Holvi Business App

[andzhi4]

Is there an existing issue for this?

• I have searched the existing issues

App name

Holvi

Link to app

https://play.google.com/store/apps/details?id=com.holvi.app

App version

20.7.0

Country of the app

Finland

Build Number

2025011500

Device list

Pixel 9 Pro

Profile app tested in

Owner profile

Google Play installed?

Installed

Where did you install this app from?

Aurora Store

Google Play services Network permission revoked?

• Revoked
• Not revoked
• I did not have Google Play services installed

Native code debugging

• Allowed
• Blocked

Exploit protection compatibility mode

• Enabled
• Disabled

Memory tagging

• Enabled
• Disabled
• N/A

Dynamic code loading via memory

• Restricted
• Allowed

Dynamic code loading via storage

• Restricted
• Allowed

Stock OS compatibility

• Works
• Does not work
• Not tested

NFC payments

• Works
• Works but requires another service
• Does not work
• N/A (Not supported by app)
• Not tested

Description of the app's functionality

The app cannot be installed from the Play Store, error message states "This app won't work for your device"
Installation from the Aurora Store was possible, though the installed app exited immediately after launch redirecting user to the Play Store, asking to obtain the app from there. Switching any configuration toggles has not changed the outcome.
At the moment (23-JAN-2025) installation is not possible even from the Aurora Store, download fails

.

Are there any extra notes you think users should know about?

Holvi developer acknowledges the issue and states that using Play Integrity API was a deliberate choice. The only solution they could recommend is to keep a second device with an "official rom" nearby. It is impossible to access the service without the app.

ADB logcat of the app if necessary

[andzhi4]

I found a bypass, probably worth including in the report.

It is possible to download the app from Aurora Store and install it, then having play services enabled, but play store disabled, you'll get an error message when you start the app:

"Something went wrong
Check that Google Play is enabled on your device and that you're using an up-to-date version before opening the app. If the problem persists try reinstalling the app."

If instead of closing it, you simply return to the main app screen (previous app gesture or just select it in the app list), the application starts normally and functions as on any "official" OS.

I was able to register my device as trusted, login, view operations, attach documents, change settings, confirm web app login. I think the app does not provide NFC payment functionality.

If I'm not mistaken, GOS developers considered including this method as an official bypass in future releases, so that there is no need to fiddle with the google services configuration. Long term perspective is unclear, since Holvi developers could close the loophole in any upcoming release.
Anyways, if "Block Play Integrity API Requests" toggle is implemented in a future release of GOS, the app might be deemed compatible

[spring-onion]

Could you please test this workaround in a secondary profile too?

[andzhi4]

Tested in a secondary profile with following config

• only extra apps are play services, play store and Holvi (pushed from the owner profile);
• play store is disabled, play services are enabled with only network and sensors privileges granted;

The same workaround is working: Holvi complains about inaccessible Google Play, but switching back to the main app allows you to continue. I went as far as entering login credentials and making sure the app accepts them. Further steps will require registering the device as trusted. But as previous experiments show, once it stops caring about Play, it just works.
Please let me know if you believe it's necessary to test the full workflow

[spring-onion]

Thank you. I'll be marking it compatible.

Please let me know if you believe it's necessary to test the full workflow

I don't think so.

[andzhi4]

GOS release 2025012600 introduced per app Play Integrity API blocking

Sandboxed Google Play compatibility layer: add per-app toggle for blocking using the Play Integrity API via the per-app Play Integrity menu as a workaround for apps which ban devices based on it but don't require providing it to their service yet.

This might allow running the app without additional fiddling. I'll wait till the new version is delivered and test it