My Talking Tom Security & Privacy Scorecard
Android
A child's play activity is shared with over a dozen advertising networks, including Facebook, TikTok, and Google, to serve targeted ads. Multiple ad platforms with children-specific networks are embedded, meaning children using the app will see ads from many sources. Data from the app flows to analytics and tracking services that build profiles across sessions.
Best for
Kids with parental supervision and ad exposure expected
Avoid if
You want to keep your child's activity off ad networks
Findings
- 5 critical
- 6 high
- 8 medium
- 4 low
- 0 info
0 issues identified across security and privacy analysis.
Top security issues
- YsoNetwork WebView Remote Code Execution
- Facebook Audience Network WebView RCE
- Unencrypted Purchase Tokens in Billing Database
Top privacy issues
- TikTok Cross-App Tracking Without Explicit Consent
- Pre-Consent Tracking via Bugsnag
- Unencrypted Analytics Database (500K Events)
Full analysis
My Talking Tom
Version: 26.1.1.7879
Scan Date: January 31, 2026
Overall Score: 30/100
What This Means for You
A child's play activity is shared with over a dozen advertising networks, including Facebook, TikTok, and Google, to serve targeted ads. Multiple ad platforms with children-specific networks are embedded, meaning children using the app will see ads from many sources. Data from the app flows to analytics and tracking services that build profiles across sessions.
Recommendation: Use With Caution
Best For: Kids with parental supervision and ad exposure expected
Avoid If: You want to keep your child's activity off ad networks
Key Findings
Data Security - 7 findings (1 critical, 2 high, 2 medium, 2 low)
Network Security - 3 findings (1 high, 2 medium)
Code Safety - 0 findings
Privacy - 6 findings (2 critical, 1 high, 3 medium)
Privacy Concerns
What Data is Collected
Device identifiers, advertising IDs, gameplay behavior, and session activity are gathered from the device during use. This data supports the advertising and analytics functions built into the app.
Third-Party Data Sharing
Data is shared with the following services:
- AppLovin MAX - Ad mediation and targeting
- IronSource LevelPlay - Ad mediation
- Facebook Audience Network - Targeted advertising
- Google AdMob - Targeted advertising
- Unity Ads - Advertising
- Pangle (TikTok) - Targeted advertising
- Mintegral - Ad targeting
- BigoAds - Advertising
- YsoNetwork - Advertising
- Kidoz - Children-directed advertising
- SuperAwesome - Children-directed advertising
- Bugsnag - Error reporting
- Singular - Attribution and analytics
- Firebase Analytics - Behavioral analytics
- Huawei Analytics - Behavioral analytics
- TrackingIO - Attribution tracking
- JW Player - Video content delivery
- ExoPlayer - Media playback
- IAB TCF 2.0 - Consent management
Understanding the Scores
| Category | Score |
|---|---|
| Security | 35/100 |
| Privacy | 25/100 |
| Data Security | 40/100 |
| Network Security | 65/100 |
| Code Safety | 30/100 |
| Data Collection | 30/100 |
| Data Sharing | 20/100 |
| User Control | 50/100 |
Positive Security Features
- None identified in this version of the app.
Areas for Improvement
- The app shares children's activity with over a dozen advertising networks at once, including platforms not designed for children's audiences, expanding the reach of children's personal data well beyond the app itself.
- Behavioral data from sessions is sent to multiple analytics and attribution services with limited parental controls available to restrict or stop this sharing.
- Data flows to advertising platforms operating across multiple regions, meaning information is distributed broadly with little transparency about retention or downstream use.
About This Analysis
This scorecard reflects findings from static analysis of the app's code and configuration. Results represent the app's state at the time of scanning and may not reflect subsequent updates.
App Details
- App: My Talking Tom
- Package ID: com.outfit7.mytalkingtomfree
- Version: 26.1.1.7879
- Scan Date: January 31, 2026
- Platform: Android
Versions & scan history
| Scan | Date | Overall score |
|---|---|---|
| #1 (current) | 30/100 |