Built from public records and checked 2026-10-22. Not an audit of Temu. How scores are made · spotted a mistake? Tell us.

Google Play apps high jurisdiction risk

Temu

Online marketplace · Score 72/100 · Last checked 2026-10-22

The short version

Review the permissions you grant the app. Its parent's annual report says its operations in China are subject to PRC law.

Built from: public records, checked 2026-10-22.

Score breakdown

Security record77

Documented incidents and safeguards (public record, not a technical test)

Data jurisdiction28

Which laws and governments can reach your data

Ownership transparency90

How plainly the owner can be traced

Third-party exposure92

Documented analytics, advertising and attribution partners

Who owns it

Temu→Whaleco Inc. (US); Whaleco Technology Limited (EU, UK)→PDD Holdings Inc.

Parent based in: 🇮🇪 Ireland (EU)

Also subject to law in: 🇨🇳 China, per the sources below.

Laws that can apply: EU GDPR, PIPL, National Intelligence Law, Data Security Law

Where your data can go

Who	Country	Why they are involved
Whaleco Technology Limited	🇮🇪 Ireland (EU)	EU and UK data controller; its policy says EU and UK data is stored in the UK and EEA
Google	🇺🇸 United States	Maps and optional sign-in
Meta (Facebook)	🇺🇸 United States	Optional sign-in

Jurisdictions touched: 🇮🇪 Ireland (EU) · 🇨🇳 China · 🇺🇸 United States

What the public record says

mediumNebraska attorney general sued Temu over phone data collection (allegations)

In June 2025 the state sued Temu and its affiliates, alleging consumer-protection violations including collecting phone data. These are allegations in a lawsuit, not findings. Source

lowEuropean Commission fined Temu €200 million under the Digital Services Act

The Commission found Temu's risk assessment of illegal products fell short. This concerns product safety, not user data. Source

lowWhaleco agreed to a $2 million civil penalty under the INFORM Consumers Act

The US government alleged inadequate seller disclosures and reporting tools; Whaleco Inc. agreed to the penalty and compliance measures. This concerns marketplace rules, not user data. Source

Sources

Ownership, locations and data partners come from the company's own pages and filings where they exist. Last checked 2026-10-22.