RU EN
www.

App analysis · 10.10.2026

飞猪 Fliggy

com.taobao.trip · version 9.10.32.105

3SDKs found
3companies
3companies outside the EEA
22sensitive permissions

In short

SDKs found: 3. Companies: 3, of which outside the EEA — 3. Sensitive permissions: 22 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

  • Pangle — ByteDance, China outside EEA advertising
  • Huawei Push Kit — Huawei, China outside EEA push notifications
  • Xiaomi Mi Push — Xiaomi, China outside EEA push notifications

Sensitive permissions (22)

  • approximate location — android.permission.ACCESS_COARSE_LOCATION
  • precise location — android.permission.ACCESS_FINE_LOCATION
  • photo locations — android.permission.ACCESS_MEDIA_LOCATION
  • authenticate accounts — android.permission.AUTHENTICATE_ACCOUNTS
  • contacts — android.permission.READ_CONTACTS
  • modify calendar — android.permission.WRITE_CALENDAR
  • camera — android.permission.CAMERA
  • files on the device — android.permission.READ_EXTERNAL_STORAGE
  • photos — android.permission.READ_MEDIA_IMAGES
  • videos — android.permission.READ_MEDIA_VIDEO
  • microphone — android.permission.RECORD_AUDIO
  • write files on the device — android.permission.WRITE_EXTERNAL_STORAGE
  • NFC: reading cards, documents and tags — android.permission.NFC
  • list of all installed apps — android.permission.QUERY_ALL_PACKAGES
  • phone number — android.permission.READ_PHONE_NUMBERS
  • biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
  • access credentials — android.permission.USE_CREDENTIALS
  • access credentials — com.taobao.permission.USE_CREDENTIALS
  • fingerprint — android.permission.USE_FINGERPRINT
  • advertising ID — com.google.android.gms.permission.AD_ID
  • request to install apps — android.permission.REQUEST_INSTALL_PACKAGES
  • draw over other apps — android.permission.SYSTEM_ALERT_WINDOW
All manifest permissions (113)
  • android.permission.ACCESS_COARSE_LOCATION
  • android.permission.ACCESS_DOWNLOAD_MANAGER
  • android.permission.ACCESS_FINE_LOCATION
  • android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
  • android.permission.ACCESS_MEDIA_LOCATION
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.ACCESS_WIFI_STATE
  • android.permission.AUTHENTICATE_ACCOUNTS
  • android.permission.BATTERY_STATS
  • android.permission.BLUETOOTH
  • android.permission.BLUETOOTH_ADMIN
  • android.permission.BROADCAST_PACKAGE_ADDED
  • android.permission.BROADCAST_PACKAGE_CHANGED
  • android.permission.BROADCAST_PACKAGE_INSTALL
  • android.permission.BROADCAST_PACKAGE_REPLACED
  • android.permission.BROADCAST_STICKY
  • android.permission.CAMERA
  • android.permission.CHANGE_CONFIGURATION
  • android.permission.CHANGE_NETWORK_STATE
  • android.permission.CHANGE_WIFI_STATE
  • android.permission.DISABLE_KEYGUARD
  • android.permission.DOWNLOAD_WITHOUT_NOTIFICATION
  • android.permission.FLASHLIGHT
  • android.permission.FOREGROUND_SERVICE
  • android.permission.GET_TASKS
  • android.permission.INTERNET
  • android.permission.KILL_BACKGROUND_PROCESSES
  • android.permission.MANAGE_ACCOUNTS
  • android.permission.MANAGE_FINGERPRINT
  • android.permission.MODIFY_AUDIO_SETTINGS
  • android.permission.MOUNT_UNMOUNT_FILESYSTEMS
  • android.permission.NFC
  • android.permission.POST_NOTIFICATIONS
  • android.permission.QUERY_ALL_PACKAGES
  • android.permission.READ_APP_BADGE
  • android.permission.READ_CONTACTS
  • android.permission.READ_EXTERNAL_STORAGE
  • android.permission.READ_LOGS
  • android.permission.READ_MEDIA_IMAGES
  • android.permission.READ_MEDIA_VIDEO
  • android.permission.READ_PHONE_NUMBERS
  • android.permission.READ_SETTINGS
  • android.permission.RECEIVE_BOOT_COMPLETED
  • android.permission.RECORD_AUDIO
  • android.permission.RECORD_VIDEO
  • android.permission.REORDER_TASKS
  • android.permission.REQUEST_INSTALL_PACKAGES
  • android.permission.RESTART_PACKAGES
  • android.permission.SMARTCARD
  • android.permission.SYSTEM_ALERT_WINDOW
  • android.permission.USE_BIOMETRIC
  • android.permission.USE_CREDENTIALS
  • android.permission.USE_FACERECOGNITION
  • android.permission.USE_FINGERPRIN
  • android.permission.USE_FINGERPRINT
  • android.permission.VIBRATE
  • android.permission.WAKE_LOCK
  • android.permission.WRITE_CALENDAR
  • android.permission.WRITE_EXTERNAL_STORAGE
  • android.permission.WRITE_SDCARD
  • android.permission.WRITE_SETTINGS
  • cn.cyberidentity.certification.AUTH
  • cn.org.ifaa.permission.USE_IFAA_MANAGER
  • com.alipay.permission.ALIPAY_UPDATE_CREDENTIALS
  • com.alipay.permission.ALIPAY_USE_CREDENTIALS
  • com.aliyun.permission.TYID_MGR_SERVICE
  • com.aliyun.permission.TYID_SERVICE
  • com.anddoes.launcher.permission.UPDATE_COUNT
  • com.android.launcher.permission.INSTALL_SHORTCUT
  • com.android.launcher.permission.READ_SETTINGS
  • com.android.launcher2.permission.READ_SETTINGS
  • com.asus.msa.SupplementaryDID.ACCESS
  • com.coloros.mcs.permission.RECIEVE_MCS_MESSAGE
  • com.google.android.c2dm.permission.RECEIVE
  • com.google.android.gms.permission.AD_ID
  • com.heytap.mcs.permission.RECIEVE_MCS_MESSAGE
  • com.hihonor.push.permission.READ_PUSH_NOTIFICATION_INFO
  • com.hihonor.security.permission.ACCESS_THREAT_DETECTION
  • com.htc.launcher.permission.READ_SETTINGS
  • com.htc.launcher.permission.UPDATE_SHORTCUT
  • com.huawei.android.launcher.permission.CHANGE_BADGE
  • com.huawei.android.launcher.permission.READ_SETTINGS
  • com.huawei.android.launcher.permission.WRITE_SETTINGS
  • com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA
  • com.huawei.permission.USE_TSM_AGENT
  • com.majeur.launcher.permission.UPDATE_BADGE
  • com.meizu.c2dm.permission.RECEIVE
  • com.meizu.flyme.permission.PUSH
  • com.meizu.flyme.push.permission.RECEIVE
  • com.oppo.launcher.permission.READ_SETTINGS
  • com.oppo.launcher.permission.WRITE_SETTINGS
  • com.samsung.android.authservice.permission.READ_CONTENT_PROVIDER
  • com.sec.android.provider.badge.permission.READ
  • com.sec.android.provider.badge.permission.WRITE
  • com.setaobao.bbox.permission.APP_STATE
  • com.sonyericsson.home.permission.BROADCAST_BADGE
  • com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
  • com.taobao.appcenter.permission.DOWNLOAD_STATUS_CHANGE
  • com.taobao.permission.UPDATE_CREDENTIALS
  • com.taobao.permission.USE_CREDENTIALS
  • com.taobao.statistic.permission.DEVICE_STATE
  • com.taobao.taobao.permission.C2D_MESSAGE
  • com.taobao.trip.openadsdk.permission.TT_PANGOLIN
  • com.taobao.trip.permission.C2D_MESSAGE
  • com.taobao.trip.permission.MIPUSH_RECEIVE
  • com.taobao.trip.permission.PROCESS_PUSH_MSG
  • com.taobao.trip.permission.PUSH_PROVIDER
  • com.taobao.trip.push.permission.MESSAGE
  • com.vivo.notification.permission.BADGE_ICON
  • me.everything.badger.permission.BADGE_COUNT_READ
  • me.everything.badger.permission.BADGE_COUNT_WRITE
  • oppo.permission.USE_FACE
  • org.simalliance.openmobileapi.SMARTCARD

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: com.taobao.trip.apk (124.3 MB)
Package: com.taobao.trip · version 9.10.32.105 (code 8100512)
Android: minimum API 22, target API 31
File SHA-256: 96f0e2d56b3c3ca1de0a7c651f794b79e4ee79f943209b17d10af65e26e00949
Developer signature (SHA-256): baa4e7f0f352ed7c2f0140d9b3c32e6e71e90b3e0ec997a9e937611e364c162b
Signed by: taobao (beijing, CN) · outside EEA · key since 2011-09-06
Library: 63 SDK · 81 permissions · 2769b78c1753
File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app