Yivi is an open-source (GPL-3.0-only) Android app by Privacy by Design foundation. The APK we host is 314 MB, it needs Android 8.0 or newer, and it declares 12 permissions.
The file on this page is Yivi 8.3.3, 314 MB, and it installs on Android 8.0 and newer.
We compared the signing certificate of this build with the certificate recorded the first time org.irmacard.cardemu entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest inside the APK declares 12 permissions, including access to the camera and the microphone. Android asks you to approve those the first time the app needs them.
Its licence is GPL-3.0-only. We took this build from F-Droid, and the source for this exact version is linked below.
F-Droid, who build and sign this package, flag it: it ships assets (art, sounds, data) that are not free. We pass that on as they recorded it — we have not tested the app ourselves.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 8.3.3
- Size
- 314 MB
- Requires Android
- API 26
- Package
- org.irmacard.cardemu
- Signature checked on
- Oct 23, 2026
- Where this file came from
- F-Droid
- Licence
- GPL-3.0-only
- Source code
- Source for this version
File SHA-256: 3c6945d0f85c3e24773f35c46e88848bd297a797667734f728b1238851daf2a2
Signing certificate (SHA-256): 8969e37dadfdca2912867ca3fc2b023faaccbf2bfba1f14e0256c017368b6bf4
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- INTERNET
- USE_BIOMETRIC
- WAKE_LOCK
- VIBRATE
- CAMERA
- RECORD_AUDIO
- WRITE_EXTERNAL_STORAGE
- READ_EXTERNAL_STORAGE
- NFC
- USE_FINGERPRINT
- org.irmacard.cardemu.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- ACCESS_NETWORK_STATE
Screenshots


