My Talking Tom Security & Privacy Scorecard

Android

30
Overall trust score
Don't Trust
35
Security
25
Privacy

A child's play activity is shared with over a dozen advertising networks, including Facebook, TikTok, and Google, to serve targeted ads. Multiple ad platforms with children-specific networks are embedded, meaning children using the app will see ads from many sources. Data from the app flows to analytics and tracking services that build profiles across sessions.

Best for

Kids with parental supervision and ad exposure expected

Avoid if

You want to keep your child's activity off ad networks

Findings

  • 5 critical
  • 6 high
  • 8 medium
  • 4 low
  • 0 info

0 issues identified across security and privacy analysis.

Top security issues

  • YsoNetwork WebView Remote Code Execution
  • Facebook Audience Network WebView RCE
  • Unencrypted Purchase Tokens in Billing Database

Top privacy issues

  • TikTok Cross-App Tracking Without Explicit Consent
  • Pre-Consent Tracking via Bugsnag
  • Unencrypted Analytics Database (500K Events)

Full analysis

My Talking Tom

Version: 26.1.1.7879
Scan Date: January 31, 2026
Overall Score: 30/100

What This Means for You

A child's play activity is shared with over a dozen advertising networks, including Facebook, TikTok, and Google, to serve targeted ads. Multiple ad platforms with children-specific networks are embedded, meaning children using the app will see ads from many sources. Data from the app flows to analytics and tracking services that build profiles across sessions.

Recommendation: Use With Caution

Best For: Kids with parental supervision and ad exposure expected
Avoid If: You want to keep your child's activity off ad networks

Key Findings

Data Security - 7 findings (1 critical, 2 high, 2 medium, 2 low)

Network Security - 3 findings (1 high, 2 medium)

Code Safety - 0 findings

Privacy - 6 findings (2 critical, 1 high, 3 medium)

Privacy Concerns

What Data is Collected

Device identifiers, advertising IDs, gameplay behavior, and session activity are gathered from the device during use. This data supports the advertising and analytics functions built into the app.

Third-Party Data Sharing

Data is shared with the following services:

  • AppLovin MAX - Ad mediation and targeting
  • IronSource LevelPlay - Ad mediation
  • Facebook Audience Network - Targeted advertising
  • Google AdMob - Targeted advertising
  • Unity Ads - Advertising
  • Pangle (TikTok) - Targeted advertising
  • Mintegral - Ad targeting
  • BigoAds - Advertising
  • YsoNetwork - Advertising
  • Kidoz - Children-directed advertising
  • SuperAwesome - Children-directed advertising
  • Bugsnag - Error reporting
  • Singular - Attribution and analytics
  • Firebase Analytics - Behavioral analytics
  • Huawei Analytics - Behavioral analytics
  • TrackingIO - Attribution tracking
  • JW Player - Video content delivery
  • ExoPlayer - Media playback
  • IAB TCF 2.0 - Consent management

Understanding the Scores

Category Score
Security 35/100
Privacy 25/100
Data Security 40/100
Network Security 65/100
Code Safety 30/100
Data Collection 30/100
Data Sharing 20/100
User Control 50/100

Positive Security Features

  • None identified in this version of the app.

Areas for Improvement

  • The app shares children's activity with over a dozen advertising networks at once, including platforms not designed for children's audiences, expanding the reach of children's personal data well beyond the app itself.
  • Behavioral data from sessions is sent to multiple analytics and attribution services with limited parental controls available to restrict or stop this sharing.
  • Data flows to advertising platforms operating across multiple regions, meaning information is distributed broadly with little transparency about retention or downstream use.

About This Analysis

This scorecard reflects findings from static analysis of the app's code and configuration. Results represent the app's state at the time of scanning and may not reflect subsequent updates.

App Details

  • App: My Talking Tom
  • Package ID: com.outfit7.mytalkingtomfree
  • Version: 26.1.1.7879
  • Scan Date: January 31, 2026
  • Platform: Android

Versions & scan history

ScanDateOverall score
#1 (current) 30/100