Inspecting JSON payloads that are returned during normal use of the app doesn’t seem like an illegal activity.