As @Hills90210 said, it is highly recommended to use HTTPS. BUT, if you really want to use HTTP, you can allow clear text for your specific IP/Domain on Android via the AndroidManifest.xml file.
See my comment over here - Unable to carryout HTTP post on Android - #2 by twestrick.