Firebase client configuration present
Project: kwaicut-212d4. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.
Package analysisv7.6.0
Build 140Record 8828530232026-02-27
A newer version is recorded: v7.47.6. Its file inventory is not available yet. This report automatically uses the newest build with an inventory.
Uncompressed filesNot recordedSum of recorded file sizes
Recorded IPA size344.0 MBSelected build · archive size
Files inventoried0No file inventory available
Embedded librariesNot availableFrameworks & dynamic libraries
Package footprint
What takes up space?
No file inventory yet
A storage breakdown needs a recorded package inventory. Metadata alone cannot show what is inside an IPA.
Bundle structure
Space by folder
No folders recorded
Folder sizes will appear with the package inventory.
Explore the package
File explorer
Find the heavy files, inspect paths, or filter by what they contain.
No files to explore
File names and sizes have not been recorded for an analyzed package.
Native binary explorer
Every binary. Every architecture.
Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.
Native analysis has not been recorded for this build
New package processing stores complete reports for each binary and architecture here. Existing header only records are not presented as full binary analysis.
Under the hood
Frameworks & engines
Embedded code and runtime evidence from this build, not other releases.
No engine identification recorded for this build. That does not mean the app has no game engine or runtime.
No embedded framework records
Statically linked libraries cannot be identified from file paths alone.
Recorded signals
Package details
Privacy & permissions
Recorded- Tracking declared
- Yes
- Non exempt encryption
- Not declared
Permission descriptions
Tracking domains 18
[ "ep1.facebook.com", "ep6.facebook.com", "att.attr.whappsflyer.com", "att.attr.appsflyer-cn.com", "att.attr.hevents.appsflyer-cn.com", "att.launches.whappsflyer.com", "att.launches.appsflyer-cn.com", "att.launches.hevents.appsflyer-cn.com", "att.conversions.hevents.appsflyer-cn.com", "att.conversions.appsflyer-cn.com", "att.conversions.whappsflyer.com", "att.dlsdk.hevents.appsflyer-cn.com", "att.dlsdk.appsflyer-cn.com", "att.dlsdk.whappsflyer.com", "att.dlsdk.appsflyersdk.com", "att.conversions.appsflyersdk.com", "att.launches.appsflyersdk.com", "att.attr.appsflyersdk.com" ]
Accessed API types 8
[
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
"NSPrivacyAccessedAPITypeReasons": [
"3B52.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
"NSPrivacyAccessedAPITypeReasons": [
"1C8F.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
"NSPrivacyAccessedAPITypeReasons": [
"DDA9.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
"NSPrivacyAccessedAPITypeReasons": [
"C617.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
"NSPrivacyAccessedAPITypeReasons": [
"35F9.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
"NSPrivacyAccessedAPITypeReasons": [
"E174.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
"NSPrivacyAccessedAPITypeReasons": [
"CA92.1"
]
},
{
"NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
"NSPrivacyAccessedAPITypeReasons": [
"7D9E.1",
"E174.1"
]
}
]Collected data types 9
[
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAdvertisingData",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
"NSPrivacyCollectedDataTypePurposeAnalytics"
],
"NSPrivacyCollectedDataTypeTracking": true
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": true
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
"NSPrivacyCollectedDataTypeLinked": false,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeAnalytics"
],
"NSPrivacyCollectedDataTypeTracking": false
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeAppFunctionality",
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": true
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAdvertisingData",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeAnalytics",
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": true
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeAppFunctionality",
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": false
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeAppFunctionality",
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": false
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeAnalytics",
"NSPrivacyCollectedDataTypePurposeAppFunctionality",
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": false
},
{
"NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
"NSPrivacyCollectedDataTypeLinked": true,
"NSPrivacyCollectedDataTypePurposes": [
"NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
],
"NSPrivacyCollectedDataTypeTracking": false
}
]Additional Info.plist declarations
Static observations
2 recordedNSAllowsArbitraryLoads: true
The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.
Analysis record
- Method
- Stored static package extraction and inventory; not a live security test.
- Coverage
- Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
- Recorded extraction times
- 2026-05-23 20:18:37
- Known version identifiers
- 27 (10 with metadata)