App Store RejectionGuideline 1.3 — Kids Category

Kids category rejection — data collection and ads aren't allowed here.

If your app is in the Kids category, Apple and COPPA hold it to a much stricter standard. A single analytics SDK or an outbound link can kill your approval. This guide explains the rules and how to clean up your app.

What Apple said

“Your app is categorized as a Kids app but we found it collects user data and/or displays third-party advertisements. Apps in the Kids category must not include third-party analytics or advertising and may not transmit data about children without verifiable parental consent.”

What this actually means

The Kids category on the App Store carries COPPA compliance obligations. Apple prohibits data collection, behavioral advertising, and links to external websites in kids apps unless parental consent gates are in place. Even 'anonymous' analytics SDKs like Firebase or Mixpanel can trigger this rejection because they technically transmit device data.

What Apple needs to see

  • Complete removal of any third-party analytics, advertising, or tracking SDKs from the app binary
  • No links to external websites, social media, or any content outside the app itself
  • A privacy policy that explicitly states the app does not collect personal information from children
  • If your app has a mixed audience, a proper age gate that routes child users away from any data-collecting features
  1. 1Audit every SDK in your app and remove any that collect device identifiers, behavioral data, or usage analytics
  2. 2Search your code for external URL calls and either remove them or place them behind a parental gate requiring a CAPTCHA or math challenge
  3. 3Update your privacy policy to explicitly state no data is collected from users under 13 — BaseTerms can generate a COPPA-compliant privacy policy that covers this clearly
  4. 4Verify your Data Nutrition Label in App Store Connect reflects zero data collection
  5. 5Test the entire app as if you are a child — any prompt that could lead outside the app sandbox will get you rejected again

While you're at it — Apple also requires these pages for every app.

Fix this rejection, then make sure you're covered on the compliance side too. Apple requires every app to link to a hosted Privacy Policy, Terms of Service, Support page, and Data Deletion page. No link means another rejection — just for a different reason.

Privacy Policy
Terms of Service
Support Page
Data Deletion Page
Generate my compliance pages — $9

Common questions

Can I use any analytics at all in a Kids category app?
Apple allows first-party analytics you host yourself with no data leaving to third parties. Any third-party SDK — even crash reporters like Crashlytics — is risky. Stick to Apple's own screen time and crash reporting in Xcode Organizer.
Do I need a privacy policy for a kids app with no data collection?
Yes. Apple requires a privacy policy URL for all apps, and for kids apps the policy should explicitly confirm no data is collected. Without it, you'll face a separate rejection on top of the 1.3 issue.
What's a parental gate and does it let me add external links?
A parental gate is a challenge only an adult can reasonably pass (like a math problem or confirmation of a date of birth). Apple accepts parental gates to unlock links to websites or purchases, but the gate must be robust — a simple 'Are you an adult?' checkbox won't pass review.