Privacy policy, support and account deletion URLs for app stores

Both app stores ask for web pages before an app can go live: a privacy policy, a way to reach you, and, if the app has accounts, a way to delete one. The fields are easy to fill and easy to get wrong, because the store does not just want a URL; it wants a page that answers specific questions. This guide lists what each store asks for, what a good page says, and the mistakes that lead to a rejection or a policy warning.

Store rules below were checked November 9, 2026 on Apple's App Review Guidelines and App Store Connect help, and on Google's Play Console help pages for the User Data policy, account deletion and the Data safety form. Rules change, so read the current page before you submit. This is a practical guide, not legal advice.

What each store asks for

Page	App Store Connect	Google Play Console
Privacy policy	Privacy Policy URL in App Information, required for iOS and macOS apps; also a link inside the app	Privacy policy link in App content, required for all apps; also a link or the text inside the app
Support	Support URL, required, per version and per language	A contact email is required in Store settings; a website is optional but recommended
Account deletion	Deletion must be offered inside the app; a link straight to a web page is allowed when the last step is on the web	Apps that let people create an account need an in app path and a web link where people can request deletion, declared in the Data safety form
Data declarations	App Privacy questions in App Store Connect, required for apps on the App Store	Data safety form in App content, required even when the app collects no data

Apple, in detail (checked November 9, 2026)

Privacy policy

Guideline 5.1.1 (i) says all apps must link to their privacy policy in the App Store Connect metadata field and within the app in an easily accessible manner. The policy must identify what data the app collects, how, and all uses of it; confirm that third parties the app shares data with, such as analytics tools, ad networks and third party SDKs, give the same or equal protection; and explain retention and deletion and how a person can revoke consent or request deletion.

Support URL

App Store Connect help lists the Support URL as required. It must lead to actual contact information so people can reach you about issues, feedback and feature requests. Guideline 1.5 adds that the app and its Support URL should include an easy way to contact you.

Account deletion

Guideline 5.1.1 (v) says that if your app supports account creation, you must also offer account deletion within the app. Apple's account deletion page adds that only offering to deactivate an account is not enough, and that if people need a website to finish, the app should link directly to the page where they complete it. A manual process is acceptable if you tell people how long it takes and confirm when it is done.

Google Play, in detail (checked November 9, 2026)

Privacy policy

Google's User Data policy says all apps must post a privacy policy link in the designated field in Play Console, and a link or the text inside the app, even apps that access no personal data. The page must be on an active, publicly accessible and non-geofenced URL, not a PDF, and must not be editable. It must name the developer or the app as shown on the listing, give a privacy contact, list the data accessed, collected, used and shared, describe secure handling, and state the retention and deletion policy.

Account deletion URL

If your app lets people create an account, Google asks for an in app path to delete the account and its data, and a web link where people can request deletion. The link must load without errors and make the deletion request easy to find on the page. You declare it in the Data safety questions on the App content page. Some data may be kept for reasons such as security, fraud prevention or regulatory rules, and the page should say which.

Data safety form

Every app published on Google Play, including closed, open and production testing tracks, must complete the Data safety form, and a privacy policy is needed to complete it. Apps only on the internal testing track are exempt.

What a good page says

Privacy policy

• Who you are: the developer or company name as it appears on the store listing, and the app name.
• What the app collects, in plain words, and why. Match it to what the build actually asks for: if it requests location or contacts, the policy should say so.
• Which other companies' services receive data: analytics, crash reporting, ads, payments, push.
• How long data is kept and how a person asks for it to be deleted.
• A contact address that someone reads.

Support page

A real email address or form, how soon you answer, and a few answers to common questions. A support URL that points at a home page with no contact details does not meet Apple's rule that it lead to actual contact information.

Account deletion page

The app name, the steps to delete the account in the app, a way to ask by email or form without the app, what is deleted, what is kept and why, and how many days it takes.

Common reasons pages get flagged

• The URL does not load, redirects to a login page, or is blocked in some countries.
• The privacy policy is a PDF, or a generic template that does not name the app or the developer.
• The policy says the app collects nothing while the build asks for location, contacts or the camera, or ships an analytics or ads SDK.
• The data safety or app privacy answers do not match the policy.
• The support page has no contact details.
• The deletion page only explains how to deactivate, or hides the request below unrelated content.

For the rest of a first submission, see our App Store submission checklist and common App Store rejection reasons.

How AppForShare store pages help

AppForShare store pages give each connected App Store or Google Play app a privacy policy, a support page and an account deletion page, written from your answers and your build. On Pro they cover one app; on Team they cover every app and can sit on your custom domain.

• You fill a short form: developer, contact email, the kinds of data collected and why, other companies' services, retention, children under 13, deletion steps and what is kept.
• The form starts from your newest build: permissions in plain words, the app's own iOS usage reasons and about 25 recognised SDKs such as Firebase, AdMob and Sentry, so the policy starts from what the app really asks for. Android permissions in plain English explains those words.
• An AI draft of the privacy text costs 1 AI action and is labeled a draft to review with your own advisor. Nothing is published until an Owner or Admin presses Publish.
• In the listing editor, "Use my store pages" fills the support and privacy policy URLs for every App Store language. For Google Play it fills the Website field and shows the privacy and deletion addresses to paste into App content, because the Play API does not set those.

The pages are not legal advice, they do not make an app compliant with any law, and no page can promise that a store will accept your app. They are generated pages only; you cannot upload your own HTML. If your plan stops covering a page, it stays up 30 days and you get an email with the date.

Common questions

Does every iPhone app need a privacy policy URL?

Yes. App Store Connect lists the Privacy Policy URL as required for iOS and macOS apps, and guideline 5.1.1 (i) asks for a link inside the app too (checked November 9, 2026).

My app has no accounts. Do I need an account deletion URL on Google Play?

Google's account deletion rule applies to apps that let people create an account. You still need a privacy policy and the Data safety form.

Can I use a PDF for my privacy policy?

Not on Google Play: its User Data policy asks for a publicly accessible web page, not a PDF. A web page is the safe choice for both stores.

Can the support URL be my home page?

Only if that page has real contact information. Apple asks that the Support URL lead to a way to reach you.

If you would rather start these pages from your build than from a blank template, you can make an AppForShare account, upload the build and try store pages on Pro.