Step App: M2E Running App: IPA Analysis

Inside the IPA

Step App: M2E Running App

Step Labscom.step.stepapp-ios

← App page

Package analysisv3.0.9

Build 224Record 8838057372026-04-09

Uncompressed filesNot recordedSum of recorded file sizes

Recorded IPA size164.2 MBSelected build · archive size

Files inventoried0No file inventory available

Embedded librariesNot availableFrameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed

No file inventory yet

A storage breakdown needs a recorded package inventory. Metadata alone cannot show what is inside an IPA.

Bundle structure

Space by folder

Top level

No folders recorded

Folder sizes will appear with the package inventory.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

No files to explore

File names and sizes have not been recorded for an analyzed package.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

Native analysis has not been recorded for this build

New package processing stores complete reports for each binary and architecture here. Existing header only records are not presented as full binary analysis.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

0 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

No embedded framework records

Statically linked libraries cannot be identified from file paths alone.

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded

Tracking declared: Yes
Non exempt encryption: Not declared

Permission descriptions

NSCameraUsageDescription: Hello, we would like to get access to your camera to make possible perform StepApp trainings
NSUserTrackingUsageDescription: We collect data to improve the app's features and deliver more relevant content
NSMotionUsageDescription: The app requires access to your steps to show user's statistic while running
NSPhotoLibraryAddUsageDescription: Save photos from the Crisp chat to your photo library.
NSLocationUsageDescription: The app requires GPS to track user’s speed and show the route on a map while running
NSMicrophoneUsageDescription: If you want to use the microphone, you have to give permission.
NSLocationWhenInUseUsageDescription: The app requires GPS to track user’s speed and show the route on a map while running
NSLocationAlwaysAndWhenInUseUsageDescription: The app requires GPS to track user’s speed and show the route on a map while running
NSPhotoLibraryUsageDescription: We need to access to your photos to save share run images

Tracking domains 7

[
  "device-provisioning.googleapis.com",
  "app-analytics-services.com",
  "app-analytics-services-att.com",
  "firebaseinstallations.googleapis.com",
  "firebasedynamiclinks.googleapis.com",
  "firebaselogging-pa.googleapis.com",
  "safetrack.singular.net"
]

Accessed API types 3

[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "3B52.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  }
]

Collected data types 18

[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeName",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeEmailAddress",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePhoneNumber",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherUsageData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePreciseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCustomerSupport",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePhotosorVideos",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  }
]

Additional Info.plist declarations

App transport security: { "NSAllowsArbitraryLoads": true }
Url schemes: [ { "CFBundleTypeRole": "Editor", "CFBundleURLName": "ru.trinitydigital.stepapp-ios", "CFBundleURLSchemes": [ "stepapp" ] }, { "CFBundleURLSchemes": [ "com.googleusercontent.apps.547422727598-s0dtoqv90t4jc2fum1vsplfp86jss6tm" ] } ]
Required capabilities: [ "arm64" ]

Static observations

2 recorded

Firebase

Firebase client configuration present

Project: step-app-2bacf. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record

Method: Stored static package extraction and inventory; not a live security test.
Coverage: Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times: 2026-05-23 20:41:36, 2026-05-23 21:08:06
Known version identifiers: 79 (1 with metadata)

Browse version history on the app page →