How to create a privacy policy for your app
- Fill in your app details: app name, your name or company, and a contact email that you check.
- Tick the data your app collects and every SDK you include. Ads and analytics SDKs collect device identifiers and usage data even if your own code doesn't.
- Copy the policy or download a ready-made HTML page.
- Publish it at a public URL and add that link to App Store Connect, Google Play Console and your app's settings screen.
Make sure your store forms match
Both stores ask you to describe your data use separately from the policy: Apple's App Privacy "nutrition labels" and Google's Data safety form. Reviewers compare these with your privacy policy and with the SDKs inside your app — if they don't match, your update can be rejected. Use the same list of data types and services in all three places.
Common SDKs and the data they collect
| SDK | Typically collects |
|---|---|
| Google AdMob | Advertising ID, IP address, approximate location, app interactions, crash data |
| Firebase Analytics | App instance ID, usage events, device model, OS version, approximate location |
| Firebase Crashlytics | Crash logs, device state, installation identifier |
| Meta SDK | Advertising ID, app events, device information |
| RevenueCat | Purchase history, anonymous user ID, device information |
Don't forget account deletion
If users can create an account, both Apple and Google require a way to delete it from inside the app, and Google also needs a web link where people can request deletion. The generated policy includes an account deletion section when you tick "Users can create an account".