CITT

    Scan results

    F1 TV

    Android

    Official F1 TV app offering live and on-demand Formula 1 streaming with multiple tiers: Premium for 4K multi-view racing, Pro with onboards and team radio, and Access with live timing. Includes ads and in-app purchases.

    CITT SCORE
    92
    out of 100
    TRUSTED

    Quick Verdict

    Best for: F1 fans who want live race streaming

    What It Means For You

    Viewing habits and app activity are tracked by Firebase and shared with Facebook and Salesforce for marketing purposes. Crash reports and performance data are collected automatically. User accounts are protected with strong authentication, and data travels over fully secured connections.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (5)

    Data Security

    1 total
    1 Critical

    Code Security

    3 total
    2 Medium
    1 Low

    Third-Party Risk

    1 total
    1 Medium

    Third-Party Services

    Bitmovin Player, Bitmovin Analytics, Firebase Analytics, Firebase Crashlytics, Firebase Messaging, Firebase Remote Config, Firebase Performance, Salesforce Marketing Cloud, NewRelic APM, Facebook SDK, PingIdentity, Google Play Services, Amazon IAP, Cloudinary, Picasso, Distil Networks

    Security Strengths

    • ✓Certificate pinning implemented for content delivery APIs
    • ✓Comprehensive HTTPS enforcement with cleartext traffic disabled
    • ✓Proper SSL/TLS validation without bypass
    • ✓GDPR-compliant consent management with Sourcepoint CMP
    • ✓PingIdentity SDK uses encrypted storage with Android Keystore
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    entertainment
    subscription
    video streaming
    paid content
    ads
    analytics
    location

    Package

    com.formulaone.production

    Version

    3.0.47.1-SP153.10.0-release-r51-mobile (versionCode: 30471000)

    Analysis Date

    Mar 6, 2026

    Classes Analyzed

    22,455

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Trustworthy

    Key Findings

    Data Security - 1 finding (1 critical)

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 0 findings

    Privacy Concerns

    What Data is Collected

    F1 TV collects usage data, crash reports, and performance metrics automatically. Account information and notification preferences are stored to support login and personalized messaging. Viewing activity and in-app behavior are logged by analytics services tied to the user's session.

    Third-Party Data Sharing

    Activity data is shared with multiple third parties: Firebase (Google) for analytics and crash reporting, Facebook for advertising and attribution, Salesforce for marketing communications, and NewRelic for performance monitoring. PingIdentity handles authentication, and Amazon processes in-app purchases. Bitmovin receives playback analytics to measure streaming performance.

    Understanding the Scores

    • Overall Security: 86/100
    • Overall Privacy: 98/100
    • Data Security: 82/100
    • Network Security: 100/100
    • Code Safety: 96/100
    • Data Collection: 100/100
    • Data Sharing: 98/100
    • User Control: 100/100

    Positive Security Features

    • All network communications are fully encrypted in transit
    • Code integrity protections are in place, making the app resistant to unauthorized modification
    • User account controls are comprehensive, giving users full authority over their account
    • Authentication is handled through a dedicated identity provider, keeping login secure and isolated from the main app code
    • Network security practices earned a perfect score, meaning data moves safely between the app and its servers at all times

    Areas for Improvement

    • This version of the app contains a critical-level finding in how certain data is handled internally; this should be addressed in a future update.
    • The app connects to 16 third-party services, each receiving a portion of user data. Reducing the number of integrations would lower the overall data sharing footprint.
    • Clearer in-app controls for opting out of behavioral tracking by Facebook and Salesforce would give users more meaningful choice over how their data is used for advertising purposes.

    About This Analysis

    This scorecard is based on automated static analysis of the app's code and configuration. Scores reflect the state of the app at the time of scanning and may change with future updates.

    App Details

    • App: F1 TV
    • Package: com.formulaone.production
    • Version: 3.0.47.1-SP153.10.0-release-r51-mobile
    • Scan Date: 2026-03-06
    • Analysis by: canITrustThat.com

    Right of Reply

    Developer not yet contacted