Hi all,
last week I successfully updated an app ob both Apple's and Google's stores.
Then I found a marginal bug and decided to update again. No problem with Apple, but Google rejected it.
The reason:
Issue found: Invalid privacy policy
Nothing changed about that since the last week, so I guess that a more scrupulous rewier acted on my update. I tried the appeal way, they mailed an accepted message but the new version wasn't published. So I'm trying it again but would like to hear from you about the following list they mailed on rejection:
Your privacy policy must:
- Be linked on your app’s store listing page in Play Console and within the app itself.
- Hold reference to the entity (for example, developer, company) named in the app’s Google Play listing or the app.
- Include a clear labeling as a privacy policy.
- Include a privacy point of contact or a mechanism to submit inquiries.
- Be readable in a standard browser without any plug-ins or special handlers (no PDFs).
- Be available on an active, publicly accessible and non-geofenced URL.
- Be non-editable.
- Comprehensively disclose how your app accesses, collects, uses, and shares user data. This must include:
- Disclosing the types of personal and sensitive user data your app accesses, collects, uses, and shares; and any parties with which any personal or sensitive user data is shared.
- Secure data handling procedures for personal and sensitive user data.
- Developer’s data retention and deletion policy.
First point on the list: obviously a link on the app store exists since they cited it (btw is correct and functioning).
Should I add a label in my app showing that same URL ?
"Include a clear labeling as a privacy policy.". Like above, would a label like "Privacy policy -
https://click4lunch.ch/privacy" suffice or should I waste a page to copy the content of that URL in the app? Is the URL ok or should it be clickable in order to launch the standard browser or a webview?
Do they want the "privacy point of contact" showed in-app or will it suffice what's in the URL (and on the app's store pages)?
I don't blame on them because I believe they must adapt to worldwide (often exagerated) privacy regulations.
But when a rewier writes that my policy link is invalid (ok, its content) and adds a list that seems there for interpretation instead of as an aid, what one should do?
So, my question is: as a formal way to satisfy them what, in your experience, would be the less impactful action?
TIA