Blocks submissionApp Store

The app ships its own privacy manifest

What is checked This rule is decided by code from the built app and the listing: ios.built.privacy_manifests.

Applies to every app

Checked from built, not yet uploaded, on a test track, submitted and in review, published

The rule, in our words

• Privacy manifest files: An app, and any third-party SDK that is on Apple's list or that uses a required-reason API, collects data, or contacts tracking domains, declares in a bundled PrivacyInfo.xcprivacy the data types it collects, whether it uses data for tracking (and if so the tracking domains, whose requests fail without ATT permission), and the reasons for each required-reason API it uses.

Okkok never stores the stores' text. Each item above is our paraphrase, and the link is the page it rests on, verified unchanged by fingerprint on every run.

The other store

• Apple's declaration is a bundled file per app and per SDK with required-reason API justifications and tracking domains; Google's is a single console form covering all versions and regions with purposes and optional/required flags. same
• none on principle; Apple's mechanism is a manifest shipped with the SDK, Google's is the developer's form entry. same

Check your app

pip install git+https://github.com/petresandu-cloud/okkok
okkok audit path/to/app

The report names this rule as apple.privacy-manifest-present and says what to do, who does it, where, and how it knows.