Blocks submissionGoogle Play

The Data safety form says what the app and its libraries actually collect

The question Compare the Data safety form to the facts: permissions declared, SDKs bundled and what their manifests say they collect. Is every collected type declared with the right purpose, sharing and optionality? Is the deletion route named?

A person or a model answers it from the app's texts and screens; the answer is kept only while the facts it saw are unchanged.

Applies to every app

Checked from on a test track, submitted and in review, published

The rule, in our words

• Provide information for Google Play's Data safety section: Every app published on Google Play (except apps only on the internal testing track) must complete the Data safety form, even if it collects no data, and must have a privacy policy link first. The form must accurately and completely declare, for the app and every SDK or library in it, which data types are collected (sent off device) or shared with third parties, for what purposes, whether each type is optional or required, whether all collected data is encrypted in transit, and whether the developer provides a way to request deletion (or auto-deletes within 90 days). One global form covers every version and region, so anything present in any distributed version must be declared, and a data type is "required" if any version requires it. The declarations must stay accurate at all times; misrepresentation can lead to blocked updates or removal.

Okkok never stores the stores' text. Each item above is our paraphrase, and the link is the page it rests on, verified unchanged by fingerprint on every run.

The other store

• Google requires a public declaration of in-transit encryption; Apple requires protection but no declaration. partial
• Google's disclosure is a structured form covering the app and every SDK (collected vs shared, purposes, optional vs required, encryption, deletion path or 90-day auto-delete) that must precede publishing on any track except internal testing; Apple's is a free-form policy (the structured equivalent is apple.hig.privacy / apple.privacy-manifest). partial
• Google's form also declares purpose, optional/required status, encryption in transit and deletion path, and is required even for apps collecting nothing; Apple's paraphrase lists only practices and data types. same
• Apple's declaration is a bundled file per app and per SDK with required-reason API justifications and tracking domains; Google's is a single console form covering all versions and regions with purposes and optional/required flags. same

Check your app

pip install git+https://github.com/petresandu-cloud/okkok
okkok audit path/to/app

The report names this rule as google.data-safety-matches-app and says what to do, who does it, where, and how it knows.