Mobile app privacy policy template

This page lists what the Apple App Store and Google Play ask for and gives a free excerpt of template wording for an iOS and Android app.

What the Apple App Store asks for

Source: Apple, App privacy details on the App Store, read 2026-10-12 as a summary from a page-reading tool, not verbatim.

A publicly accessible privacy policy URL is required.
Declare data collected by you and by third-party partners, per type: purpose, linked to identity or not, used for tracking or not.
"Collect" means data leaves the device and is retained beyond real-time servicing; on-device-only processing is not collected.
You are responsible for accurate, current answers.

What Google Play asks for

Source: Google Play Console Help, Data safety section, read 2026-10-12 as a summary. The separate Google Play User Data policy page was not read; check it yourself.

All apps on closed, open or production tracks must complete the Data safety form.
A privacy policy link is required, even for apps that collect no data.
Disclose data sent off the device, including by third-party SDKs; per type state required or optional, purposes, sharing, encryption in transit and deletion requests.
The developer alone is responsible for accuracy.

Where a policy commonly falls short

Going only by the sources above: no public policy URL, store forms that disagree with the policy, SDK data left out, and answers that are not kept current. The sources give no rejection statistics, and this page does not promise store approval.

Free excerpt from the template

Four complete clauses, copyable as plain text. Replace every [[FIELD]].

1. Data we collect

Data you give us or that the app sends off your device: [[DATA_COLLECTED_LIST]]

Data that stays on your device and is not sent to us is not described as collected here.

2. Device permissions

The app asks for these permissions on iOS and Android and uses each only for the reason given: [[DEVICE_PERMISSIONS_LIST]]

You can turn permissions off in your device settings. Some features may stop working.

3. Third parties and SDKs

We share data with, or the app includes software from, these third parties: [[THIRD_PARTIES_LIST]]

Their own privacy policies apply to what they do with the data.

4. Children

The app is not directed to children under [[MIN_AGE]], and we do not knowingly collect their data. If you believe a child has given us data, contact [[CONTACT_EMAIL]] and we will delete it.

Fill-in checklist

List every data type the app or its SDKs send off the device.
Copy each answer from your App Store Connect privacy answers and your Play Data safety form, and make the policy say the same.
List every device permission and its reason.
State plainly whether you track users or show ads.
Give a deletion method that works inside or outside the app.
Host the policy at a public URL anyone can open without logging in.

The full editable pack (7 templates in Markdown, PDF and HTML) is being prepared.