Coloring Book for Adults: Lake Security & Privacy Scorecard

by Lake Coloring · iOS

83
Overall trust score
Trustworthy
90
Security
80
Privacy

Usage patterns and in-app activity are shared with several analytics and advertising companies, including Facebook and AppsFlyer, to measure and target ads. Purchase history is tracked by payment and marketing platforms. Network connections are handled securely.

Best for

Relaxed coloring without major privacy concerns

Avoid if

You prefer apps without Facebook or ad-targeting SDKs

Findings

  • 0 critical
  • 1 high
  • 5 medium
  • 8 low
  • 8 info

1 issue identified across security and privacy analysis.

Top security issues

  • Static backend API credentials (APIClientKey UUID) hardcoded in Info.plist, extractable from any IPA without jailbreak
  • NSFileProtectionNone referenced in binary — user artwork and journal entries potentially accessible via forensic extraction
  • CoreData SQLite database stores personal user artwork and journal entries without SQLCipher encryption

Top privacy issues

  • 7 data-collecting SDKs (Firebase Analytics, Mixpanel, RevenueCat, Google Ads, Facebook, Purchasely, Google Identity) missing required privacy manifests, producing inaccurate App Store privacy label
  • NSPrivacyTrackingDomain typo in Info.plist causes iOS to ignore ATT enforcement for Mixpanel, RevenueCat, and OneSignal analytics domains
  • Background ('Always') location permission declared for analytics use, sending coarse location to Firebase/Mixpanel beyond functional necessity

Full analysis

Version: 4.23.1 (Build 1)
Scan Date: 2026-03-31
Overall Security Score: 90/100
Overall Privacy Score: 80/100

What This Means for You

Usage patterns and in-app activity are shared with several analytics and advertising companies, including Facebook and AppsFlyer, to measure and target ads. Purchase history is tracked by payment and marketing platforms. Network connections are handled securely.

Recommendation: Acceptable

Best For: Relaxed coloring without major privacy concerns
Avoid If: You prefer apps without Facebook or ad-targeting SDKs

Key Findings

Data Security - 4 findings (1 medium, 2 low, 1 info)

Network Security - 2 findings (2 info)

Code Safety - 0 findings

Privacy - 5 findings (2 medium, 1 low, 2 info)

Privacy Concerns

What Data is Collected

The app collects usage patterns, session activity, and purchase history. Multiple analytics platforms record how users interact with features and how long they spend in the app.

Third-Party Data Sharing

Data is shared with the following third-party services:

  • Firebase Analytics, Firebase Crashlytics, Firebase Performance - Google's suite for app analytics, crash reporting, and performance monitoring
  • Google App Measurement and GoogleAdsOnDeviceConversion - Advertising measurement and ad conversion tracking linked to Google Ads
  • AppsFlyer - Marketing attribution platform that connects user in-app behavior to advertising campaigns
  • Mixpanel - Behavioral analytics platform that tracks which features are used and when
  • RevenueCat and Purchasely - Purchase and subscription management platforms that record user payment activity
  • OneSignal - Push notification delivery
  • Facebook SDK - Analytics and ad targeting connected to Facebook's advertising network
  • Typeform - Survey and feedback collection

Understanding the Scores

Category Score
Security 90/100
Privacy 80/100
Data Security 89/100
Network Security 100/100
Code Safety 92/100
Data Collection 86/100
Data Sharing 87/100
User Control 85/100

Positive Security Features

  • All network communications use modern secure protocols, reflected in a perfect Network Security score of 100/100.
  • Code safety checks score 92/100, indicating well-structured and safe implementation practices throughout the app.
  • Data security within the app scores 89/100, showing strong handling of data both within the app and in transit.

Areas for Improvement

  • Behavioral data is shared with a large number of third-party advertising and analytics services, giving multiple companies access to how users use the app.
  • Purchase history is accessible to several payment and marketing platforms beyond what is needed for the app's core functionality.
  • Reducing the number of ad-targeting integrations would give users more control over how their data is used and shared.

About This Analysis

This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect observed behaviors and data practices at the time of analysis. This is not a legal compliance assessment.

App Details

  • Package ID: com.lake.coloring
  • Version: 4.23.1 (Build 1)
  • Scan Date: 2026-03-31
  • Developer: Not listed

Versions & scan history

ScanDateOverall score
#1 (current) 83/100