Guideline 5.1.1
Guideline 5.1.1 - Data Collection and Storage: Privacy Policy
Our Take
Your app does not include a sufficient privacy policy as required. Apps that collect user data must have a privacy policy and must comply with applicable privacy laws. The privacy policy must clearly explain what data is collected, how it is used, and how users can request deletion of their data. Occasionally, this could also be due to Apple not being able to find a privacy policy on your developer website.
Resolution Guide
Create or Update Privacy Policy
Draft a comprehensive privacy policy that covers: what data you collect (analytics, device info, user content), how you use it, third-party services, data sharing practices, user rights, and contact information for privacy requests.
Ensure Policy Accessibility
Host your privacy policy on a publicly accessible webpage with a stable URL. Test the link in multiple browsers and ensure it loads quickly without requiring login.
Add Privacy Policy Link to App Store Connect
In App Store Connect, go to App Information > General Information and add your privacy policy URL in the designated field. This link will appear on your App Store listing.
Include In-App Access
Add a privacy policy link within your app, typically in settings, about section, or legal information. Many apps include this in their onboarding flow.
Update App Privacy Section
Complete the App Privacy section in App Store Connect to accurately reflect all data your app collects. This must align with your privacy policy content.
Prevention
Example Rejection Email
Before & After
No privacy policy URL in App Store Connect
Privacy policy hosted at https://yourapp.com/privacy with comprehensive data collection disclosure
What changed: Host an accessible privacy policy and link it in both App Store Connect and within the app
Community Solutions · 0
Sign in to share your solution.
More Guideline 5 (Legal) rejections
- Guideline 5 - Legal: Remove Watermark Feature
- Guideline 5.1.1 - Data Collection and Storage: Incomplete Privacy Manifest
- Guideline 5.1.1 - Data Collection and Storage: Missing Purpose Strings
- Guideline 5.1.1 - Data Collection and Storage: Privacy Manifest Missing
- Guideline 5.1.1 - Data Collection and Storage: Privacy Nutrition Label Mismatch
- Guideline 5.1.1 - Privacy: ATT Framework Without Tracking Usage Description