App Review Guideline

    5.1.2 Data Use and Sharing

    The app shares or uses personal data (for tracking or with third parties) without the permission Apple requires.

    Why it happens

    • Tracking users across apps and websites without App Tracking Transparency permission (5.1.2(i)).
    • Analytics or ad SDKs that read the IDFA or fingerprint the device without ATT.
    • Sharing personal data with third-party AI services without disclosure and consent.

    How to fix it

    1. Request ATT permission (AppTrackingTransparency) before any tracking, and stop tracking if the user declines.
    2. Update the App Privacy answers in App Store Connect to match every SDK that collects data.
    3. Disclose any sharing of personal data with third parties, including AI providers, and get consent.

    What to reply in Resolution Center

    After the fix is in the build you submit:

    Hello App Review team,
    
    Thank you for the review of [app name] [version]. The app now requests App Tracking Transparency permission before any tracking and does not track users who decline. Our App Privacy details were updated to match.
    
    We have submitted build [build number] with these changes. Please let us know if anything else needs attention.
    
    Best regards

    Got this in a rejection?

    Paste the whole message into the rejection desk for the fix and a reply filled in with your app's details.

    Fix my rejection

    In depth

    Other guidelines