · 13c27d15ac2e
File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app