Even if the app had it in their privacy policy, that would not mean it is legal to send your data to Facebook. GDPR requires the users consent to do so. Having

Even if the app had it in their privacy policy, that would not mean it is legal to send your data to Facebook. GDPR requires the users consent to do so. Having a statement in a privacy policy is imho not enough to qualify as consent.