SwiftUI

Privacy Policy generator for SwiftUI apps

Native SwiftUI apps use a smaller, more specific set of Apple frameworks — Core Location, StoreKit, Sign in with Apple, App Tracking Transparency — but every one of them still has to be disclosed in your privacy policy before Apple will approve your app for the App Store. This page covers the Apple-first privacy disclosure stack for SwiftUI apps.

Apple frameworks that require disclosure

Core Location (even 'when in use' permission) means you're collecting location data. StoreKit means you're processing in-app purchases. Sign in with Apple means you're collecting account identifiers. AppTrackingTransparency requires you to declare whether you track users. Each of these maps to a category in the App Privacy questionnaire and has to be mentioned in the privacy policy.

HealthKit, HomeKit, and ResearchKit have stricter disclosure requirements because the data they touch is sensitive. If you use any of them, your policy needs explicit language about what specific health or home data you access and whether it leaves the device.

Third-party SDKs in native iOS

Even 'pure SwiftUI' apps often include Firebase, TelemetryDeck, Mixpanel, Sentry, or RevenueCat via Swift Package Manager. These all collect device identifiers or usage data and belong in the disclosed data categories. TelemetryDeck is worth calling out — it's marketed as privacy-first, but it still collects anonymized usage events that need to be disclosed under 'usage data'.

Generating and hosting the policy

Toggle on the categories your app uses in BaseTerms. The generated policy references the common Apple frameworks and third-party SDKs by category (analytics, location, accounts, ads, payments). Host the page at yourapp.baseterms.com/privacy and paste the URL into App Store Connect.

Ready to ship?

Generate your compliance pages now — FREE

Privacy Policy, Terms, Support, and Data Deletion — all 4 pages, ready to paste into App Store Connect and Google Play Console. Copy the raw Markdown free or host on a custom subdomain for $9 one-time.

Generate my compliance pages FREE

One-time payment. No subscription. No renewal fees.

Common questions

Does this cover Sign in with Apple specifically?
Yes. Toggle accounts on and the policy mentions account authentication data, including the fact that Sign in with Apple may provide a relay email.
What about CloudKit?
CloudKit stores data in the user's own iCloud account and doesn't require the same disclosure as a server-side backend. The policy can still mention it for transparency.
Do I need to disclose crash reports from Xcode/MetricKit?
MetricKit data is aggregated by Apple and typically doesn't require extra disclosure, but if you use Crashlytics or Sentry you should disclose diagnostics.
What about WidgetKit or App Intents?
They don't collect data on their own — the disclosure depends on what your widget or intent actually does with data.