DiDi Food: Express Delivery

DiDi Global · DiDi Food is a food delivery app that brings restaurant meals to you.

Bundle ID com.xiaojukeji.didi.global.customer
Version analyzed 3.1.74
Build framework Flutter
SDKs detected 14
Analyzed 2026-10-03
Exploratory agent run

What DiDi Food: Express Delivery does

This mobile application is a food delivery and restaurant discovery platform that facilitates end-to-end e-commerce transactions between consumers and food vendors. The architecture integrates geospatial services via Google Maps for precise delivery location management and real-time tracking. The application employs a multi-channel authentication system and includes modules for order lifecycle management, digital wallet transactions, and promotional incentive distribution.

Observed on screen

  • Multi-Channel Authentication Supports user onboarding and session management through mobile number verification, Facebook OpenID, and Google OAuth integration.
  • Geospatial Location Services Utilizes Google Maps API for automated address loading, precise delivery point selection, and restaurant proximity filtering.
  • Restaurant and Menu Discovery Provides a search-driven interface for users to browse local food vendors and specific culinary items.
  • Order Lifecycle Management Features a dedicated module for tracking active orders, viewing historical purchase data, and managing reorder workflows.
  • Integrated Digital Wallet Contains a financial services component for managing user balances, payment methods, and transaction history.
  • Promotional and Referral System Implements a marketing layer that manages discount coupons and user-to-user referral incentives to drive platform growth.
  • Address and Profile Configuration Allows for the persistence of multiple delivery endpoints and user-specific settings to streamline the checkout process.
  • Legal and Compliance Framework Incorporates mandatory acceptance workflows for Terms of Use and Privacy Policies to ensure regulatory data compliance.

Written from a FlyTrap agent exploring the app on a real device, not from the store listing. It covers only the screens that run reached, so anything behind a login, paywall or region lock is absent.

Static + runtime analysis

SDKs detected

14 SDKs found across 10 categories. Click any SDK to see every other app that uses it.

All SDKs
From manifest + Info.plist

Permissions requested 9 sensitive

57 permissions requested at runtime. Colors reflect platform sensitivity tier.

Write storage sensitive

Write files to shared external storage. No-op for apps targeting Android 11+.

Approximate location sensitive

Access approximate location (network-based).

Precise location sensitive

Access exact location via GPS, cell, and Wi-Fi.

Read phone state sensitive

Read phone state, network info, and the device's phone number.

Read storage sensitive

Read files from shared external storage. Replaced by READ_MEDIA_* on Android 13+.

Post notifications sensitive

Post notifications to the system.

Microphone sensitive

Record audio from the microphone.

Read contacts sensitive

Read the user's contacts data.

Camera sensitive

Take pictures and record video.

Network state standard

Read connectivity information.

Internet access standard

Open network sockets.

Wake lock standard

Keep the device awake.

Location provider commands standard

Send extra location-provider commands.

Change Wi-Fi state standard

Change Wi-Fi connectivity state.

Wi-Fi state standard

Read Wi-Fi connection information.

Bluetooth (legacy) standard

Connect to paired Bluetooth devices on Android 11 and below.

Modify audio settings standard

Modify global audio settings.

com.google.android.gms.permission.AD ID standard
Change network state standard

Change network connectivity state.

Modify system settings standard

Modify system settings. Granted from system settings.

Display over other apps standard

Draw windows on top of other apps. Granted from system settings.

Vibrate standard

Control the vibrator.

FLASHLIGHT standard
DETECT SCREEN CAPTURE standard
Schedule exact alarms standard

Schedule alarms that fire at an exact time. Granted from system settings; denied by default on Android 13+.

USE FULL SCREEN INTENT standard
SYSTEM OVERLAY WINDOW standard
Bluetooth admin (legacy) standard

Discover and pair Bluetooth devices on Android 11 and below.

Run at startup standard

Receive the BOOT_COMPLETED broadcast.

com.android.launcher.permission.READ SETTINGS standard
Biometric authentication standard

Authenticate using biometric hardware.

Fingerprint authentication standard

Authenticate using fingerprint hardware.

Manifest.permission.MODIFY AUDIO SETTINGS standard
com.google.android.c2dm.permission.RECEIVE standard
com.google.android.finsky.permission.BIND GET INSTALL REFERRER SERVICE standard
ACCESS ADSERVICES ATTRIBUTION standard
com.huawei.appmarket.service.commondata.permission.GET COMMON DATA standard
Foreground service standard

Run a foreground service.

com.xiaojukeji.didi.global.customer.DYNAMIC RECEIVER NOT EXPORTED PERMISSION standard
Send sticky broadcast standard

Send sticky broadcasts.

com.app99.driver.permission.ACCESS SHARE PROVIDER standard
com.didiglobal.driver.permission.ACCESS SHARE PROVIDER standard
com.didiglobal.driver.au.permission.ACCESS SHARE PROVIDER standard
com.sdu.didi.gsui.hk.permission.ACCESS SHARE PROVIDER standard
com.sdu.didi.gsui.tw.permission.ACCESS SHARE PROVIDER standard
com.sdu.didi.gsui.jp.permission.ACCESS SHARE PROVIDER standard
com.didiglobal.fleet.permission.ACCESS SHARE PROVIDER standard
com.taxis99.permission.ACCESS SHARE PROVIDER standard
com.didiglobal.passenger.permission.ACCESS SHARE PROVIDER standard
com.didi.global.rider.permission.ACCESS SHARE PROVIDER standard
com.didi.brazil.rider.permission.ACCESS SHARE PROVIDER standard
com.xiaojukeji.didi.global.customer.permission.ACCESS SHARE PROVIDER standard
com.xiaojukeji.didi.global.merchant.permission.ACCESS SHARE PROVIDER standard
com.xiaojukeji.didi.brazil.customer.ACCESS SHARE PROVIDER standard
com.xiaojukeji.didi.brazil.merchant.ACCESS SHARE PROVIDER standard
com.xiaojukeji.didi.global.bd.permission.ACCESS SHARE PROVIDER standard
com.xiaomi.security.permission.ACCESS XSOF standard

Frequently asked questions

What FlyTrap detected inside DiDi Food: Express Delivery.

What does DiDi Food: Express Delivery do?

This mobile application is a food delivery and restaurant discovery platform that facilitates end-to-end e-commerce transactions between consumers and food vendors. The architecture integrates geospatial services via Google Maps for precise delivery location management and real-time tracking. The application employs a multi-channel authentication system and includes modules for order lifecycle management, digital wallet transactions, and promotional incentive distribution. This comes from a FlyTrap agent exploring the app on a real device, so it covers only the screens that run reached.

What is DiDi Food: Express Delivery built with?

DiDi Food: Express Delivery by DiDi Global is built with Flutter. FlyTrap determined this by analyzing the app's compiled binary, not from anything the developer published.

What SDKs does DiDi Food: Express Delivery use?

FlyTrap detected 14 third-party SDKs inside DiDi Food: Express Delivery, including Facebook SDK, Firebase Analytics and Firebase Cloud Messaging. They span areas such as Analytics, Push Notifications, Authentication and Payments. The full list, grouped by category, is on this page.

What permissions does DiDi Food: Express Delivery request?

DiDi Food: Express Delivery requests 57 permissions. 9 of these are sensitive, such as Write storage, Approximate location and Precise location. Each is listed above with its platform sensitivity tier.

Is DiDi Food: Express Delivery safe to use?

FlyTrap reports what an app contains, it does not issue a safety verdict. DiDi Food: Express Delivery requests 57 permissions (9 sensitive) and bundles 14 third-party SDKs. Reviewing those alongside the developer helps you decide what you are comfortable granting.

What platforms is DiDi Food: Express Delivery available on?

The version FlyTrap analyzed targets Android.