Skip to content
  • Tech Dev NotesTech Dev Notes
Apps
  • Lookup
  • Compare
Market movement
  • Charts
  • Rankings
Visual proof
  • Screens
  • Store listings
  • Icons
Stacks and releases
  • Tech stacks
  • Tool releases
  • Developers
More
  • X feature flags
  • Grokipedia
  • Grok companions
  • Blog
  • Follow on X
ChartsRankingsMoversCompareLookupScreensTech stacksReleases

© 2026 Tech Dev Notes

RSSAboutAPIStatusSecurityPrivacyTermsSitemap@techdevnotes
PayPal - Pay, Send, Save app icon

Live from Google Play

PayPal - Pay, Send, Save

PayPal Mobile
Open in Google Play(opens in new tab)Developer site(opens in new tab)RSS feed

Rating

4.2 (3,726,048)

Price

Free

Installs

100M+ installs

Version

v10.12.0

PassiveTech stackIcons
Store ProfileApp IconsBuild Stack

Build stack

PayPal - Pay, Send, Save Android tech stack

Kotlin/Java Android PayPal app with Jetpack Compose, 38 native libraries including BlinkID and TFLite, Firebase, and first-party PayPal APIs

v9.1.0 · latest

Languages

3

Java · Kotlin

Third-party SDKs

41

18 categories

Permissions

26

38 native libs

Signals

44

capabilities, APIs, fonts

Analyzed June 19, 2026·Bundle com.paypal.android.p2pmobile·Detection observed
Built withJava146Kotlin143JJetpack Compose117AAdjust14AAdobe Experience Platform20Firebase Analytics118Datadog28PPayPal2PPlaid6CCredential Manager58Google Sign-InCCronet39
SectionsRuntimeSDKsAndroid buildSignals

Analysis

What the stack reveals

An automated read of the signals detected on this page - each point links to the evidence below.

On-device ML with TensorFlow Lite

On-device ML

Bundles dyscan_orientation_model.tflite and libtensorflowlite_jni.so with libBlinkID.so, indicating on-device ML for document orientation and scanning.

dyscan_orientation_model.tflite · libtensorflowlite_jni.so · libBlinkID.so · TensorFlow Lite · +1

Hardware-backed biometrics and crypto

Security

Uses biometric auth with Android Keystore and symmetric crypto, plus Play Integrity for anti-fraud, suggesting hardware-backed security posture.

Biometric auth · Android Keystore · Play Integrity · Symmetric crypto (javax.crypto) · +1

Signals↓

Kotlin, Java and heavy native code

Languages & runtime

Written in Kotlin and Java, shipping 38 native libraries (many with hashed names) for performance or security-critical payment features.

Kotlin · Java · C/C++ (native) · libBlinkID.so · +1

Runtime↓

Jetpack Compose UI stack

Interface

UI layer uses Jetpack Compose with Material Components, Lottie animations, and Coil for image handling.

Jetpack Compose · Lottie · Coil · Material Components

Frameworks↓

Multi-provider analytics stack

Analytics

Integrates Adjust for tracking, Datadog for crash/perf monitoring, Adobe Experience Platform, and Firebase Analytics.

Adjust · Datadog · Adobe Experience Platform · Firebase Analytics

First-party PayPal and Firebase

Backend & API

Backend hosts are dominated by paypal.com domains (api.paypal.com, analytics.paypal.com) plus Firebase at api-project-735175912799.firebaseio.com.

api.paypal.com · analytics.paypal.com · api-project-735175912799.firebaseio.com · Firebase

Signals↓

Build

Build & platform

Android SDK levels, supported ABIs, and signing scheme from the Android app.

Min SDK

26

Target SDK

36

ABIs

3

arm64-v8a · armeabi-v7a · x86_64

Signing

v2 · v3

Organization: Paypal

Manifest

App components

Activities, services, broadcast receivers, and content providers declared in the manifest.

Activities

43

Services

29

Receivers

10

Providers

14

Exported (10)

activity:androidx.compose.ui.tooling.PreviewActivityactivity:com.knotapi.knot.ui.activities.KnotActivityactivity:com.mastercard.openbanking.connect.Connectactivity:com.paypal.oslo.app.MainActivityactivity:com.paypal.oslo.feature.packagetracking.ui.oauth.PackageTrackingOAuthActivityactivity:com.paypal.oslo.feature.xoom.YodleeBrowserSwitchActivityactivity:com.plaid.internal.LinkRedirectActivityactivity:com.zettle.sdk.ui.ZettleActivityreceiver:service:

Manifest

Permissions

26 permissions requested in the manifest.
android.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.BLUETOOTHandroid.permission.BLUETOOTH_ADMINandroid.permission.BLUETOOTH_CONNECTandroid.permission.BLUETOOTH_SCANandroid.permission.CAMERAandroid.permission.CHANGE_NETWORK_STATEandroid.permission.FLASHLIGHTandroid.permission.FOREGROUND_SERVICEandroid.permission.FOREGROUND_SERVICE_DATA_SYNCandroid.permission.INTERNETandroid.permission.KB_WHITELIST_NFCandroid.permission.NFCandroid.permission.POST_NOTIFICATIONSandroid.permission.RECEIVE_BOOT_COMPLETEDandroid.permission.RECORD_AUDIOandroid.permission.REQUEST_COMPANION_USE_DATA_IN_BACKGROUND

Native

Native libraries

Bundled native (.so) libraries - NDK code and cross-platform runtimes.
libAd9cf3.solibaef688.solibB8716d.solibbc7453.solibBlinkID.solibCa686e.solibcd4bb4.solibd4fa.solibde9b09.solibDf6d44.solibe490.solibea77b9.solibee27.solibf485d.solibgaf162.solibH74c33.solibh9744f.solibie142c.solibjc06.solibjnidispatch.so

API

API surface

Endpoints, base URLs, and URI schemes recovered from the DEX string pool (Retrofit detected).

Base URLs

http://www.cancel.paypal.com?token=EC-31P32298ND471414P&ba_token=BA-4M573778JB6300926http://www.paypal.comhttp://www.paypal.com/learnmorehttp://www.return.paypal.com?token=EC-31P32298ND471414P&ba_token=BA-4M573778JB6300926https://analytics.paypal.com/track/alert-cta-clickhttps://analytics.paypal.com/track/alert-dismisshttps://analytics.paypal.com/track/alert-impressionhttps://analytics.paypal.com/track/autopay-info-impressionhttps://analytics.paypal.com/track/autopay-learn-morehttps://api-m.paypal.comhttps://api.paypal.com/https://b.stats.paypal.com/counter.cgi

API endpoints

/api//api/common/zzab/api/common/zzad/api/common/zzag/api/common/zzai/api/common/zzak/api/common/zzaw/api/common/zzf/api/common/zzh/api/common/zzq/api/common/zzs/api/common/zzu/api/common/zzz/api/geocode/json/api/graphql/schema/type/__DirectiveLocation/api/graphql/schema/type/__TypeKind/api/model/zzcg/api/model/zzci/api/model/zzck/api/model/zzcm

URI schemes

android-appandroid-keystoreandroid.resourceassetsconnectdirectdnsftpintentldapmarketmobileappmockpaypalpaypal-internalplaidlinkpreviewrtspworkspecwss

Signals

Capability & security signals

Behaviors inferred from DEX type descriptors - WebView bridges, dynamic code loading, reflection, crypto, keystore, and more.
Android KeystoreBiometric authClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionSymmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Security

Potential secrets detected

String patterns matching credentials/keys found by static scanning. Counts only - values are never published.
google api key: 2private key block: 1google oauth client: 1

Build

Build & platform

Compiler, target OS, supported device families, and localization footprint detected from the bundle.

Devices

Android

Runtime

Languages & runtimes

Primary runtimes and language signatures used by the app.
C/C++ (native)
142
Java
146
Kotlin
143

Dependencies

Third-party SDKs

Grouped by purpose. Select any SDK to see other tracked apps that use it; open the ↗ link for its source.
41 of 41 SDKs
SDKCategoryVendorVersionAppsSource
AdjustMobile attribution and marketing analytics.AnalyticsAdjust-14
AAdobe Experience PlatformAnalytics--20
Firebase AnalyticsApp usage and event analytics from Firebase.AnalyticsGoogle-118
DatadogReal User Monitoring, logs, and observability.Crash & PerformanceDatadog-28
PPayPalPayments--2
PlaidBank account linking and financial data.PaymentsPlaid-6
Credential ManagerUnified passkey/password/federated sign-in API (Jetpack).AuthenticationGoogle-58
Google Sign-InGoogle account authentication for Android.AuthenticationGoogle-140
CronetChromium network stack for Android.NetworkingGoogle-39
CronetChromium network stack for Android.NetworkingGoogle-35
KtorKotlin asynchronous HTTP client/server framework.NetworkingJetBrains-33
OkHttpHTTP client for Android and Kotlin/Java.NetworkingSquare-125
RetrofitType-safe HTTP client for Android/Java.NetworkingSquare-92
VolleyHTTP networking library for Android.NetworkingGoogle-36
Apollo GraphQLType-safe GraphQL client.GraphQL / APIApollo GraphQL-39
Firebase Cloud MessagingPush notifications via Firebase Cloud Messaging.MessagingGoogle-131
Google LocationFused location / geofencing services.MapsGoogle-106
Google MapsGoogle Maps SDK for mapping, places, and geocoding.MapsGoogle-87
Media3 (ExoPlayer)Media playback (ExoPlayer) for Android.MediaGoogle-88
ML KitGoogle's on-device machine-learning SDK for vision, text, and language tasks.On-device ML / AIGoogle-64
TensorFlowMachine-learning runtime and libraries.On-device ML / AIGoogle-21
TensorFlow LiteOn-device machine-learning inference runtime.On-device ML / AIGoogle-18
Kotlin CoroutinesAsynchronous/concurrent programming for Kotlin.Reactive / AsyncJetBrains-131
RxJavaReactive extensions library for composing asynchronous Java/Kotlin streams.Reactive / AsyncReactiveX-66
DataStoreTyped key-value / proto data storage (Jetpack).StorageGoogle-90
OkioI/O and buffering library for Kotlin/Java.StorageSquare-86
RoomSQLite object-mapping persistence (Jetpack).StorageGoogle-129
SSQLCipherStorage--14
SSQLDelightStorage--17
FirebaseGoogle's app platform (auth, Firestore, messaging, analytics, crash reporting).FirebaseGoogle-160
Google DataTransportFirebase/Google transport runtime for telemetry and event delivery.FirebaseGoogle-143
Google Play servicesGoogle's core mobile services platform.FirebaseGoogle-143
AndroidSVGSVG parser and renderer for Android.RenderingBig Bad Logic-45
CoilKotlin-first image loading for Android.RenderingCoil Contributors-75
Jetpack ComposeAndroid's declarative UI toolkit.RenderingGoogle-117
LottieRenders After Effects vector animations.RenderingAirbnb-138
Material ComponentsMaterial Design UI components for Android.RenderingGoogle-138
libPhoneNumberPhone number parsing, formatting, and validation library.TelephonyGoogle-30
Play IntegrityApp/device integrity and anti-abuse attestation API for Android.Anti-FraudGoogle-51
StatsigFeature flags and experimentation.Feature FlagsStatsig-14
CChuckerDebugging--10
41 SDK rows

Interface

UI & graphics

Frameworks and libraries PayPal - Pay, Send, Save uses to render its interface and animations.
CoilJetpack ComposeLottieMaterial Components

Models

On-device ML models

Core ML and ML model bundles shipped inside the app for local inference.
dyscan_orientation_model.tflite

Packaging

Build & packaging

Dependency managers and build tooling detected in the app bundle.
Gradle (inferred)

Integrations

Services & integrations

Service configuration, URL schemes, universal links, and integration keys observed in the sanitized audit.

Firebase projects

api-project-735175912799api-project-735175912799.appspot.com · https://api-project-735175912799.firebaseio.com

SDK config keys

com.google.android.geo.API_KEYGoogle Maps

Registered URL schemes

connecthttpspaypalplaid

Queries other apps

com.google.android.apps.mapsintent:https

Universal link hosts

www.paypal.com

Network

Backend & API

Backend hosts, GraphQL operations, and certificate pinning signals detected in the app.

Backend hosts

analytics.paypal.comapi-m.paypal.comapi-project-735175912799.firebaseio.comapi.paypal.comb.stats.paypal.comc.paypal.comcrypto-icons.paypal.compaypal.compaypal.mepics.paypal.comwww.cancel.paypal.comwww.paypal.comwww.return.paypal.com

First party

App modules

Likely first-party modules and resource bundles detected in PayPal - Pay, Send, Save.
com.paypalcom.paypal.android

Entitlements

Capabilities

System capabilities and entitlement flags included with the app.
Advertising IDApproximate locationBiometric authBluetoothBluetooth (connect)Bluetooth (scan)CameraForeground serviceMicrophoneNFCNotificationsPrecise location

APIs

Detected API usage

System frameworks and privacy-sensitive APIs referenced by the binary.
Android KeystoreBiometric authClassLoader usePlay Core (in-app updates / dynamic features)Process exec (Runtime)ReflectionSymmetric crypto (javax.crypto)Telephony / device infoWebViewWebView JavaScript bridge

Privacy

Privacy signals

Privacy-related data types, tracking domains, and sensitive API signals detected statically.

Tracking domains

app.adjust.comgdpr.adjust.comssrv.adjust.comsubscription.adjust.com

Accessed API samples

AdjustAdobe Experience PlatformAdvertising IDAnalytics SDK presentDatadogFirebase AnalyticsFirebase MessagingTracking/telemetry hosts in app strings

Architecture

Architecture details

Additional build and bundle signals that help explain how the app is structured.

Storyboards

0

Nibs

0

Build dependency versions

com.google.gson?
com.google.protobuf?
com.squareup.moshi?
Dagger? · Google
dagger.hilt?
javax.inject? · JSR 330
kotlinx.serialization? · JetBrains

Explore technologies across all apps

Browse every SDK, framework, and language we detect, then compare the apps that share the same stack.

App tech stacks →