CITT

    Scan results

    LifeSpan Fit

    Android

    LifeSpan Club is a fitness tracking app that connects to LifeSpan fitness equipment to monitor workout performance. Track health metrics by week or day, view heart rate zones and achievements, and optionally sync workout data to Google Fit.

    CITT SCORE
    42
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Casual step tracking with ad-supported fitness goals

    Not For: You don't want workout data tied to ad profiles

    What It Means For You

    Fitness and health data is shared with Facebook and Google's advertising systems, connecting workout habits to ad profiles that follow users across other apps and websites. Health metrics are collected with limited safeguards on how they are stored. Users will see ads targeted based on physical activity and health goals.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (28)

    Data Security

    4 total
    1 Critical
    2 High
    1 Low

    Network Security

    2 total
    1 High
    1 Medium

    Code Security

    8 total
    1 Critical
    2 High
    5 Medium

    Privacy

    12 total
    1 Critical
    4 High
    4 Medium
    3 Low

    Third-Party Risk

    2 total
    2 Critical

    Third-Party Services

    Facebook SDK, Firebase Analytics, Google Health Connect, Plog MQTT, Google Advertising

    Security Strengths

    • ✓FlutterSecureStorage with AES-256-GCM encryption
    • ✓SQLCipher 4.5.4 for encrypted databases
    • ✓All discovered API endpoints use HTTPS
    • ✓Code obfuscation applied
    • ✓Modern WebView implementation
    • ✓Release build configuration (not debuggable)
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    health
    fitness
    sensitive data
    analytics
    ads
    third party sdks

    Package

    com.app.lifespanfit

    Version

    2.0.9 (Build 43)

    Analysis Date

    Feb 5, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 4 findings (1 critical, 2 high, 1 low)

    Network Security - 2 findings (1 high, 1 medium)

    Code Safety - 0 findings

    Privacy - 12 findings (1 critical, 4 high, 4 medium, 3 low)

    Privacy Concerns

    What Data is Collected

    LifeSpan Fit collects step counts, physical activity history, fitness goals, and health metrics. Device identifiers and behavioral patterns are gathered alongside workout data and linked to the user's account.

    Third-Party Data Sharing

    Fitness and health data flows to Facebook, Google Advertising, and Firebase Analytics. These services use activity information to build advertising profiles that follow users across other apps and websites. Google Health Connect also receives health data for cross-app integration.

    Understanding the Scores

    CategoryScore
    Security40/100
    Privacy45/100
    Data Security35/100
    Network Security75/100
    Code Safety40/100
    Data Collection55/100
    Data Sharing30/100
    User Control45/100

    Positive Security Features

    • No notable positive security practices were identified in this version of the app.

    Areas for Improvement

    • Workout and health data should not be routed to advertising networks. Separating fitness features from ad-targeting services would meaningfully reduce the privacy impact on users.
    • Stronger protections are needed for how health metrics are stored, so that data is not accessible beyond the app itself.
    • Users should have clearer, easier controls over which data leaves the app and which third parties receive it.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the presence and severity of privacy and security issues found across key categories.

    App Details

    • App: LifeSpan Fit
    • Package ID: com.app.lifespanfit
    • Version: 2.0.9 (Build 43)
    • Scan Date: February 5, 2026
    • Developer: Not listed

    Right of Reply

    Developer not yet contacted