Holvi Business App Blocks GOS

andzhi4

Hi everybody!
Sorry, not a popular topic, but I'd like to highlight Holvi, an app that blocks GrapheneOS due to Play Integrity API. It's an online-only banking service for small businesses and entrepreneurs that is currently only available in Austria, Finland and Germany. It is a lot like Revolut in a sense that you cannot access banking services without a mobile device (there is a web app, but you still need mobile as a second factor).
The app is geo-restricted in the Play Store, but even if you are in supported location, it says "Not Compatible with Your Device" or something. (Tested on Pixel 9, GOS 2025011500)

Last couple of weeks I've been chatting with their support, and received only condolences or promises to take a look at the issue "in future", which effectively means "unlikely".

I was wondering if there are other users or just someone who would be willing to write a review or ping their support with a request for app compatibility? It is a small company and should be easier to persuade than a big business.
Here is their app: https://play.google.com/store/apps/details?id=com.holvi.app
And the support email: support@holvi.com

Thank you everyone in advance for any help or suggestions!

AlphaElwedritsch

Thanks for the tip with this backing service.
I was looking for something like that

andzhi4

NP. privsec.dev have now added a report for the app. I initially reported it as incompatible, but soon after stumbled upon a workaround that makes the app (at least the version in the report) work normally under GOS. In short, after installation you need to disable Play Store app, and when Holvi tries to redirect you there, just return to a previous screen, the app will run as normal.
I hope that in the latest GOS release that step can be avoided due to Play Integrity requests block toggle. I'll test it once 2025012700 is in stable channel

andzhi4

Release 2025012700 that tracks Play Integrity API calls has not triggered at Holvi app startup, i.e. the app itself does not seem to use the API, but only redirects you to the Play Store if your version has been obtained from somewhere else. Disabled Play Store allows you to bypass this