CITT

    Scan results

    My Talking Tom

    Android

    My Talking Tom is a casual pet simulation game where you adopt and care for a virtual cat. Decorate your home, feed and play with Tom, and earn rewards. Features mini-games, customization options, ads, and in-app purchases. Rated 4.3★ from 17M+ reviews. Designed for ages 10+.

    CITT SCORE
    30
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Kids with parental supervision and ad exposure expected

    Not For: You want to keep your child's activity off ad networks

    What It Means For You

    A child's play activity is shared with over a dozen advertising networks, including Facebook, TikTok, and Google, to serve targeted ads. Multiple ad platforms with children-specific networks are embedded, meaning children using the app will see ads from many sources. Data from the app flows to analytics and tracking services that build profiles across sessions.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (21)

    Data Security

    7 total
    1 Critical
    2 High
    2 Medium
    2 Low

    Network Security

    3 total
    1 High
    2 Medium

    Code Security

    5 total
    2 Critical
    1 High
    1 Medium
    1 Low

    Privacy

    6 total
    2 Critical
    1 High
    3 Medium

    Third-Party Services

    AppLovin MAX, IronSource LevelPlay, Facebook Audience Network, Google AdMob, Unity Ads, Pangle (TikTok), Mintegral, BigoAds, YsoNetwork, Kidoz, SuperAwesome, Bugsnag, Singular, Firebase Analytics, Huawei Analytics, TrackingIO, JW Player, ExoPlayer, IAB TCF 2.0

    Security Strengths

    • ✓IAB TCF 2.0 consent framework implemented
    • ✓COPPA-compliant ad networks (Kidoz, SuperAwesome) for child safety
    • ✓Well-architected modular SDK design (Felis SDK)
    • ✓ComplianceBinding handles consent management
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    ads
    analytics
    children
    gaming
    sensitive data
    financial
    location
    cross app tracking

    Package

    com.outfit7.mytalkingtomfree

    Version

    26.1.1.7879

    Analysis Date

    Jan 31, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 7 findings (1 critical, 2 high, 2 medium, 2 low)

    Network Security - 3 findings (1 high, 2 medium)

    Code Safety - 0 findings

    Privacy - 6 findings (2 critical, 1 high, 3 medium)

    Privacy Concerns

    What Data is Collected

    Device identifiers, advertising IDs, gameplay behavior, and session activity are gathered from the device during use. This data supports the advertising and analytics functions built into the app.

    Third-Party Data Sharing

    Data is shared with the following services:

    • AppLovin MAX - Ad mediation and targeting
    • IronSource LevelPlay - Ad mediation
    • Facebook Audience Network - Targeted advertising
    • Google AdMob - Targeted advertising
    • Unity Ads - Advertising
    • Pangle (TikTok) - Targeted advertising
    • Mintegral - Ad targeting
    • BigoAds - Advertising
    • YsoNetwork - Advertising
    • Kidoz - Children-directed advertising
    • SuperAwesome - Children-directed advertising
    • Bugsnag - Error reporting
    • Singular - Attribution and analytics
    • Firebase Analytics - Behavioral analytics
    • Huawei Analytics - Behavioral analytics
    • TrackingIO - Attribution tracking
    • JW Player - Video content delivery
    • ExoPlayer - Media playback
    • IAB TCF 2.0 - Consent management

    Understanding the Scores

    CategoryScore
    Security35/100
    Privacy25/100
    Data Security40/100
    Network Security65/100
    Code Safety30/100
    Data Collection30/100
    Data Sharing20/100
    User Control50/100

    Positive Security Features

    • None identified in this version of the app.

    Areas for Improvement

    • The app shares children's activity with over a dozen advertising networks at once, including platforms not designed for children's audiences, expanding the reach of children's personal data well beyond the app itself.
    • Behavioral data from sessions is sent to multiple analytics and attribution services with limited parental controls available to restrict or stop this sharing.
    • Data flows to advertising platforms operating across multiple regions, meaning information is distributed broadly with little transparency about retention or downstream use.

    About This Analysis

    This scorecard reflects findings from static analysis of the app's code and configuration. Results represent the app's state at the time of scanning and may not reflect subsequent updates.

    App Details

    • App: My Talking Tom
    • Package ID: com.outfit7.mytalkingtomfree
    • Version: 26.1.1.7879
    • Scan Date: January 31, 2026
    • Platform: Android

    Right of Reply

    Developer not yet contacted