Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes

Build stack

Cash App Android tech stack

Kotlin Android payments app with Jetpack Compose, native face/document scanning libs, TFLite barcode models, Square backend, root detection, and multi-SDK analytics

v5.53.0 · latest

Languages

3

Java · Kotlin

Third-party SDKs

41

16 categories

Permissions

39

22 native libs

Signals

78

capabilities, APIs, fonts

Analyzed June 19, 2026·Bundle com.squareup.cash·Detection observed
Built withJava146Kotlin143JJetpack Compose117AAppsFlyer30Firebase Analytics118Google App Measurement94Google Mobile Ads (AdMob)101BBugsnag15Datadog28OOpenTelemetry25PPlaid6SStripe17
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

Native + ML on-device verification

On-device ML

Bundles specialized native libraries for face analysis, document capture/sanitization, and barcode scanning plus TFLite models for barcode detection and feature extraction, indicating local processing for checks and identity.

libFaceIad.so · libmisnapSanitizationUtil.so · libbarhopper_v3.so · barcode_ssd_mobilenet_v1_dmp25_quant.tflite · +1

Layered device integrity controls

Security

Implements root detection, Play Integrity, Android Keystore, biometric auth, and FLAG_SECURE screenshot/recording blocking alongside process exec and reflection usage.

Root detection · Play Integrity · Android Keystore · Biometric auth · +1

Signals↓

Square primary backend with payments partners

Backend & API

Primary hosts are api.squareup.com and cash.app domains; declares Plaid, Stripe, Bitcoin, and Lightning support via registered URL schemes and 120 API endpoints.

api.squareup.com · Plaid · Stripe · bitcoin · +1

Signals↓

Multi-vendor crash and analytics stack

Analytics

Integrates Bugsnag, Datadog, and OpenTelemetry for crashes/performance plus Braze, AppsFlyer, and Firebase Analytics; declares tracking with multiple tracking domains.

Bugsnag · Datadog · OpenTelemetry · Braze · +1

Compose UI with media and fonts

Interface

Uses Jetpack Compose and Material Components with Glide, Coil, Lottie, and 26 bundled font families for rendering.

Jetpack Compose · Lottie · Glide · Coil · +1

Frameworks↓

Hybrid native and JS runtimes

Architecture

Kotlin/Java codebase with C/C++ natives including QuickJS JS engine, Filament renderer, OpenMP, and multiple JNI wrappers for document analysis and camera utilities.

libquickjs.so · libfilament-jni.so · libomp.so · Kotlin · +1

Runtime↓

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

29

Target SDK

35

ABIs

1

arm64-v8a

Signing

v2 · v3

Common Name: Bob Lee

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

43

Services

28

Receivers

11

Providers

10

Exported (17)

activity-alias:com.squareup.cash.BitcoinShortcutactivity-alias:com.squareup.cash.QrCodeShortcutactivity:androidx.compose.ui.tooling.PreviewActivityactivity:com.fillr.embedded.profile.FEMainActivityactivity:com.knotapi.knot.ui.activities.KnotActivityactivity:com.plaid.internal.LinkRedirectActivityactivity:com.squareup.cash.ui.MainActivityactivity:com.squareup.cash.ui.TranslucentMainActivityactivity:com.stripe.android.financialconnections.FinancialConnectionsSheetRedirectActivityactivity:com.stripe.android.payments.StripeBrowserProxyReturnActivityreceiver:androidx.profileinstaller.ProfileInstallReceiverreceiver:androidx.work.impl.diagnostics.DiagnosticsReceiver

Manifest

Permissions

39 permissions requested in the manifest.
android.permission.ACCESS_ADSERVICES_AD_IDandroid.permission.ACCESS_ADSERVICES_ATTRIBUTIONandroid.permission.ACCESS_BACKGROUND_LOCATIONandroid.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.BLUETOOTHandroid.permission.BLUETOOTH_ADMINandroid.permission.BLUETOOTH_ADVERTISEandroid.permission.BLUETOOTH_CONNECTandroid.permission.BLUETOOTH_SCANandroid.permission.CAMERAandroid.permission.CHANGE_NETWORK_STATEandroid.permission.DETECT_SCREEN_CAPTUREandroid.permission.DETECT_SCREEN_RECORDINGandroid.permission.FOREGROUND_SERVICEandroid.permission.GET_ACCOUNTSandroid.permission.INTERNETandroid.permission.NFC

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libae63.solibandroidx.graphics.path.solibbarhopper_v3.solibbugsnag-ndk.solibbugsnag-plugin-android-anr.solibbugsnag-root-detection.solibdatastore_shared_counter.solibecr-c4b.solibFaceIad.solibFaceToolChecker.solibfilament-jni.solibimage_processing_util_jni.solibmisnapCameraUtil.solibmisnapCommonUtil.solibmisnapControllerUtil.solibmisnapLicenseVerifier.solibmisnapSanitizationUtil.solibomp.solibquickjs.solibrenderscript-toolkit.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool (Retrofit detected).

Base URLs

https://api.squareup.comhttps://squareup.com/legal/developers

API endpoints

/account/switch-to-managed-account//account/switch-to-principal-account//account/switch//api//api/426/store//api/alpha/public.proto/api/analytics_message.proto/api/api.proto/api/app/v1/message/get_details_page.proto/api/app/v1/message/get_discover_content.proto/api/app/v1/model/avatar.proto/api/app/v1/model/bullet.proto/api/app/v1/model/button.proto/api/app/v1/model/details_page.proto/api/app/v1/model/preload_request_context.proto/api/app/v1/model/sections.proto/api/app/v1/model/share_sheet.proto/api/app/v1/model/shop_info.proto/api/app/v1/model/text.proto/api/app/v2/api/applets.proto

URI schemes

alipayandroid-appandroid.resourceassetbitcoinblockeractioncashcash.sounddnsfakefidesmointentldaplightningmarketmockplaidlinkrawresources3solanastripestripe-authstripejsstripesdkwss

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreBiometric authPlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionRoot detectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Security

Potential secrets detected

String patterns matching credentials/keys found by static scanning. Counts only - values are never published.
google api key: 1

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Java
146
Kotlin
143

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
41 of 41 SDKs
SDKCategoryVendorVersionAppsSource
AppsFlyerMobile attribution and marketing measurement.AnalyticsAppsFlyer-30
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
Google App MeasurementGoogle Analytics for Firebase event measurement substrate.AnalyticsGoogle-94
Google Mobile Ads (AdMob)AdMob mobile advertising for Android.AdsGoogle-101
BugsnagCrash and error monitoring.Crash & PerformanceSmartBear-15
DatadogReal User Monitoring, logs, and observability.Crash & PerformanceDatadog-28
OpenTelemetryObservability APIs and SDKs for traces, metrics, and logs.Crash & PerformanceOpenTelemetry-25
PlaidBank account linking and financial data.PaymentsPlaid-6
StripePayments and financial infrastructure SDK.PaymentsStripe-17
Credential ManagerUnified passkey/password/federated sign-in API (Jetpack).AuthenticationGoogle-58
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
VolleyHTTP networking library for Android.NetworkingGoogle-36
BrazeCustomer engagement and lifecycle messaging.MessagingBraze-33
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
Media3 (ExoPlayer)Media playback (ExoPlayer) for Android.MediaGoogle-88
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-64
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-30
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
RxJavaReactive extensions library for composing asynchronous Java/Kotlin streams.Reactive / AsyncReactiveX-66
RxJava 3Reactive extensions library for composing asynchronous Java/Kotlin streams.Reactive / AsyncReactiveX-19
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
SSQLDelightStorage--17
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
AndroidSVGSVG parser and renderer for Android.RenderingBig Bad Logic-45
CoilKotlin-first image loading for Android.RenderingCoil Contributors-75
GlideImage loading and caching for Android.RenderingBumptech-112
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
LottieRenders After Effects vector animations.RenderingAirbnb-138
MarkwonMarkdown renderer for Android.RenderingNoties-23
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
libPhoneNumberPhone number parsing, formatting, and validation library.TelephonyGoogle-30
PPersonaAnti-Fraud--4
Play IntegrityApp/device integrity and anti-abuse attestation API for Android.Anti-FraudGoogle-51
41 SDK rows

Interface

UI & graphics

Frameworks and libraries Cash App uses to render its interface and animations.
CoilGlideJetpack ComposeLottieMaterial Components

Models

On-device ML models

Core ML and ML model bundles shipped inside the app for local inference.
barcode_ssd_mobilenet_v1_dmp25_quant.tfliteoned_auto_regressor_mobile.tfliteoned_feature_extractor_mobile.tflite

Assets

Bundled fonts

Custom font families packaged in the app bundle.
cashsans_blackcashsans_black_itlcashsans_boldcashsans_bold_itlcashsans_extblackcashsans_extlightcashsans_extlight_itlcashsans_lightcashsans_light_itlcashsans_mediumcashsans_medium_itlcashsans_regularcashsans_regular_itlcashsans_semiboldcashsans_semibold_itlcashsansmono_mediumcashsansmono_regularfontawesome-webfontgeistgeist_semiboldplaid_cernplaid_cern_extraboldplaid_cern_semiboldroboto_medium_numbersshantell_sans_normal_mediumsqmarket_regular

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

SDK config keys

com.google.android.geo.API_KEYGoogle Maps
com.bugsnag.android.API_KEYBugsnag

Registered URL schemes

bitcoincashmehttpslightningplaidstripestripe-authstripesdk

Queries other apps

com.android.chromecom.bookingcom.dd.doordashcom.discordcom.ebay.mobilecom.facebook.katanacom.facebook.litecom.google.android.aicorecom.google.android.apps.mapscom.grubhub.androidcom.hopper.mountainview.playcom.instacart.clientcom.instagram.androidcom.main.gopuffcom.microsoft.xboxone.smartglasscom.postmates.androidcom.rfi.sams.androidcom.roblox.clientcom.samsung.android.mapsagentcom.starbucks.mobilecardcom.stockx.stockxcom.twitter.androidcom.ubercabcom.ubercab.eatsintent:httpintent:smstome.lyft.androidtv.twitch.android.app

Universal link hosts

cash.appcash.mecashapp.onelink.meclick.cash.appclicks.cash.app

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

api.squareup.comcash.appcash.mecashapp.onelink.meclick.cash.appclicks.cash.apppci-connect.squareup.compush.cashappapi.comsquareup.comwww.cashapp.com

First party

App modules

Likely first-party modules and resource bundles detected in Cash App.
com.squareupcom.squareup.cash

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDApproximate locationBackground locationBiometric authBluetoothBluetooth (connect)Bluetooth (scan)CameraContacts (read)Fingerprint authForeground serviceNFCNotificationsPhone / carrier infoPrecise locationStorage (read)Storage (write)

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreBiometric authPlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionRoot detectionScreenshot/recording block (FLAG_SECURE)Symmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

app-measurement.comapp.bugsnag.combugsnag.comdocs.bugsnag.comnotify.bugsnag.compagead2.googlesyndication.comsdk.iad-01.braze.comsessions.bugsnag.comsondheim.braze.comwww.braze.comwww.googleadservices.com

Accessed API samples

Ad SDK presentAdvertising IDAnalytics SDK presentAppsFlyerBrazeBugsnagDatadogFirebase AnalyticsFirebase MessagingGoogle App MeasurementGoogle Mobile Ads (AdMob)OpenTelemetryTracking/telemetry hosts in app strings

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

androidx.activity_activity1.11.0 · Google
androidx.activity_activity-compose1.11.0 · Google
androidx.activity_activity-ktx1.11.0 · Google
androidx.annotation_annotation-experimental1.6.0 · Google
androidx.appcompat_appcompat1.7.1 · Google
androidx.appcompat_appcompat-resources1.7.1 · Google
androidx.asynclayoutinflater_asynclayoutinflater1.0.0
androidx.autofill_autofill1.1.0 · Google
androidx.biometric_biometric1.1.0 · Google
androidx.browser_browser1.10.0 · Google
androidx.camera.featurecombinationquery_featurecombinationquery1.6.1 · Google
androidx.camera.viewfinder_viewfinder-compose1.6.1 · Google
androidx.camera.viewfinder_viewfinder-core1.6.1 · Google
androidx.camera_camera-camera21.6.1 · Google
androidx.camera_camera-camera2-pipe1.6.1 · Google
androidx.camera_camera-compose1.6.1 · Google
androidx.camera_camera-core1.6.1 · Google
androidx.camera_camera-lifecycle1.6.1 · Google
androidx.camera_camera-video1.6.1
androidx.camera_camera-view1.6.1
androidx.cardview_cardview1.0.0 · Google
androidx.compose.animation_animation1.11.1 · Google
androidx.compose.animation_animation-core1.11.1 · Google
androidx.compose.foundation_foundation1.11.1 · Google
androidx.compose.foundation_foundation-layout1.11.1 · Google
androidx.compose.material3_material31.4.0 · Google
androidx.compose.material_material1.11.1
androidx.compose.material_material-icons-core1.7.8
androidx.compose.material_material-ripple1.11.1 · Google
androidx.compose.runtime_runtime1.11.1 · Google
androidx.compose.runtime_runtime-annotation1.11.1 · Google
androidx.compose.runtime_runtime-retain1.11.1 · Google
androidx.compose.runtime_runtime-saveable1.11.1 · Google
androidx.compose.ui_ui1.11.1 · Google
androidx.compose.ui_ui-geometry1.11.1 · Google
androidx.compose.ui_ui-graphics1.11.1 · Google
androidx.compose.ui_ui-text1.11.1 · Google
androidx.compose.ui_ui-tooling1.11.1 · Google
androidx.compose.ui_ui-tooling-data1.11.1 · Google
androidx.compose.ui_ui-tooling-preview1.11.1 · Google
androidx.compose.ui_ui-unit1.11.1 · Google
androidx.compose.ui_ui-util1.11.1 · Google
androidx.constraintlayout_constraintlayout2.2.1 · Google
androidx.constraintlayout_constraintlayout-compose1.1.1
androidx.coordinatorlayout_coordinatorlayout1.3.0 · Google
androidx.core_core1.18.0 · Google
androidx.core_core-backported-fixes1.0.0 · Google
androidx.core_core-ktx1.18.0 · Google
androidx.core_core-splashscreen1.2.0
androidx.core_core-viewtree1.0.0 · Google
androidx.credentials_credentials1.6.0 · Google
androidx.credentials_credentials-play-services-auth1.6.0 · Google
androidx.cursoradapter_cursoradapter1.0.0 · Google
androidx.customview_customview1.2.0 · Google
androidx.customview_customview-poolingcontainer1.0.0 · Google
androidx.databinding_viewbinding9.2.0 · Google
androidx.datastore_datastore1.1.7 · Google
androidx.datastore_datastore-core1.1.7 · Google
androidx.datastore_datastore-preferences1.1.7 · Google
androidx.datastore_datastore-preferences-core1.1.7 · Google
androidx.documentfile_documentfile1.0.0 · Google
androidx.drawerlayout_drawerlayout1.1.1 · Google
androidx.dynamicanimation_dynamicanimation1.1.0 · Google
androidx.emoji2_emoji21.6.0 · Google
androidx.emoji2_emoji2-views-helper1.6.0 · Google
androidx.exifinterface_exifinterface1.4.2 · Google
androidx.fragment_fragment1.8.9 · Google
androidx.fragment_fragment-ktx1.8.9 · Google
androidx.graphics_graphics-path1.0.1 · Google
androidx.graphics_graphics-shapes1.1.0 · Google
androidx.gridlayout_gridlayout1.1.0
androidx.interpolator_interpolator1.0.0 · Google
androidx.legacy_legacy-support-core-ui1.0.0
androidx.legacy_legacy-support-core-utils1.0.0 · Google
androidx.legacy_legacy-support-v41.0.0
androidx.lifecycle_lifecycle-extensions2.2.0
androidx.lifecycle_lifecycle-livedata2.10.0 · Google
androidx.lifecycle_lifecycle-livedata-core2.10.0 · Google
androidx.lifecycle_lifecycle-livedata-core-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-livedata-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-process2.10.0 · Google
androidx.lifecycle_lifecycle-runtime2.10.0 · Google
androidx.lifecycle_lifecycle-runtime-compose2.10.0 · Google
androidx.lifecycle_lifecycle-runtime-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-service2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel-compose2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel-ktx2.10.0 · Google
androidx.lifecycle_lifecycle-viewmodel-savedstate2.10.0 · Google
androidx.loader_loader1.1.0 · Google
androidx.localbroadcastmanager_localbroadcastmanager1.0.0 · Google
androidx.media_media1.0.0 · Google
androidx.metrics_metrics-performance1.0.0
androidx.navigation_navigation-common2.7.7 · Google
androidx.navigation_navigation-common-ktx2.7.7
androidx.navigation_navigation-compose2.7.7 · Google
androidx.navigation_navigation-fragment2.7.7
androidx.navigation_navigation-fragment-ktx2.7.7
androidx.navigation_navigation-runtime2.7.7 · Google
androidx.navigation_navigation-runtime-ktx2.7.7
androidx.navigation_navigation-ui2.7.7
androidx.navigation_navigation-ui-ktx2.7.7
androidx.paging_paging-common3.5.0 · Google
androidx.paging_paging-compose3.5.0 · Google
androidx.paging_paging-runtime3.5.0 · Google
androidx.print_print1.0.0 · Google
androidx.privacysandbox.ads_ads-adservices1.1.0-beta11 · Google
androidx.privacysandbox.ads_ads-adservices-java1.1.0-beta11 · Google
androidx.profileinstaller_profileinstaller1.4.1 · Google
androidx.recyclerview_recyclerview1.4.0 · Google
androidx.room_room-ktx2.7.0 · Google
androidx.room_room-runtime2.7.0 · Google
androidx.savedstate_savedstate1.4.0 · Google
androidx.savedstate_savedstate-compose1.4.0 · Google
androidx.savedstate_savedstate-ktx1.4.0 · Google
androidx.slidingpanelayout_slidingpanelayout1.2.0
androidx.sqlite_sqlite2.6.2 · Google
androidx.sqlite_sqlite-framework2.6.2 · Google
androidx.startup_startup-runtime1.2.0 · Google
androidx.swiperefreshlayout_swiperefreshlayout1.2.0 · Google
androidx.tracing_tracing1.3.0 · Google
androidx.tracing_tracing-ktx1.3.0 · Google
androidx.transition_transition1.7.0 · Google
androidx.vectordrawable_vectordrawable1.2.0 · Google
androidx.vectordrawable_vectordrawable-animated1.2.0 · Google
androidx.versionedparcelable_versionedparcelable1.1.1 · Google
androidx.viewpager2_viewpager21.1.0 · Google
androidx.viewpager_viewpager1.0.0 · Google
androidx.webkit_webkit1.16.0 · Google
androidx.window_window1.5.0 · Google
androidx.window_window-core1.5.0 · Google
androidx.work_work-runtime2.11.2 · Google
androidx.work_work-runtime-ktx2.11.2 · Google
com.google.android.material_material1.13.0 · material-components
com.google.dagger_dagger2.59 · Google
com.google.gson?
com.google.protobuf?
com.squareup.moshi?
Dagger? · Google
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains
kotlinx_coroutines_android1.11.0
kotlinx_coroutines_core1.11.0
kotlinx_coroutines_guava1.11.0
kotlinx_coroutines_play_services1.11.0
kotlinx_coroutines_reactive1.11.0
kotlinx_coroutines_rx31.11.0

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →
Cash App app icon

Live from Google Play

Cash App

Block, Inc.
Open in Google Play(opens in new tab)Developer site(opens in new tab)RSS feed

Rating

4.7 (4,435,268)

Price

Free

Installs

100M+ installs

Version

v5.68.0

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack