Review access and account deletion: demo account from .storebound (masked) to App Review, accounts config, profile checks in check and validate, Data safety extra rows

skills/account-deletion/SKILL.md

@@ -0,0 +1,43 @@
+---
+name: account-deletion
+description: Make account deletion pass App Store and Google Play review for an app with sign-up or sign-in - Apple Guideline 5.1.1(v) in-app deletion (the whole account, not deactivation; Sign in with Apple token revocation; subscription billing note), Google Play's in-app path plus a public web page declared in Data safety, the config (accounts.enabled, deletionUrl, inApp) and the storebound checks. Use when the app has accounts, when the user adds sign-up, or after a 5.1.1(v) / Play account deletion rejection.
+---
+
+# Account deletion (both stores)
+
+Applies to every app that lets people create an account (email, phone, social sign-in, Sign in with Apple). Games
+without accounts can skip it. Sources: Apple, "Offering account deletion in your app"
+(https://developer.apple.com/support/offering-account-deletion-in-your-app/) and App Review Guideline 5.1.1(v)
+(https://developer.apple.com/app-store/review/guidelines/); Google Play, "Understanding Google Play's app account
+deletion requirements" (https://support.google.com/googleplay/android-developer/answer/13327111).
+
+## What the stores require
+- **Apple 5.1.1(v)**: people can **start** deleting their account **inside the app**, easy to find (e.g. Settings >
+  Account > Delete account). Delete the whole account and its personal data, not only deactivate it. A link to a web
+  page that completes the deletion is fine; "email or call us" is only acceptable in highly regulated industries.
+  With Sign in with Apple, revoke the user's tokens (Sign in with Apple REST API). With auto-renewable
+  subscriptions, tell people that billing continues through Apple until they cancel, and how to cancel.
+- **Google Play**: if the app lets people create an account, it must offer deletion **in the app** and on a **web
+  page** people can reach without the app (no reinstall needed). The URL goes into the Data safety form ("Data
+  deletion"). People can also ask to delete some data without deleting the account; say how.
+
+## Steps
+1. Config: `accounts: { enabled: true, deletionUrl: 'https://example.com/delete-account', inApp: 'Settings > Account >
+   Delete account' }`. `storebound check` errors without `deletionUrl` (Play) and warns without `inApp` (Apple);
+   `storebound apple review-details` adds "Account deletion: <inApp>" to the review notes.
+2. Web page at `deletionUrl`: names the app and developer, the steps to request deletion (sign in, or a form that
+   verifies the email), what is deleted and what is kept (and for how long, e.g. invoices for tax law), and how long it
+   takes. No login wall to read it. `storebound validate --play` checks that it answers.
+3. In the app: a clear entry, a confirmation step, then the deletion (or the web page). Sign people out afterwards.
+4. Play Data safety: `dataSafety.deletionRequest: true`, `accountCreation` set to the sign-up methods you offer (not
+   `PSL_ACM_NONE`). Google does not publish the question ids for the delete-account URL: export the form once
+   (Play Console > App content > Data safety > Export to CSV), copy the id, and add it as
+   `dataSafety.extra: [{ question: '<id>', value: '<deletionUrl>' }]`; otherwise enter the URL in the Console after
+   `storebound play data-safety`.
+5. Privacy policy: a "Deleting your account" section with both paths (`privacy-policy` skill).
+6. Test it on a fresh account before every submission; the reviewer will.
+
+## Gotchas
+- "Deactivate" or "contact support" is not deletion for Apple.
+- Deleting the account does not cancel a store subscription: say so in the app and on the web page.
+- Keep the in-app path, the web page, Data safety and the privacy policy saying the same thing.