[365fun] Flip
wind · Build 0.1
Review the recorded findings below. An overall grade is withheld where required checks lack coverage; a new scan may provide additional evidence.
Overview
No findings recorded · assessment unavailable
[365fun] Flip (com.whitewind.flip) was scanned at version 0.1 on 2026-09-02 but is not graded, because the analysis did not complete enough of its checks for a score to mean anything. The checks that completed recorded no findings. That is not evidence that the app has none: it reflects what these checks look for in one build, and cannot rule out what they do not cover. 3 tracking SDKs are present in the package, which describes what ships, not what runs or what it sends. This is static analysis of a single build: it does not observe the app running and does not establish that any data is exposed.
Build & components
30 components recorded. Certificate parsing does not validate APK signature integrity.
Inspect build evidence →Findings
0 categories · 0 occurrences. Severity totals describe categories. Expand a finding for interpretation and review guidance.
No categories match these filters. Clear the search or choose all severities.
No findings recorded; analysis is incomplete or coverage is unknown.
Privacy signals
Capabilities and bundled software do not prove that data was collected or transmitted.
Requested permission inventory (9)
Data collection & flow (privacy signal, not part of the grade)
- Persistent-identifier APIs referenced in code (Advertising ID (AAID), Android ID, Device ID / IMEI) with 3 analytics/ad SDK(s) present — the mechanism used for cross-app profiling.
This maps what the app can access (permissions it requests, identifier APIs its code references) to the third parties bundled in it. It reflects capability and SDK presence — not proof that a specific value was transmitted.
Trackers & SDKs (3 detected · privacy signal, not part of the grade)
Build & components
Scanned build 0.1. Store metadata may describe a newer release.
4550e04386832869749ebb4e5719d0d8ea75c83f3debdb7d123a1544e3ff034fSigning certificate (who signed this build — factual, not part of the grade)
f2:96:cd:20:21:dc:ee:72:4e:fc:0d:bb:0f:a5:6e:29:0b:65:d3:e6:40:47:18:29:9a:8d:62:d7:2a:08:4e:8dThe certificate fingerprint identifies the parsed signing certificate. Knowing this public fingerprint does not establish ownership or validate the APK signature.
Component inventory
30 components. Advisory matching covers a curated set; no match is not proof that a component is vulnerability-free.
| Component | Version | Advisory matches |
|---|---|---|
androidx.activity:activity | 1.0.0 | None recorded |
androidx.annotation:annotation-experimental | 1.4.0 | None recorded |
androidx.appcompat:appcompat | 1.2.0 | None recorded |
androidx.appcompat:appcompat-resources | 1.2.0 | None recorded |
androidx.browser:browser | 1.8.0 | None recorded |
androidx.core:core | 1.8.0 | None recorded |
androidx.core:core-ktx | 1.8.0 | None recorded |
androidx.cursoradapter:cursoradapter | 1.0.0 | None recorded |
androidx.customview:customview | 1.0.0 | None recorded |
androidx.drawerlayout:drawerlayout | 1.0.0 | None recorded |
androidx.fragment:fragment | 1.1.0 | None recorded |
androidx.interpolator:interpolator | 1.0.0 | None recorded |
androidx.loader:loader | 1.0.0 | None recorded |
androidx.privacysandbox.ads:ads-adservices | 1.0.0-beta05 | None recorded |
androidx.privacysandbox.ads:ads-adservices-java | 1.0.0-beta05 | None recorded |
androidx.profileinstaller:profileinstaller | 1.3.0 | None recorded |
androidx.room:room-runtime | 2.2.5 | None recorded |
androidx.savedstate:savedstate | 1.0.0 | None recorded |
androidx.sqlite:sqlite | 2.1.0 | None recorded |
androidx.sqlite:sqlite-framework | 2.1.0 | None recorded |
androidx.startup:startup-runtime | 1.1.1 | None recorded |
androidx.tracing:tracing | 1.0.0 | None recorded |
androidx.vectordrawable:vectordrawable | 1.1.0 | None recorded |
androidx.vectordrawable:vectordrawable-animated | 1.1.0 | None recorded |
androidx.versionedparcelable:versionedparcelable | 1.1.1 | None recorded |
androidx.viewpager:viewpager | 1.0.0 | None recorded |
androidx.webkit:webkit | 1.11.0-alpha02 | None recorded |
androidx.work:work-runtime | 2.7.0 | None recorded |
kotlinx:coroutines_android | 1.7.1 | None recorded |
kotlinx:coroutines_core | 1.7.1 | None recorded |
About this app · store information
About this app
Throw the bottle and it will stand upright.
Screenshots
Scan history
Each row is an observed scan. Gaps between scans do not establish how long a finding existed.
| Scanned (UTC) | Build | Score | Grade |
|---|---|---|---|
| 2026-09-02 11:04 UTC | 0.1 | 100 | A |
| 2026-09-01 09:13 UTC | 0.1 | 100 | A |
Export & share
Exports describe the recorded assessment. Signed evidence proves origin and integrity, not completeness or safety.
Coverage & gap matrix · Verify signed evidence
API users can request authenticated, scan-specific exports at /v1/scans/4d1f792e-84a8-4b2a-a9c6-bd400eaaf8a9/findings.sarif (also coverage.json and proof.json).
Request a correction or removal · How to interpret a scan · Browse apps