Anyone can check that a Zoomy file is the one published here, without buying anything or signing in.
The current Zoomy build is v4.18.29.
Its file is Zoomy-customer-v1820.apk and its SHA-256 is:
550218ca82a3489e9777ebd6b727cf81c153eaeaf6d3d92556f9fd70512cf589
Published 2026-10-18T08:48:08Z.
Windows (PowerShell):
Get-FileHash -Algorithm SHA256 .\Zoomy-customer-v1820.apk
macOS or Linux:
shasum -a 256 Zoomy-customer-v1820.apk
If the value matches, the file you have is the one published here. If it does not, do not install it.
MG4 head units accept any app signed with a key that is publicly available, so a signature alone proves nothing about who built a file. Comparing the fingerprint against this page is the check that does.
Zoomy · Install guide · FAQ