storebound/templates/profiles/app/declarations.md

57 lines
3.4 KiB
Markdown

# Example App · store declarations (answers to copy into the consoles)
Starting answers for a typical **utility / productivity app**: an optional account (email + password, or sign in
with a provider), an analytics SDK acting as your processor, data synced to your own backend, no ads, no chat with
strangers, general audience. **Edit every line to match your app**: these are your statements to the stores. Everything
marked **UI** has no API: Play Console > your app > Policy and programs > **App content**, and App Store Connect for
Apple. Data safety (Play) has an API: `storebound play data-safety`.
## Google Play · App content (UI)
| declaration | answer |
|---|---|
| Privacy policy | your policy URL (same one in the listing and inside the app) |
| App access | "All or some functionality is restricted": add the demo account (username, password) and the steps from `reviewAccess.instructions`; credentials must work at all times, no 2FA / OTP (review-access skill) |
| Ads | No, my app does not contain ads |
| Content rating | IARC questionnaire, below |
| Target audience and content | 18 and over (or 13+ if teens use it); "Could your app unintentionally appeal to children?" No (only if true) |
| News app | No |
| Data safety | `storebound play data-safety`, then check the summary; with accounts: the delete-account URL (`accounts.deletionUrl`) |
| Government apps | No |
| Financial features | My app doesn't provide any financial features |
| Health apps | No health features |
| Advertising ID | No (unless an SDK in your app reads it: check the SDK docs and your merged manifest) |
| Store settings | App, category (Productivity, Tools, ...); contact email + website |
## Account deletion (account-deletion skill)
- In the app: Settings > Account > Delete account deletes the account and its data (not only "deactivate").
- On the web: `accounts.deletionUrl` lets people request deletion without the app; Play asks for it in Data safety.
- With subscriptions: say that deleting the account does not cancel the store subscription, and how to cancel.
## IARC content rating (Play UI; Apple has its own form, `storebound apple appinfo`)
Category: not a game (e.g. Utility, Productivity, Communication, or Social Networking if people share content with
others). Typical answers for a lists / notes app:
| topic | answer |
|---|---|
| Violence, sexuality, language, controlled substances | No |
| Gambling (simulated / real money) | No |
| Users interact or exchange content | Yes only if people can share with others outside their own invitations; then also moderation and reporting |
| Shares location with other users | No |
| Digital purchases | No (Yes once you sell IAPs or subscriptions) |
| Unrestricted internet / browser | No |
Expected: PEGI 3, ESRB Everyone, IARC 3+. Apple age rating 4+ (all content questions None) unless users share
content publicly.
## App Store (UI-only parts)
- App record: App Store Connect > Apps > + > New App. No API.
- App Privacy: `app-privacy.md`, then **Publish**.
- App Review information: `storebound apple review-details` sends the contact, the demo account (from
`.storebound/credentials.json`, masked in the log) and the notes.
- Export compliance (export-compliance skill): `ITSAppUsesNonExemptEncryption = NO` only if true.
- Guideline 5.1.1: the privacy policy link must also be reachable **inside the app**; 5.1.1(v): account deletion
inside the app.