The most common rejection. Apple's reviewer could not see why the app collects what it collects, or the app asked before it explained.
Point Okkok at the directory holding your built package and your listing text. The report puts what blocks submission first, with what to do, who does it and where. Fix, rebuild, run again; a finding shows as fixed only when its check passes.
pip install git+https://github.com/petresandu-cloud/okkok okkok audit path/to/app