Files
Tarnax/appstore/review/privacy-label-assessment.md

2.0 KiB

App Privacy assessment

Proposed production label: Data Not Collected, subject to the owner confirming the final service arrangements and the statements below.

Code audit for this pack found no ad/tracking/analytics SDKs and no developer-hosted API. The user chooses an HTTPS server; credentials live in the device Keychain; lock and navigation settings stay local; transfer history stays in memory. The production default server is now blank.

This proposed answer assumes the developer does not collect and retain user data through a bundled/default backend, telemetry, support SDK or other integration. A user-configured server is controlled by that user or their chosen operator; its practices must be assessed separately if the developer also operates that service. Apple defines collection in terms of data transmitted off-device and retained beyond serving the request; merely transmitting an authentication request is not automatically the same as declaring retained analytics.

Support email is user-initiated external correspondence. The public policy explains it. Review Apple's optional-disclosure criteria against your actual handling rather than assuming all support collection is automatically exempt.

Before answering App Store Connect:

  • Confirm whether you or your partners operate any server used by ordinary users.
  • Confirm no analytics, crash-reporting or advertising SDK has been added since this audit.
  • Review any retained server access logs and account records if you operate the backend.
  • Include all third-party SDK behavior if dependencies are added.
  • Confirm the published privacy policy accurately describes support correspondence.

Bundled privacy manifest: no tracking, no declared collected-data types, UserDefaults required-reason API CA92.1 for app-local settings. This manifest is not a substitute for the App Store Connect privacy questionnaire.

Sources: https://developer.apple.com/app-store/app-privacy-details/ https://developer.apple.com/documentation/technotes/tn3183-adding-required-reason-api-entries-to-your-privacy-manifest