Newsletter September–December 2025

September-December 2025 newsletter from the App-PI Project of the Privacy Engineering Research Group (IngPriv) at the University of Valladolid

In the period between September and December, members of the Privacy Engineering Research Group at the School of Computer Science of the University of Valladolid participated in several events and conferences and gave workshops at various centres and institutes. Here is a summary of the main activities carried out during this period:

📍Events:

  • Navaja Negra Conference 2025

In this edition of Navaja Negra, Javier García González, a student at the School of Computer Engineering, presented APKAudit, a tool developed as part of his Final Degree Project under the supervision of Amador Aparicio de la Fuente. The tool allows Android applications to be audited by analysing permissions, trackers and consistency between the actual behaviour of an app and its privacy statement, using the App-PIMD repository and PIM metrics.

📄You can find more information at this link: https://ingpriv.uva.es/en/navaja-negra-2025-2/

  • ENISE 2025 – International Information Security Conference

Mercedes Martínez González participated in the 19th edition of ENISE (León) in the presentation ‘Citizen cybersecurity: innovation at the service of society’, where she presented the App-PI Project and its contribution to citizens through tools that allow the impact of mobile apps on the privacy and security of personal data to be evaluated.

📄You can find more information at this link: https://ingpriv.uva.es/en/enise-2025-3/

  • Research stay at the University of Luxembourg

Alejandro Pérez de la Fuente completed a research stay at the Interdisciplinary Centre for Security, Reliability and Trust (SnT) at the University of Luxembourg, collaborating with the Trustworthy Software Engineering (TruX) group. During his visit, he presented the App-PI Project, the App-PIMD repository and the APK Falcon tool, promoting international synergies in the field of privacy engineering.

📄You can find more information at this link: https://ingpriv.uva.es/en/research-stay-at-the-university-of-luxembourg-collaboration-between-the-ingpriv-group-and-the-trux-group/

  • VallaTech Summit 2025 (DevFest Valladolid)

Pablo Abel Criado Lozano, Alejandro Pérez de la Fuente, and Javier Rodríguez Aparicio presented the practical workshop ‘Dissect your Android apps and assess their impact on your privacy’ at the VallaTech SummiT 2025 (DevFest Valladolid). In the workshop, aimed at developers and professionals, they showed how to audit Android applications through static analysis, tracker detection, permission review, use of the APK Falcon tool and the App-PIMD repository.

📄You can find more information at this link: https://ingpriv.uva.es/en/vallatech-summit-2025/

  • UVa Special Awards 2023-2024

The University of Valladolid recognised the academic excellence of several current and past members of the IngPriv Group with Special Master’s Degree Awards:

📄You can find more information at this link: https://ingpriv.uva.es/en/2023-2024-special-awards-to-members-of-the-privacy-engineering-research-group/

🎓Congresses:

  • JISBD / SISTEDES 2025 Conference (Córdoba)

In September, Alejandro Pérez de la Fuente presented a paper entitled ‘Who controls your health data on Android? The role of Health Connect’ at the SISTEDES 2025 Conference. The paper was developed in collaboration with Mercedes Martínez González, Amador Aparicio de la Fuente and Pablo Abel Criado Lozano. This research analyses the role of Health Connect, Google’s platform that collects and manages health data on Android devices. The paper addresses the risks and opportunities arising from this centralisation of data, its implications for user privacy and the need for analytical frameworks to assess the security, traceability and control of personal information.

📄You can find more information at this link: https://ingpriv.uva.es/en/jisbd-cordoba-2025-2/

  • ESORICS 2025 – MIST Workshop

At the 30th European Symposium on Research in Computer Security (ESORICS 2025), Amador Aparicio de la Fuente and Alejandro Pérez de la Fuente presented the paper ‘PIM: A Metric to Empower Mobile App Users in Privacy Management’, written in collaboration with Mercedes Martínez González and Pablo Abel Criado Lozano. This research proposes the PIM metric (Privacy Impact Metric), a tool that quantifies the real impact that mobile app permissions have on user privacy.

📄You can find more information at this link: https://ingpriv.uva.es/en/jisbd-cordoba-2025-2/

  • XX Iberian International Business Conference (IIBC 2025 – Gijón)

In October, Dr. Víctor Temprano García presented the paper ‘Artificial Intelligence Adoption and Marketing Performance: An Information Processing Theory Perspective’ at the XX Iberian International Business Conference, in Gijón. In his presentation, Víctor analysed how information processing capabilities influence the responsible adoption of artificial intelligence solutions by organisations, highlighting their impact on data management and user privacy.

📄You can find more information at this link: https://ingpriv.uva.es/en/xx-iberian-international-business-conference-3/

  • UCAmI 2025 – International Conference on Ubiquitous Computing and Ambient Intelligence

At the end of November, Alejandro Pérez de la Fuente and Pablo Abel Criado Lozano presented their pre-doctoral research at the International Conference on Ubiquitous Computing and Ambient Intelligence (UCAmI 2025). Alejandro presented ‘Ontologies and Artificial Intelligence for Privacy Assessment in the Internet of Everything (IoE)’, developed together with Mercedes Martínez González, in which he proposes an approach that combines ontologies and artificial intelligence techniques to improve privacy audit processes in the Internet of Everything, based on the App-PIMD repository. For his part, Pablo Abel presented his research ‘Real privacy impact of mobile applications: checks through static analysis’, also developed together with Mercedes Martínez, which focuses on the static analysis of the code and metadata of mobile applications to detect discrepancies between the real behaviour of an app and the information communicated to the user in its privacy policies.

📄You can find more information at this link: https://ingpriv.uva.es/en/presentations-at-ucami-2025/

✏️Workshops and training activities

During September and December, several members of the Privacy Engineering Research Group gave workshops at different educational centres in Valladolid. On the one hand, workshops were given to secondary school students at IES Río Duero in Tudela de Duero, IES Vega del Prado, IES Julián Marías and Lestonnac School. A workshop was also given at the Ave María School for second-year high school students. In addition, other workshops were developed for vocational training students at the IES Julián Marías, and we brought digital privacy training to older people at the Red Cross centre. These practical workshops explained content to help improve users’ digital skills and privacy when using mobile apps.

📄You can find more information at these links:

Scroll to Top