What counts as collecting data for the App Store privacy label?

Apple defines collect as transmitting data off the device in a way that lets you or your partners access it for longer than it takes to service the request in real time. Data that is only processed on the device is not collected. Data you send to your server and discard right after answering the request, such as an IP address on an API call, is not collected either.

Do I have to declare data that my SDKs collect?

Yes. Apple asks you to identify all data that you or your third-party partners collect, and third-party partners include analytics tools, ad networks and any SDK whose code is in your app. Many SDKs ship a PrivacyInfo.xcprivacy file listing what they collect; drop those into this tool to start from them.

What does "linked to the user" mean?

Data is linked when it is tied to the person's identity through their account, device or other details. Apple says collected data is usually linked unless you de-identify it before collection, for example by stripping user IDs and names, and then never try to link it back or combine it with data that would.

What counts as tracking?

Linking data from your app about a user or device with data from other companies' apps, websites or offline properties for targeted advertising or advertising measurement, or sharing it with a data broker. If any type is used for tracking, the app must ask with App Tracking Transparency first, and the privacy manifest should set NSPrivacyTracking.

My app uses Crashlytics or another crash reporter. What do I declare?

Typically Crash Data, and often Performance Data or Other Diagnostic Data, for App Functionality or Analytics. Whether it is linked depends on whether the reports carry a user or device ID. Check the SDK's privacy manifest or documentation for exactly what it sends.

Can my label say Data Not Collected?

Yes, if neither you nor any SDK collects user data. Data processed only on the device, and data Apple collects through its own frameworks such as App Analytics, does not count. Apps with an analytics, crash reporting, ad or sign-in SDK almost always collect something.

Is any collected data optional to declare?

Only when it meets every one of Apple's criteria for a case: for example, data from an infrequent, optional feedback form the person fills in each time, with their name shown on it, and never used for tracking or advertising. Opt-in product improvement programs, regulated financial services and approved health research studies have their own lists. Meeting some of the criteria is not enough; then it must be declared.

Do I need to submit an update to change my privacy answers?

No. Apple says you can update your answers in App Store Connect at any time without submitting a new version. You are responsible for keeping them accurate when your practices change, for example when you add an SDK.

← All tools

Free tool for iOS and Mac developers

App privacy label builder

Tick the data your app and its SDKs collect, answer the three questions App Store Connect asks for each type (purposes, linked to the user, used for tracking), and see the App Privacy section your product page will show: Data Used to Track You, Data Linked to You, Data Not Linked to You. Or drop in the PrivacyInfo.xcprivacy files from your app and SDKs and start from what they declare. Nothing is uploaded.

Data types, purposes and definitions are copied from Apple's App privacy details page, checked on 2026-10-31.

Start from privacy manifests (optional)

Drop or paste PrivacyInfo.xcprivacy files: your app's and one from each SDK that ships one (look inside the SDK's folder or Swift package). Their collected data types are merged into the answers below. Everything stays in this page.

Drop .xcprivacy files here or choose themChoose files

Or paste one manifest

Name (for example the SDK)

1. Which data is collected?

0 selected

"Collect" means sent off the device and kept longer than it takes to answer the request, by you or by any SDK in the app. Data that never leaves the device is not collected. Tick each type you or your partners collect.

Contact Info

NameSuch as first or last nameEmail AddressIncluding but not limited to a hashed email addressPhone NumberIncluding but not limited to a hashed phone numberPhysical AddressSuch as home address, physical address, or mailing addressOther User Contact InfoAny other information that can be used to contact the user outside the app

Health & Fitness

HealthHealth and medical data, including but not limited to data from the Clinical Health Records API, HealthKit API, Movement Disorder API, or health-related human subject research or any other user provided health or medical dataFitnessFitness and exercise data, including but not limited to the Motion and Fitness API

Financial Info

Payment InfoSuch as form of payment, payment card number, or bank account number. If your app uses a payment service, the payment information is entered outside your app, and you as the developer never have access to the payment information, it is not collected and does not need to be disclosed.Credit InfoSuch as credit scoreOther Financial InfoSuch as salary, income, assets, debts, or any other financial information

Location

Precise LocationInformation that describes the location of a user or device with the same or greater resolution as a latitude and longitude with three or more decimal placesCoarse LocationInformation that describes the location of a user or device with lower resolution than a latitude and longitude with three or more decimal places, such as Approximate Location Services

Sensitive Info

Sensitive InfoSuch as racial or ethnic data, sexual orientation, pregnancy or childbirth information, disability, religious or philosophical beliefs, trade union membership, political opinion, genetic information, or biometric data

Contacts

ContactsSuch as a list of contacts in the user’s phone, address book, or social graph

User Content

Emails or Text MessagesIncluding subject line, sender, recipients, and contents of the email or messagePhotos or VideosThe user’s photos or videosAudio DataThe user’s voice or sound recordingsGameplay ContentSuch as saved games, multiplayer matching or gameplay logic, or user-generated content in-gameCustomer SupportData generated by the user during a customer support requestOther User ContentAny other user-generated content

Browsing History

Browsing HistoryInformation about content the user has viewed that is not part of the app, such as websites

Search History

Search HistoryInformation about searches performed in the app

Identifiers

User IDSuch as screen name, handle, account ID, assigned user ID, customer number, or other user- or account-level ID that can be used to identify a particular user or accountDevice IDSuch as the device’s advertising identifier, or other device-level ID

Purchases

Purchase HistoryAn account’s or individual’s purchases or purchase tendencies

Usage Data

Product InteractionSuch as app launches, taps, clicks, scrolling information, music listening data, video views, saved place in a game, video, or song, or other information about how the user interacts with the appAdvertising DataSuch as information about the advertisements the user has seenOther Usage DataAny other data about user activity in the app

Diagnostics

Crash DataSuch as crash logsPerformance DataSuch as launch time, hang rate, or energy useOther Diagnostic DataAny other data collected for the purposes of measuring technical diagnostics related to the app

Surroundings

Environment ScanningSuch as mesh, planes, scene classification, and/or image detection of the user’s surroundings

Body

HandsThe user’s hand structure and hand movementsHeadThe user’s head movement

Other Data

Other Data TypesAny other data types not mentioned

3. What the product page will show

The App Privacy section of your App Store page, from these answers. Use Show details for the view that lists each type by purpose.

Data Not Collected

The developer does not collect any data from this app.

Before you submit

Good to know (1)

•Nothing ticked: the label will say Data Not Collected. That is right only if neither you nor any SDK sends user data off the device. Crash reporters and analytics SDKs usually do.

4. Your answers

Type by type, in the order App Store Connect asks. Keep it with your release notes so the next update starts from here.

Do you or your third-party partners collect data from this app? No

How it works

•The 35 data types in 16 categories and the six purposes are Apple's, with Apple's definitions under each one, in the order App Store Connect lists them.
•Privacy manifests use the same data types and purposes, so their NSPrivacyCollectedDataTypes entries map one to one. When several manifests declare the same type, the purposes are joined and linked or tracking is yes if any of them says yes, because App Store Connect takes one answer per type for the whole app.
•The preview follows the product page: a type used for tracking is listed under Data Used to Track You and, when linked, also under Data Linked to You. The details view lists each category under the purposes it is used for.
•The checks catch a missing purpose, tracking without an App Tracking Transparency prompt or without NSPrivacyTracking in the manifest, and a few situations Apple's page calls out, such as payment services and coarsened location.
•You get the answers as text, in App Store Connect's order, and a PrivacyInfo.xcprivacy with the same collected data types.

What it does not do

•It does not look at your code or your SDKs. It knows what you tick and what the manifests you add declare; an SDK without a manifest, or with an incomplete one, still needs its own documentation read.
•It cannot decide whether data is linked or used for tracking. Those depend on what happens on your servers and your partners' servers.
•It does not fill in App Store Connect for you. Copy the answers across by hand; App Store Connect has no import for them.
•The optional-disclosure cases (rare, optional feedback forms; opt-in product improvement programs; regulated financial services; approved health research) are explained below, not modelled. Read Apple's criteria before leaving a type out.
•The preview is close to the product page, not a copy of it; Apple's own layout and icons differ by device.

Questions

What counts as collecting data for the App Store privacy label?: Apple defines collect as transmitting data off the device in a way that lets you or your partners access it for longer than it takes to service the request in real time. Data that is only processed on the device is not collected. Data you send to your server and discard right after answering the request, such as an IP address on an API call, is not collected either.
Do I have to declare data that my SDKs collect?: Yes. Apple asks you to identify all data that you or your third-party partners collect, and third-party partners include analytics tools, ad networks and any SDK whose code is in your app. Many SDKs ship a PrivacyInfo.xcprivacy file listing what they collect; drop those into this tool to start from them.
What does "linked to the user" mean?: Data is linked when it is tied to the person's identity through their account, device or other details. Apple says collected data is usually linked unless you de-identify it before collection, for example by stripping user IDs and names, and then never try to link it back or combine it with data that would.
What counts as tracking?: Linking data from your app about a user or device with data from other companies' apps, websites or offline properties for targeted advertising or advertising measurement, or sharing it with a data broker. If any type is used for tracking, the app must ask with App Tracking Transparency first, and the privacy manifest should set NSPrivacyTracking.
My app uses Crashlytics or another crash reporter. What do I declare?: Typically Crash Data, and often Performance Data or Other Diagnostic Data, for App Functionality or Analytics. Whether it is linked depends on whether the reports carry a user or device ID. Check the SDK's privacy manifest or documentation for exactly what it sends.
Can my label say Data Not Collected?: Yes, if neither you nor any SDK collects user data. Data processed only on the device, and data Apple collects through its own frameworks such as App Analytics, does not count. Apps with an analytics, crash reporting, ad or sign-in SDK almost always collect something.
Is any collected data optional to declare?: Only when it meets every one of Apple's criteria for a case: for example, data from an infrequent, optional feedback form the person fills in each time, with their name shown on it, and never used for tracking or advertising. Opt-in product improvement programs, regulated financial services and approved health research studies have their own lists. Meeting some of the criteria is not enough; then it must be declared.
Do I need to submit an update to change my privacy answers?: No. Apple says you can update your answers in App Store Connect at any time without submitting a new version. You are responsible for keeping them accurate when your practices change, for example when you add an SDK.

Related tools

Privacy manifest generator
Info.plist permission strings
App Store metadata checker
App Review rejection decoder
Indie developer toolkit