'%3e%3cpath%20d='M138%2095.6436V147H0V0H138V51.3564H59.3526V95.6436H138Z'%20fill='white'/%3e%3cpath%20d='M208%200V147H150V0H208Z'%20fill='white'/%3e%3cpath%20d='M361%200V51.4292H321.377V147H261.731V51.4292H220V0H361Z'%20fill='white'/%3e%3cpath%20d='M512%200V51.4292H472.939V147H414.139V51.4292H373V0H512Z'%20fill='white'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_1_12'%3e%3crect%20width='512'%20height='147'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Scan results
Lively: Cycle Syncing, Period
AndroidLively is a period tracker and cycle syncing app that provides personalized daily tips for menstrual, follicular, ovulatory, and luteal phases. It includes partner syncing features, pregnancy tracking, and guidance on nutrition, exercise, and self-care throughout your cycle.
Quick Verdict
Best for: Cycle tracking with standard app analytics
Not For: You prefer your health data stays off ad networks
What It Means For You
Cycle and health data is handled by an app connected to Facebook, AppsFlyer, and Firebase, meaning usage patterns can reach advertising and attribution networks. Push notifications are managed by OneSignal, a third-party service. The app provides reasonable account controls, but user activity is shared across several external platforms.
Quick Verdict
Best for: Cycle tracking with standard app analytics
Not For: You prefer your health data stays off ad networks
What It Means For You
Cycle and health data is handled by an app connected to Facebook, AppsFlyer, and Firebase, meaning usage patterns can reach advertising and attribution networks. Push notifications are managed by OneSignal, a third-party service. The app provides reasonable account controls, but user activity is shared across several external platforms.
Method and Limitations
Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.
Findings (15)
Data Security
3 totalNetwork Security
2 totalCode Security
4 totalPrivacy
4 totalThird-Party Risk
2 totalThird-Party Services
Security Strengths
- ✓Firebase Auth uses EncryptedSharedPreferences for tokens
- ✓Ably implements end-to-end encryption for partner messages
- ✓Root detection via OneSignal SDK
- ✓Play Integrity API implemented for app attestation
- ✓R8 code obfuscation applied
Version diff is on the Developer plan. See developer plans.
Context Tags
Package
com.app.lively_app
Version
2.6.8 (versionCode 281)
Analysis Date
Jan 31, 2026
Classes Analyzed
3,000
Was this analysis helpful?
Feedback helps us improve our analysis
Recommendation: Use With Caution
Key Findings
Data Security - 3 findings (1 critical, 1 high, 1 medium)
Network Security - 2 findings (2 high)
Code Safety - 0 findings
Privacy - 4 findings (2 high, 2 medium)
Privacy Concerns
What Data is Collected
This app collects sensitive personal health information, including menstrual cycle dates, symptoms, and related health inputs provided by users. It also collects standard device and usage data such as device model, operating system version, and how users interact with app features.
Third-Party Data Sharing
User data and activity are shared with the following external services:
- Facebook SDK - In-app behavior and device information are shared with Facebook for advertising and audience targeting purposes.
- AppsFlyer - Install source and in-app activity are shared with an attribution network to measure ad campaign performance.
- Firebase - Usage analytics and crash information are sent to Google Firebase.
- OneSignal - The device push notification identifier is shared with OneSignal to deliver notifications.
- Intercom - Customer support interactions are handled by Intercom, a third-party service.
- Adapty - Subscription and purchase data is processed by Adapty.
- Ably - Real-time messaging features are powered by Ably.
- Google Play Billing - In-app purchases are processed through Google Play Billing.
Understanding the Scores
| Category | Score |
|---|---|
| Security | 80/100 |
| Privacy | 80/100 |
| Data Security | 75/100 |
| Network Security | 85/100 |
| Code Safety | 80/100 |
| Data Collection | 80/100 |
| Data Sharing | 80/100 |
| User Control | 85/100 |
Positive Security Features
- Account management controls give users reasonable ability to manage their data and account.
- Network communications use current transport security practices for data in transit.
Areas for Improvement
- How health data is stored on the device could be strengthened to better protect cycle information if the phone is accessed by someone else.
- Some network connections could benefit from additional protections to further reduce the risk of data being read in transit.
- User health and behavioral data reaches multiple advertising and attribution platforms. Reducing that sharing scope would better protect user privacy.
About This Analysis
This scorecard reflects the security and privacy practices observed in the version of the app detailed below.
App Details
| Field | Value |
|---|---|
| App Name | Lively: Cycle Syncing, Period |
| Package ID | com.app.lively_app |
| Version | 2.6.8 (281) |
| Scan Date | January 31, 2026 |
| Developer | Not listed |
Right of Reply
Developer not yet contacted