Privacy policy requirements, answered
- Do I need a privacy policy to publish an app?
- Yes, on both stores. App Store Connect requires a privacy policy URL for every app before you can submit, and Google Play requires one on every store listing. It applies even if your app collects nothing — the policy still has to exist at a public URL and say so.
- Where do I host the privacy policy?
- At a stable, public URL on a domain you control, such as yourapp.com/privacy. It has to load for a signed-out visitor on any device, without a login, a redirect chain or a download prompt. Document-sharing links are a common rejection reason.
- Does analytics count as collecting data?
- Yes. If an analytics, crash-reporting or advertising SDK sends identifiers, device information or usage events off the device, that counts as collection for Apple's App Privacy label and Google's Data safety form — even when the data is anonymised and even if you never open the dashboard.
- Do I need a support URL too?
- On iOS, yes. Apple requires a support URL for every app, separate from the privacy policy URL, pointing at a page where a user can actually get help. Google Play requires contact details on the listing. One small site covers both, which is why this tool also generates a support page.
- Is a generated privacy policy good enough for review?
- It gives you the correct structure and the standard clauses, which is most of the work. What it cannot know is your dependency list — reconcile the generated text against the SDKs your app actually ships with before you submit, because the store declarations are checked against real behaviour. This is a template, not legal advice.
More on this in the privacy policy URL guide and do I need a website to publish an app.