Guideline 1.3 - Safety: Kids Category Third-Party SDK Violations

Apple is rejecting your app because it's listed in the Kids Category but includes third-party analytics or advertising SDKs that collect data from children. Kids Category apps may not send personally identifiable information or device information to third parties, and may not include third-party analytics or advertising. This is one of the most technically tricky rejections because the violation is often in an SDK you included for a legitimate purpose — Firebase Analytics, Facebook SDK, Amplitude, Mixpanel, or ad networks. These SDKs commonly collect device identifiers (IDFA, IDFV), device info, or usage data by default, which violates this guideline. Limited exceptions exist: third-party analytics may be used if the service doesn't collect or transmit IDFA or identifiable information about children. Contextual advertising may be permitted if the ad service has documented practices for Kids Category apps including human review of ad creatives. Once you opt into the Kids Category, you cannot relax these requirements in updates — you're locked in.