my app was publish on CH play 1 year ago. but today I got a mail from Google Play
APK REQUIRES VALID PRIVACY POLICY
Your app is uploading users Contact list & files information without posting a privacy policy in both the designated field in the Play Developer Console and from within the Play distributed app itself.
my AndroidManifest file already defines like this, also define policy on play console like this.
enter image description here
any way to fix this
You need to do following things -
Google Play updated Privacy Policy Guidelines -
I think your app contains a Contact list & file information, So according to new policy guidelines you need to create a privacy policy URL with the information of all permission you are using in the app.
Also you need to show the Term & Policy link in-app as well with a checkbox to accept It while registration/login of a user.
You need to fill Data Safety form from App Content section in Play Console.
Related
Your app is uploading users' contact list information without posting a privacy policy in both the designated field in the Play Developer Console and from within the Play distributed app itself.
But the application have the privacy policy link within the app and also updated with the privacy policy link in pp content. Still the app is removed/rejected why? and what needs to be done?
my app got rejected from the google play store due to the following reason:
APK REQUIRES PROMINENT DISCLOSURE
Your app is uploading users' [Installed packages] information to [https://app-measurement.com/a] without a prominent disclosure. Prior to the collection and transmission, it must prominently highlight how the user data will be used, describe the type of data being collected and have the user provide affirmative consent for such use.
as I know, app-measurement.com is firebase analytics end point and we do use it, but we most definitly do not upload the users "installed packages".
my guess is that one of our 3rd party packages might be doing that, but I have no idea how to find out, and the notice I got from google does not give away any more details.
help will be much appriciated!
You need to write a privacy policy outlining what data you collect and who you share it with. You then have to add it to your store listing on the Google Play Console. In your app you will have to add a consent screen which shows the privacy policy and requires the user to press an "Accept Privacy Policy" button.
If your application comes under any of these headings you will have to submit a privacy policy notice to any user:
If your app collects personal data from users under the age of 13, you'll need to comply with COPPA or Data Protection Act etc depending on your country
If your app collects personal data from minors (under the age of 18), comply with the Content Eraser law.
If you collect personal data from students, comply with the SOPIPA law
If you are using remarketing/retargeting tracking code with Google AdWords or AdRoll or any other third-party, you'll need to update the
the Privacy Policy to inform users about this practice.
If you do fall under this, then you will have to create a policy.
to do this:
Follow these steps to add the Privacy Policy URL to your Google Play Store app listing:
Log into your Google Play Developer Console. If you don't have an account, create one first.
Select All Applications
Select the application
Click Store Listing
Go to the Privacy Policy field
Enter the URL where you host the policy. You must host the policy on your website.
Click Save
There may be multiple reasons for it. I am explaining as per my experience.
1. Check other tracks: Apart from the production track, check into other tracks as well.
i.e: Internal / Closed / Open testing track or any custom track you created. Each track must comply with the policy. In our case, there was an abandoned old Closed Testing track. I created a release for that track and it worked. Please note: We can not delete the "Internal / Closed / Open testing track". It's not fair but we have no option to delete it and we have to keep that track updated.
Google response:
2. Fix the policy issues: Your privacy policy page must clearly explain how user's each data is collected or shared by the application. Especially phone number, email, name, etc. For example, you can find the privacy policy page in the "Developer contact" section of our application.
3. Insert privacy policy: Provide proper and valid privacy policy URL in play store console.
Play store Console > Select your app > Policy and programs > App content > Privacy policy
4. Adequate prominent disclosure:
Apart from privacy policy, there should be prominent disclosure before using any of the user's data. Information should be simple, readable, and clear. For more information, have a look at Best practices for prominent disclosure and consent.
Prominent disclosure example:
:OTHER POSSIBLE REJECTION REASON:
5. Data safety:
Play store Console > Select your app > Policy and programs > App content > Data safety
Need to declare each data type collected or shared by the application.
6. Cardinal Mobile SDK usage: Application or any dependencies must use an updated version of Cardinal Mobile SDK. In our case paypal-android-checkout-sdk was using the Cardinal mobile SDK. We just updated it to the latest version.
Google response:
7. Action requested: Declare your Ad ID permission:
For more information, you can have a look at this S.O. answer.
This is my first time to upload apk on play store. Firstly, I am getting error of Privacy policy that I have use camera in my app. Later on I searched on google I got some some suggestion later on again I creating signed apk and when I going to upload apk its showing this error.
Store listing
1 task to complete before you rollout
Your app has an apk with version code 1 that requests the following permission(s): android.permission.CAMERA. Apps using these permissions in an APK are required to have a privacy policy set.
Is it possible to upload apk without upload url of Privacy policy. I used camera in my app?
Is it possible to upload apk without upload url of Privacy policy.
NO, You must Add URL on Privacy Section. It's Google's Policy.
You can host your privacy policy with any publicly accessible URL .
Read official guideline about Privacy Policy Guidance
Since February 2017 Google enforces a strict privacy policy
requirement on apps requesting sensitive permissions and user data.
There are quite a few places in the Google Play Store documentation
that points out that requirement.
What information do you share?
In your policy, you should disclose the circumstances when you share
information. For example, you may share information with third parties
as part of the service (like a restaurant reservation Action), with
other users (like a social network or forum), with marketing partners,
or with service providers that assist with your service (like hosting
companies or technology platforms).
Since you are using user's camera, google will allow you to upload apps only if you are sure you are not abusing the access to the camera.
In Play console, go to Store Presence > Store Listing > Find Privacy policy at the end of the page.
Then place the url of the page of your privacy policy and you are good to go.
No it is not possible to upload apk without upload url of Privacy policy
There is small service, can be used for fast generation of Privacy Policy in simple cases.
Google Play has notified me to publish a Privacy Policy for my app. I have created a website to host this information. I am planning to update the website link from the developer console shortly.
As per the new policy, Google is asking that we should also update our app to have a link to the privacy policy. Unfortunately I cannot do this anymore as I lost my keystore in a hard-disk crash. Is this step optional? Will Google Play allow my app to be listed with just a privacy policy website link in the Store listing, without the app itself not having the privacy policy details?
Thanks
Balaji
1) You absolutely need your privacy policy on the Play Store page PLUS within the app
This is what Google says:
If your app requests user data or makes sensitive permissions requests
such as Phone, Accounts, Contacts, Camera, or Microphone, you'll need
to add a valid privacy policy in two places: your app's Store Listing
page (instructions below) and within your app.
I'd also like to add some more insight why that is the case. If you are into privacy law theory, then I suggest you read this pdf by a Pan-European privacy body, otherwise I just suggest to read the summary here:
The essential scope of information about data processing 1) must be
available to the users before app installation, via the app store.
Secondly, the relevant information about the data processing 2) must
also be accessible from within the app, after installation.
You can see - in theory - this is absolutely requested and required and you should strive to get that done. Hope this helps. p.s. I work for a startup that helps with privacy policies. (link)
I get the following email from google play team:
Hello Google Play Developer,
Our records show that your app, XXXX , with package
name com.XXX.XXX, currently violates our User Data policy
regarding Personal and Sensitive Information.
Policy issue: Google Play requires developers to provide a valid
privacy policy when the app requests or handles sensitive user or
device information. Your app requests sensitive permissions (e.g.
camera, microphone, accounts, contacts, or phone) or user data, but
does not include a valid privacy policy.
Action required: Include a link to a valid privacy policy on your
app's Store Listing page and within your app. You can find more
information in our help center.
Alternatively, you may opt-out of this requirement by removing any
requests for sensitive permissions or user data.
If you have additional apps in your catalog, please make sure they are
compliant with our Prominent Disclosure requirements.
Please resolve this issue by March 15, 2017, or administrative action
will be taken to limit the visibility of your app, up to and including
removal from the Play Store. Thanks for helping us provide a clear and
transparent experience for Google Play users.
Regards,
The Google Play Team
What is the meaning of Valid Privacy Policy, I get away to add URL privacy policy to Store Listing from
Warning of Google Play Developer policy violation: Action Required
, but Is enough to add a link for privacy policy page on Store Listing ? Is play store accept any privacy policy URL? and how I can add valid policy to my app? because on another email from google play team, They Said I need to add a privacy policy in two places not just Store Listing:
If your app requests user data or makes sensitive permissions requests
such as Phone, Accounts, Contacts, Camera, or Microphone, you'll need
to add a valid privacy policy in two places: your app's Store Listing
page (instructions below) and within your app.
I think I'm qualified to give you a more detailed answer. I have two apps on the App Store (iOS) and I've worked on a mobile privacy policy generator for years. I'v e also recently written quite a few words about the above issue.
1) You absolutely need your privacy policy on the Play Store page PLUS within the app
This is what Google says:
If your app requests user data or makes sensitive permissions requests
such as Phone, Accounts, Contacts, Camera, or Microphone, you'll need
to add a valid privacy policy in two places: your app's Store Listing
page (instructions below) and within your app.
I'd also like to add some more insight why that is the case. If you are into privacy law theory, then I suggest you read this pdf by a Pan-European privacy body, otherwise I just suggest to read the summary here:
The essential scope of information about data processing 1) must be
available to the users before app installation, via the app store.
Secondly, the relevant information about the data processing 2) must
also be accessible from within the app, after installation.
And here is some bonus information Google doesn't talk about.
The Working Party recommends that information about personal data
processing is also available, and easy to locate, such as within the
app store 3) and preferably on the regular websites of the app
developer responsible for the app. It is unacceptable that the users
be placed in a position where they would have to search the web for
information on the app data processing policies instead of being
informed directly by the app developer or other data controller.
2) Adding a VALID privacy policy (link)
Now for the question of the vailidity of your privacy policy. You need to outline which sensitive permissions/user data you process and for what purpose.
I'm seeing a lot of advice saying that you just need to say that you access the camera but that isn't enough.
Say you access the camera
Say what purpose that serves
Say whatever else user data you process (name, email address, etc. etc)
This should help :)
Adding Privacy Policy to Web Site
Find a policy from an app. There are lots of apps that have privacy
policy in them. I, here, clearly state how
and why i use users permission and personal info.
If you have a web site put it your web site. If you don't have one
create one free from Google Sites.
Adding Privacy Policy to Application
There are 3 ways i've sen so far how it's displayed to users
Menu button on NavigationView.
Inside an AlertDialog after user accepted Runtime Permissions
Inside a section of Settings activity or fragment
You must also add Privacy Policy Url to your app as Google states. They don't check it for now, but if they do in the future, you can be sorry if you didn't. I add it to Navigation View and open url when user touches it.