Scan results

    Coloring Book for Adults: Lake

    iOS

    Lake is a digital coloring and drawing app featuring customizable art palettes, personal journals, and bedtime relaxation features.

    CITT SCORE
    83
    out of 100
    TRUSTED

    Quick Verdict

    Best for: Relaxed coloring without major privacy concerns

    Not For: You prefer apps without Facebook or ad-targeting SDKs

    What It Means For You

    Usage patterns and in-app activity are shared with several analytics and advertising companies, including Facebook and AppsFlyer, to measure and target ads. Purchase history is tracked by payment and marketing platforms. Network connections are handled securely.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (22)

    Data Security

    4 total
    1 Medium
    2 Low
    1 Info

    Network Security

    2 total
    2 Info

    Code Security

    5 total
    1 Medium
    2 Low
    2 Info

    Privacy

    5 total
    2 Medium
    1 Low
    2 Info

    Third-Party Risk

    5 total
    1 High
    1 Medium
    2 Low
    1 Info

    Permission Usage

    1 total
    1 Low

    Third-Party Services

    Firebase Analytics, Firebase Crashlytics, Firebase Performance, Google App Measurement, GoogleAdsOnDeviceConversion, AppsFlyer, Mixpanel, RevenueCat, Purchasely, OneSignal, Facebook SDK, Typeform

    Security Strengths

    • App Transport Security fully enforced — all connections use HTTPS with no exceptions
    • Modern cryptography via CryptoKit (Curve25519, ChaCha20-Poly1305, SHA-2 family) — no weak algorithms
    • Strong keychain protection classes used (WhenUnlockedThisDeviceOnly, WhenPasscodeSetThisDeviceOnly)
    • Universal links implemented across 6 domains with AASA verification — secure deep link handling
    • IDFA not collected despite ATT framework being linked — confirmed by missing AdSupport import
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    ads
    analytics
    location
    creative
    subscriptions
    privacy

    Package

    com.lake.coloring

    Version

    4.23.1 (Build 1)

    Analysis Date

    Mar 31, 2026

    Classes Analyzed

    16

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on App Store

    Recommendation: Acceptable

    Key Findings

    Data Security - 4 findings (1 medium, 2 low, 1 info)

    Network Security - 2 findings (2 info)

    Code Safety - 0 findings

    Privacy - 5 findings (2 medium, 1 low, 2 info)

    Privacy Concerns

    What Data is Collected

    The app collects usage patterns, session activity, and purchase history. Multiple analytics platforms record how users interact with features and how long they spend in the app.

    Third-Party Data Sharing

    Data is shared with the following third-party services:

    • Firebase Analytics, Firebase Crashlytics, Firebase Performance - Google's suite for app analytics, crash reporting, and performance monitoring
    • Google App Measurement and GoogleAdsOnDeviceConversion - Advertising measurement and ad conversion tracking linked to Google Ads
    • AppsFlyer - Marketing attribution platform that connects user in-app behavior to advertising campaigns
    • Mixpanel - Behavioral analytics platform that tracks which features are used and when
    • RevenueCat and Purchasely - Purchase and subscription management platforms that record user payment activity
    • OneSignal - Push notification delivery
    • Facebook SDK - Analytics and ad targeting connected to Facebook's advertising network
    • Typeform - Survey and feedback collection

    Understanding the Scores

    CategoryScore
    Security90/100
    Privacy80/100
    Data Security89/100
    Network Security100/100
    Code Safety92/100
    Data Collection86/100
    Data Sharing87/100
    User Control85/100

    Positive Security Features

    • All network communications use modern secure protocols, reflected in a perfect Network Security score of 100/100.
    • Code safety checks score 92/100, indicating well-structured and safe implementation practices throughout the app.
    • Data security within the app scores 89/100, showing strong handling of data both within the app and in transit.

    Areas for Improvement

    • Behavioral data is shared with a large number of third-party advertising and analytics services, giving multiple companies access to how users use the app.
    • Purchase history is accessible to several payment and marketing platforms beyond what is needed for the app's core functionality.
    • Reducing the number of ad-targeting integrations would give users more control over how their data is used and shared.

    About This Analysis

    This scorecard is generated from automated static analysis of the app's code and configuration. Scores reflect observed behaviors and data practices at the time of analysis. This is not a legal compliance assessment.

    App Details

    • Package ID: com.lake.coloring
    • Version: 4.23.1 (Build 1)
    • Scan Date: 2026-03-31
    • Developer: Not listed

    Right of Reply

    Developer not yet contacted