Preparing for the App Store Review

This article is provided to assist you in preparing for the Google Play and App Store reviews. However, kindly regard it as a supplementary resource intended for your convenience rather than tailored legal advice. We recommend that you consult with legal professionals to address any of your specific needs.

Requirements for Google Play

According to Google's guidelines, app developers publishing on Google Play are required to disclose the app’s privacy practices by completing the data safety form. This allows Google to inform users of how an app, including through its use of third-party SDKs, collects and shares user data.

The Airbridge SDK, which is highly configurable, collects user data necessary for measuring ad performance. When submitting your Airbridge SDK-integrated app to Google Play for review, make sure to provide details on the data collected by your app and the custom-configured Airbridge SDK.

Complete the data safety form

To fill out the data safety form and disclose your app’s privacy practices, select your app in Google Play Console and navigate to the [Policy]>[App content] page.

The tables below will help you complete the form with respect to your use of Airbridge. However, it is your responsibility to respond in accordance with your specific data practices, configurations, and integrations.

Question

Answer for the Airbridge SDK

Does your app collect or share any of the required user data types?

Yes

Is all of the user data collected by your app encrypted in transit?

Yes

Do you provide a way for users to request that their data be deleted?

No

The table below lists the data types the Airbridge SDK collects on your behalf by default. If your app collects any other data types, adjust your responses accordingly.

Data Type

Airbridge Data Collection

App activity

App interactions

Yes

App info and performance

Crash logs

Yes

Device or other IDs

Device or other IDs

Yes

For every selected data type, you need to declare whether it is shared with a third party and how it is handled. The table below provides information on the data types collected by the Airbridge SDK. If your app collects any other data types, also provide the information accordingly.

Question

Answer for the Airbridge SDK

Is this data collected, shared, or both?

Collected; Shared

Is this data processed ephemerally?

No, this collected data is not processed ephemerally

Is this data required for your app, or can users choose whether it’s collected?

Data collection is required (users can’t turn off this data collection) *Note: If you have enabled the privacy protection feature of the Airbridge SDK and your app allows users to choose whether data is collected, select “Users can choose whether data is collected.”

Why is this user data collected?

Analytics; Advertising or marketing

Why is this user data shared?

Analytics; Advertising or marketing

Complete the advertising ID declaration

As an Airbridge user, you also need to declare your app’s use of advertising ID. To fill out the form, select your app in Google Play Console and navigate to the [Policy]>[App content] page.

The table below will help you complete the form with respect to your use of Airbridge. However, it is your responsibility to respond in accordance with your specific data practices, configurations, and integrations.

If your app uses advertising ID for reasons other than “Analytics” and “Advertising or marketing,” you must select them as well.

Question

Airbridge Data Practices

Does your app use advertising ID?

Yes

Why does your app need to use an advertising ID? This includes any SDKs that your app imports that use advertising IDs. Select all that apply.

Analytics; Advertising or marketing

Requirements for the App Store

According to Apple’s guidelines, app developers publishing on the App Store are required to disclose the app’s privacy practices by answering app privacy questions. This allows Apple to inform users of how an app, including through its use of third-party SDKs, collects and shares user data in the format of a nutrition label.

The Airbridge SDK, which is highly configurable, collects user data necessary for measuring ad performance. When submitting your Airbridge SDK-integrated app to the App Store for review, make sure to provide details on the data collected by your app and the custom-configured Airbridge SDK.

 

Submit app privacy details

To answer app privacy questions and disclose your app’s privacy practices, select your app in App Store Connect and navigate to the [General]>[App Privacy] page in the sidebar.

The tables below will help you answer app privacy questions with respect to your use of Airbridge. However, it is your responsibility to respond in accordance with your specific data practices, configurations, and integrations.

The table below lists the data types the Airbridge SDK collects on your behalf by default. If your app collects any other data types, adjust your responses accordingly.

Data Type

Airbridge Data Collection

Notes

Contact info

Name

No

Email address, including hash

See notes

Airbridge does not collect contact information by default. However, if you have configured to send hashed email addresses to Airbridge, select this data type.

Phone number, including hash

See notes

Airbridge does not collect contact information by default. However, if you have configured to send hashed phone numbers to Airbridge, select this data type.

Other user contact info

No

Health & fitness

Health

No

Fitness

No

Financial info

Payment info

No

Credit info

No

Other financial info

No

Location

Precise location

No

Coarse location

No

Sensitive info

Sensitive info

No

Contacts

Contacts

No

User content

Emails or text messages

No

Photos or videos

No

Audio data

No

Gameplay content

No

Customer support

No

Other user content

No

Browsing history

Browsing history

No

Search history

Search history

No

Identifiers

User ID

Optional

If you have configured to send User IDs to Airbridge, select this data type.

Device ID

Optional

Device IDs, or Advertising IDs (IDFA), are collected only when accessible.

Purchases

Purchase history

Optional

If you have configured to measure purchase events in Airbridge, select this data type.

Usage data

Product interaction

Yes

Airbridge measures app launches by default.

Advertising data

No

Other usage data

Optional

If you have configured to measure any other user interactions, such as button clicks and Wi-Fi data usage, select this data type.

Diagnostics

Crash data

No

Performance data

No

Other diagnostic data

No

Other data

Other data types

Yes

Airbridge collects IDFV, some device information such as the OS version, device type, and device language, and some network information such as the IP address. Airbridge applies a random unique ID to each user to utilize the data collected.

For every selected data type, you need to declare how it is used. The table below provides information on the data types collected by the Airbridge SDK. If your app collects any other data types, also provide the information accordingly.

Data Use Purpose

Answer for the Airbridge SDK

Notes

Third-party advertising

Optional

Select this if you share data with entities that display third-party ads in your app.

Developer’s advertising or marketing

Optional

Select this if you use first-party data, share data with third parties to display first-party ads in your app, or use the collected data for other marketing and advertising purposes.

Analytics

Yes

Product personalization

Optional

Select this if you use data for any product personalization.

App functionality

Yes

Other purposes

Optional

Select this if you use data for any purpose not otherwise listed.

For every selected data type, you need to declare whether it is linked to the user’s identity and whether it is used for tracking purposes. The table below provides information on the data types collected by the Airbridge SDK. If your app collects any other data types, also provide the information accordingly.

Question

Answer for the Airbridge SDK

Are the [data type] collected from this app linked to the user’s identity?

Yes, [data type] collected from this app are linked to the user’s identity.

Do you or your third-party partners use [data type] for tracking purposes?

No, we do not use [data type] for tracking purposes.

Attention

It is crucial to provide all necessary details on the data collected by your app. Make sure that your integrated ad channels, as well as any of your third-party partners that require SDK integration, are complying with Apple’s policies.

You must enable the privacy protection feature of the Airbridge SDK for children under age 14 or for users who have not authorized tracking via the AppTrackingTransparency framework. Their user data should never be sent to Airbridge.

Apple’s Privacy Manifest

Note

It is advised that you prepare the privacy manifest in advance for your convenience in case of App Store policy changes. However, this is not legal advice. Consult with legal professionals to address any of your specific needs.

Starting May 1, 2024, Apple requires app developers to declare approved reasons for using a set of APIs in their app’s privacy manifest to inform the App Store of their app’s privacy requirements. By adding the privacy manifest, app developers do not have to enter privacy details manually and can more readily address App Store policy changes.

Even though it is no longer necessary to enter privacy details manually, the app has to be resubmitted for review for every Airbridge iOS SDK update, as it always has been the process.

Update the Airbridge SDK

To add the privacy manifest, update the Airbridge SDK to the following or later version. No other action is required.

  • iOS SDK 1.36.5

  • React Native SDK 2.8.3

  • Flutter SDK 3.5.3

  • Cordova SDK 2.6.3

  • Expo SDK 2.6.4

  • Unity SDK 1.14.1

  • Unreal SDK 1.3.3 

Was this helpful?

Any questions or suggestions?