Launch your app faster with Lovable AI. Build apps with 0 code. Try Lovable Free →

Privacy policy requirements, answered

Do I need a privacy policy to publish an app?
Yes, on both stores. App Store Connect requires a privacy policy URL for every app before you can submit, and Google Play requires one on every store listing. It applies even if your app collects nothing — the policy still has to exist at a public URL and say so.
Where do I host the privacy policy?
At a stable, public URL on a domain you control, such as yourapp.com/privacy. It has to load for a signed-out visitor on any device, without a login, a redirect chain or a download prompt. Document-sharing links are a common rejection reason.
Does analytics count as collecting data?
Yes. If an analytics, crash-reporting or advertising SDK sends identifiers, device information or usage events off the device, that counts as collection for Apple's App Privacy label and Google's Data safety form — even when the data is anonymised and even if you never open the dashboard.
Do I need a support URL too?
On iOS, yes. Apple requires a support URL for every app, separate from the privacy policy URL, pointing at a page where a user can actually get help. Google Play requires contact details on the listing. One small site covers both, which is why this tool also generates a support page.
Is a generated privacy policy good enough for review?
It gives you the correct structure and the standard clauses, which is most of the work. What it cannot know is your dependency list — reconcile the generated text against the SDKs your app actually ships with before you submit, because the store declarations are checked against real behaviour. This is a template, not legal advice.

More on this in the privacy policy URL guide and do I need a website to publish an app.