The official app for the Beijing 2022 Winter Olympics, called ‘My 2022’, has many security flaws. The app, which is mandatory for all athletes, journalists and audience members attending the games, uses a flawed encryption. This enabled malicious actors to intercept data, including documents, audio and other files, from the app in an unencrypted format.Domestic users are required to enter their national identification numbers, phone numbers, email addresses and employment information. Foreign users need to input their passport information, COVID-19 vaccination status, demographic data, employer and a daily health check.Though the app is in violation of Google’s software policy and the Apple App Store guidelines, as it’s subject to censorship and the wording of the privacy policy is unclear, it's still available in both stores.