Updated Free, runs in your browser

iOS App Store privacy policy generator

Answer a few questions about your app and its SDKs. Get a privacy policy draft, the matching App Privacy answers for App Store Connect, and a checklist of Apple's rules. It's a starting point: check it against your app before every submission or update.

Your app

App and contact details

Accounts

People can create an account
Sign-in options

Apple requires account deletion inside the app, not only by email or on a website.

Data you and your SDKs collect

Apple's App Privacy data types. Tick everything that leaves the device and is kept longer than it takes to handle the request, including data your SDKs collect.

Contact Info
Health & Fitness
Financial Info
Location
Sensitive Info
Contacts
User Content
Browsing History
Search History
Identifiers
Purchases
Usage Data
Diagnostics
Surroundings
Body
Other Data

How you use each one

  • Email Address
  • User ID
  • Crash Data

Tracking means linking this data with other companies' data for ads or ad measurement, or sharing it with a data broker. Data is linked unless you strip identifiers before collecting it and never re-link it.

Device permissions

Permissions the app asks for

Third-party SDKs and services

Analytics
Crash reporting
Advertising
Sign-in
Payment processing
Push notifications
AI features
Add another SDK or service

Retention, children and security

How long you keep personal data

Only tick what you actually do:

A draft to review, not a finished policy. This tool helps you start. It isn't legal advice or an Apple approval. Check every line against how your app and its SDKs really behave, and against your App Store Connect answers, before each submission or update.

Fill in 4 items still in brackets: [Effective date], [App name], [Company or developer name], [Contact email].

Privacy Policy for [App name]

Effective [Effective date]

Who we are

This privacy policy explains how [Company or developer name] ("we", "us") collects, uses and shares information when you use [App name] on iPhone, iPad and other Apple devices (the "app"). If you have questions, contact us at [Contact email].

Information we collect and why

We collect only the information listed below. Some of it you give us directly; some is collected automatically when you use the app.

  • Your email address, used to run the app and its features, keep it secure, prevent fraud and fix crashes.
  • Your user or account ID, used to run the app and its features, keep it secure, prevent fraud and fix crashes.
  • Crash logs, used to run the app and its features, keep it secure, prevent fraud and fix crashes. We don't link it to your identity.

Information that the app processes only on your device, and never sends to us or our service providers, is not collected by us. We don't build profiles of you from data provided by Apple or from data we describe as anonymous, and we don't use it to identify you.

Your account

You can create an account with Email and password and Sign in with Apple. You can delete your account at any time in the app: Settings > Account > Delete account. Deleting your account deletes your account record and the personal data linked to it, except information we're legally required to keep, which we'll tell you about.

If you signed in with Apple and chose Hide My Email, we only receive a private relay address from Apple.

Who we share it with

We don't use third-party services that receive your personal data.

We don't sell your personal information, and we don't share it with others for their own advertising.

We may also disclose information when the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of our business, in which case this policy continues to apply to your data.

Tracking and advertising

We don't track you: we don't link data from the app with data from other companies' apps or websites for advertising, and we don't share it with data brokers.

How long we keep data and how to delete it

We keep your personal data while your account is open. When you delete your account, we delete it, unless the law requires us to keep it longer, for example purchase records.

  • Delete your account and its data in the app: Settings > Account > Delete account.
  • Ask us to delete your data by emailing [Contact email]. We'll confirm when it's done.
  • Withdrawing consent doesn't affect data processing that happened before you withdrew it.

Children

[App name] is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us at [Contact email] and we'll delete it.

Your privacy rights

Depending on where you live, you may have the right to:

  • know what personal information we have about you and get a copy of it
  • correct inaccurate information
  • delete your information
  • withdraw your consent
  • not be treated differently for using these rights

This includes residents of California and other US states with privacy laws, and residents of Canada. To make a request, email [Contact email]. We'll verify your request and respond within the time the law requires. You can use an authorized agent where the law allows.

Security and storage

We protect your information with reasonable safeguards. No method of storage or transmission is completely secure. We store data in the United States.

Changes to this policy

If we change how we collect or use your information, we'll update this policy and the date above, and tell you in the app before material changes take effect.

Contact us

[Company or developer name]. Email: [Contact email]

Tick the box to copy or download.

Track installs, revenue and ROAS for this app

Once you're live, Airbridge Core shows which Meta, TikTok, Google or Apple Ads campaign brought each user, with revenue synced from RevenueCat, Adapty or Superwall. Start Core free →

How to draft your privacy policy

  1. 1

    Describe your app

    Add your app and contact details, whether people create accounts, and where they delete them. Apple requires account deletion inside the app.

  2. 2

    Tick what you collect

    Use Apple's own App Privacy data types and purposes, including data your SDKs collect, so the policy and your App Store answers use the same words.

  3. 3

    Review three outputs

    A policy draft, the App Privacy answers it implies and a checklist of Apple's rules. Anything still in brackets needs your input.

  4. 4

    Check it yourself, then publish

    Compare every line with how the app really behaves. Host the web page, add the URL in App Store Connect and in the app, and recheck it with every update.

Common questions

Does every iOS app need a privacy policy?

Yes. Apple's App Review Guideline 5.1.1(i) says all apps must link to a privacy policy in App Store Connect and inside the app, somewhere easy to find. That includes apps that don't collect any data: the policy then says so.

What does Apple require a privacy policy to say?

Three things: what data the app collects, how it collects it and every use of it; that any third party you share data with, such as analytics, ad networks and SDKs, gives it the same or equal protection; and how long you keep data, how people can delete it and how they can withdraw consent.

Should my privacy policy match my App Store privacy label?

Yes. Both describe the same data practices, and App Review compares what the app does with what you've told Apple. You're responsible for keeping your App Privacy answers accurate, and you can update them in App Store Connect at any time without a new build. This tool builds both from one set of answers.

Do I have to disclose data my SDKs collect?

Yes. Your App Privacy answers must include data collected by third-party SDKs in your app, and you're responsible for all the code they include. Check each SDK's documentation and privacy manifest, and generate Xcode's privacy report. Apple also requires a privacy manifest and signature for a list of commonly used SDKs.

When do I need App Tracking Transparency?

When you or an SDK link data from your app with other companies' data for targeted ads or ad measurement, or share it with a data broker. Ask with the App Tracking Transparency prompt before tracking starts, and don't make features or rewards depend on saying yes.

Which privacy laws apply in the US and Canada?

It depends on your business and users. Examples include COPPA for children under 13, California's CCPA for businesses that meet one of its thresholds, such as buying, selling or sharing the personal information of 100,000 or more California residents or households, other US state privacy laws, Canada's PIPEDA and Quebec's Law 25. This tool isn't legal advice: ask a lawyer if you're unsure.

Can I publish the generated policy as is?

Treat it as a draft. It only knows what you tell it, so check every line against how your app and its SDKs actually behave, fill in anything in brackets, and recheck it whenever you add an SDK, a permission or a new use of data.

Sources (7) · Written by Hyunjong Choi, Go-to-market, Airbridge Core
Apple: App Review Guidelines, 5.1 Privacy
Privacy policy contents, consent and purpose strings, account deletion, data use and sharing, third-party AI, kids and health data.
Apple: App privacy details
Data types, purposes, linked data and tracking definitions used for the App Privacy answers.
Apple: Offering account deletion in your app
What in-app account deletion must include, Sign in with Apple token revocation and subscriptions.
Apple: Third-party SDK requirements
SDKs that need a privacy manifest and signature.
Apple: Privacy manifest files
PrivacyInfo.xcprivacy, tracking domains and required reason APIs.
California Attorney General: CCPA
Which businesses the California Consumer Privacy Act applies to.
Office of the Privacy Commissioner of Canada: PIPEDA
Canada's federal private-sector privacy law.

Ship a privacy policy that matches your app.Then see which campaigns bring your users.

Airbridge Core shows which Meta, TikTok, Google and Apple Ads campaign brought each user and what they paid. Trusted by 1,000+ apps processing 100B+ events. $40+/mo after a 30-day free trial, no annual contract.