Bucket List: iBucket Security & Privacy Scorecard

Bucket List: iBucket

Developer: (unlisted)
Version: 15.0.2
Platform: Android
Scan Date: March 9, 2026

What This Means for You

Usage patterns and crash data are shared with Google Firebase for analytics and app performance monitoring. Purchase activity flows through RevenueCat alongside Google Play and Amazon billing. Personal goals and list content stay largely private, with strong controls over what data leaves the device.

Recommendation: Use With Caution

Best For: Tracking personal goals with minimal data exposure

Key Findings

Data Security - 3 findings (3 high)

Network Security - 1 finding (1 critical)

Code Safety - 0 findings

Privacy - 2 findings (2 medium)

Privacy Concerns

What Data is Collected

Usage patterns and crash reports flow to Firebase services automatically. Authentication identifiers are processed when users sign in through Google or Apple. Purchase history is recorded through RevenueCat, Google Play Billing, and Amazon IAP whenever a subscription is purchased or restored.

Third-Party Data Sharing

Data is shared with the following services:

• Firebase (Google): Analytics, crash reporting, performance monitoring, push notifications, remote configuration, and cloud storage
• RevenueCat: Purchase and subscription management
• Google Play Billing: Payment processing
• Amazon IAP: Payment processing
• Google Sign-In / Apple Sign-In: Authentication

Understanding the Scores

Positive Security Features

• The app collects a minimal amount of personal information, limited to what is needed for core functionality
• Strong user controls are in place over what data leaves the device, reflected in a 94/100 User Control score
• Code quality is exceptionally clean, with very low risk of software defects affecting stored goals and lists

Areas for Improvement

• Data stored locally on the device could be better protected against unauthorized access if the phone is lost or shared with others.
• The connection between the device and the app's servers needs stronger safeguards. User data may not be fully protected while it travels, particularly on public Wi-Fi.
• Some data handling practices should be brought up to current standards to reduce the risk of user information being exposed.

About This Analysis

This scorecard is generated through automated static analysis of the application. Scores reflect the state of the app at the time of scanning and may not reflect subsequent updates.

App Details

• App Name: Bucket List: iBucket
• Package ID: com.kaimallie.ibucket
• Version: 15.0.2 (build 15021)
• Scan Date: March 9, 2026
• Platform: Android