Skip to content

← All tools

Free tool for iOS and Mac developers

App privacy policy generator

App Store Connect asks every app for a privacy policy link. Answer a few yes or no questions about what your app does, and get a short policy in plain words, in English or Chinese, ready to copy or download as text or Markdown. Each answer is also matched to the App Privacy data types you may need to select, so the policy and the label agree. Everything runs in your browser and nothing is sent anywhere.

This is a starting template, not legal advice. Before you publish it, make sure it matches what your app really does and the App Privacy answers you give in App Store Connect. If you are unsure, ask a lawyer.

About the app

People write here to ask about their data, so use an address you read.

What does the app do?

Tick only what is true. The policy states what you tick and nothing more.

Data that leaves the device
Apple services
Device features the app asks to use
Audience

Check these

  • ● Add a contact email. The policy tells people to write to it about their data.
  • ● Add an effective date, so readers know which version they are reading.
  • ● Add the app's name. Until then the policy says “this app”.

Your privacy policy

Tick at least one answer above to see the policy.

Where the link goes

Publish the policy on a web page you control, then paste its address in App Store Connect: open the app, choose App Privacy in the sidebar, and click Edit next to Privacy Policy. Apple's page

Two related tools help you keep the policy, the label and the app in step:

How it works

  • •The policy is built in your browser from your answers. It has the sections readers look for: what we collect, how it is used, sharing, keeping and deleting data, children, your rights, changes and contact.
  • •It states only what you tick. If you tick that the app collects no data, the policy says so and lists nothing collected. Ticking that together with analytics, crash reports, ads or accounts is flagged, and the policy follows the data answers.
  • •With in-app purchases ticked, the policy says the App Store handles the payment and you never see card details. With iCloud sync ticked, it says the data lives in the user's own iCloud account.
  • •The check panel lists, for each answer, the App Privacy data types that may match, with names taken from Apple's App privacy details page.

What it does not do

  • •It is not legal advice. Laws differ by country, and some apps need more than this template covers.
  • •It cannot see your app. If an SDK you added sends data you did not tick, the policy will not mention it. Check each SDK's documentation and privacy manifest.
  • •It does not host the policy. Publish it on a page you control and paste that link in App Store Connect.
  • •The data type list is a starting point for App Privacy, not the full set of questions App Store Connect asks.

Questions

Does my app need a privacy policy if it collects nothing?
Yes. App Store Connect's help says a privacy policy URL is required for all apps. A short policy that says the app collects no data is fine, as long as it is true.
Where do I put the privacy policy URL?
In App Store Connect, open the app, choose App Privacy in the sidebar, click Edit next to Privacy Policy, enter the URL and save.
Do I have to mention payment details for in-app purchases?
Apple's App privacy details page says payment information entered outside your app, which you never have access to, is not collected and does not need to be disclosed. The policy still tells readers that Apple handles the payment.
Does iCloud sync count as collecting data?
Apple's page says you are not responsible for disclosing data collected by Apple when you use services such as CloudKit. If you collect data about the app from them yourself, you disclose that.
My app uses the camera but never uploads photos. Is that collecting?
Apple's page defines collecting as sending data off the device so you or a partner can access it longer than it takes to answer the request. Photos that stay on the device are not collected, and the policy says they stay on the device.

Related tools