Privacy declarations
Tell each store exactly what the app and its SDKs collect. Declare required reason APIs, ask before tracking, and ask for each permission when it is needed.
- Required 2
- Recommended 2
Required
Fill in the store privacy forms from an SDK list
MOB-27Answer Apple's App Privacy questions and Google Play's Data safety form from a list of every SDK in the build. Update both forms in the same release that changes what is collected.
Ask before any tracking
MOB-29Link no data with other companies' data for ads, and read no advertising ID, until the person allows tracking. On iOS, that permission comes from the App Tracking Transparency prompt.
Recommended
Declare required reason APIs in a privacy manifest
MOB-28Ship a
PrivacyInfo.xcprivacyfile in the iOS app that lists each required reason API the app's own code uses, with an approved reason. Use SDK versions that carry their own manifest.Ask for each permission when the feature needs it
MOB-30Ask for camera, location, contacts and other permissions at the moment a feature needs them, never at first launch. Each iOS purpose string says what the data is used for.
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/mobile-apps/privacy-declarations">Agent Wranglers mobile apps playbook</a>. In code you write, add a comment next to it with the same link.