Rossmann PL: IPA Analysis

Inside the IPA

Rossmann PL

Rossmann SDP sp. z o.o.pl.com.rossmann.app

Package analysisv5.103.1

Build 2Record 8855695242026-05-12

A newer version is recorded: v5.108.2. Its file inventory is not available yet. This report automatically uses the newest build with an inventory.

Uncompressed filesNot recordedSum of recorded file sizes

Recorded IPA size374.1 MBSelected build · archive size

Files inventoried0No file inventory available

Embedded librariesNot availableFrameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed

No file inventory yet

A storage breakdown needs a recorded package inventory. Metadata alone cannot show what is inside an IPA.

Bundle structure

Space by folder

Top level

No folders recorded

Folder sizes will appear with the package inventory.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

No files to explore

File names and sizes have not been recorded for an analyzed package.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

Native analysis has not been recorded for this build

New package processing stores complete reports for each binary and architecture here. Existing header only records are not presented as full binary analysis.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

0 embedded libraries

UnityScanner detection · 12 evidence items

No embedded framework records

Statically linked libraries cannot be identified from file paths alone.

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded

Tracking declared: Yes
Non exempt encryption: Not declared

Permission descriptions

NSBluetoothAlwaysUsageDescription: Udostępnij nam swoją pozycyję na podstawie bluetooth! Dzięki temu zawsze kiedy będziesz w pobliżu Rossmanna, dowiesz się o promocjach przygotowanych specjalnie dla Ciebie!
NSLocationAlwaysUsageDescription: Udostępnij nam swoją lokalizację! Dzięki temu zawsze kiedy będziesz w pobliżu Rossmanna, dowiesz się o promocjach przygotowanych specjalnie dla Ciebie!
NSCameraUsageDescription: Udostępnij kamere w celu zrobienia zdjęcia produktu do skanera produktowego lub zrobienia zdjęcia profilowego. Twoje zdjęcia nie będą udostępniane bez twojego pozwolenia.
NSUserTrackingUsageDescription: Twoje dane służą do dostosowania treści i usprawnienia procesów, z których korzystasz w naszej aplikacji!
NSMotionUsageDescription: App uses motion sensors in AR games.
NSBluetoothPeripheralUsageDescription: Używa bluetooth w celu przesłania numeru karty lojalnościowej
NSSpeechRecognitionUsageDescription: Udostępnij mikrofon w celu wyszukiwania głosowego. Głos będzie rejestrowany po kliknieciu przycisku.
NSCalendarsUsageDescription: Aplikacja chce dodać wydarzenie do Twojego kalendarza, abyś nie zapomniał o ważnych promocjach i wydarzeniach Rossmann.
NSMicrophoneUsageDescription: Rozpoznawanie mowy zostanie użyte do ustalenia, jakie słowa wypowiadasz do mikrofonu urządzenia.
NSLocationWhenInUseUsageDescription: Udostępnij nam swoją lokalizację! Dzięki temu zawsze kiedy będziesz w pobliżu Rossmanna, dowiesz się o promocjach przygotowanych specjalnie dla Ciebie!
NSLocationAlwaysAndWhenInUseUsageDescription: Udostępnij nam swoją lokalizację! Dzięki temu zawsze kiedy będziesz w pobliżu Rossmanna, dowiesz się o promocjach przygotowanych specjalnie dla Ciebie!
NSCalendarsFullAccessUsageDescription: Aplikacja chce dodać wydarzenie do Twojego kalendarza, abyś nie zapomniał o ważnych promocjach i wydarzeniach Rossmann.
NSPhotoLibraryUsageDescription: Udostępnij galerię w celu wybrania zdjęcia do zmiany zdjęcia profilowego. Twoje zdjęcia nie będą udostępniane bez twojego pozwolenia.

Tracking domains 1

[
  "ep1.facebook.com"
]

Accessed API types 8

[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "0A2A.1",
      "C617.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1",
      "C56D.1"
    ]
  }
]

Collected data types 19

[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePaymentInfo",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAdvertisingData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherUsageData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeOther",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  }
]

Additional Info.plist declarations

App transport security: { "NSAllowsArbitraryLoads": true }
Url schemes: [ { "CFBundleURLSchemes": [ "fb440404876302705", "main-screen" ] }, { "CFBundleTypeRole": "Viewer", "CFBundleURLName": "pl.com.rossmann.app", "CFBundleURLSchemes": [ "ross", "tagmanager.sgtm.c.pl.com.rossmann.app" ] } ]
Required capabilities: [ "still-camera", "arm64" ]

Static observations

3 recorded

Firebase

Firebase client configuration present

Project: api-project-786555217330. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

Firebase

Google Ads Enabled

Firebase project: api-project-786555217330

ATS

NSAllowsArbitraryLoads: true

The package declares an ATS exception. Actual network traffic and use of cleartext connections were not tested.

Analysis record

Method: Stored static package extraction and inventory; not a live security test.
Coverage: Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times: 2026-05-22T13:11:59.614719, 2026-05-23 20:18:37
Known version identifiers: 261 (2 with metadata)

Browse version history on the app page →