I installed CBeebies on my iPhone and looked at the pi-hole to see what type of DNS requests it was making when the app was opened (I haven't clicked on a single thing in the app)
* graph.facebook.com
* analytics.localytics.com
* api.branch.io (analytics & ads)
* app-measurement.com (analytics, maybe ads too?)
* ssl.google-analytics.com
* settings.crashlytics.com (perhaps benign)
So right off the bat Facebook and Google are both siphoning off data from the use of this app among other 3rd parties. Did you know that?