Scan results

Recommendation: Acceptable

Key Findings

Data Security - 9 findings (1 critical, 3 high, 4 medium, 1 low)

Network Security - 1 finding (1 low)

Code Safety - 0 findings

Privacy - 7 findings (3 critical, 2 high, 2 medium)

Privacy Concerns

What Data is Collected

The app collects behavioral and usage data through Firebase Analytics and Firebase Sessions. Crash reports are gathered through Firebase Crashlytics. Install and attribution data is collected by Tenjin. Account information, messages, and files are stored in Firebase Firestore, Realtime Database, and Cloud Storage. Video call data is processed through the Twilio Video SDK. Purchase and subscription information is handled by RevenueCat.

Third-Party Data Sharing

Behavioral data is shared with Google through Firebase Analytics and the Google Ads SDK, which may use it to serve targeted advertising. Tenjin receives install and attribution data to measure ad campaign performance. OneSignal processes device information to deliver push notifications. RevenueCat receives purchase history and subscription status. Each of these services operates under its own data policies.

Understanding the Scores

• Security: 80/100
• Privacy: 80/100
• Data Security: 80/100
• Network Security: 100/100
• Code Safety: 85/100
• Data Collection: 80/100
• Data Sharing: 80/100
• User Control: 80/100

Positive Security Features

• Network communications are well protected, with the app scoring a perfect 100/100 for how it handles data in transit.

Areas for Improvement

• The app relies on multiple advertising and attribution services that collect and share behavioral data; reducing this footprint would give users more control over how their information is used.
• Some data storage practices could be tightened to reduce the chance that sensitive information is exposed under certain conditions.
• Clearer in-app controls over data collection and third-party sharing would give users more meaningful choices about their privacy.

About This Analysis

App Details