Data Collection and Storage

5.1.1 is about trust and transparency. AI-generated apps often ship with default permission strings and no account deletion, which are the two usual triggers.

What it means

Problems with how you collect or explain data: missing privacy policy, vague permission prompts, or no way to delete an account.

Common causes

• Permission usage strings that are vague ('needs camera')
• Account creation without in-app account deletion
• Privacy policy missing, or not matching what the app does

How to fix it

1. 1.Rewrite every permission purpose string to say what is accessed and why, in plain English.
2. 2.Remove permissions you don't use.
3. 3.If users can create an account, add in-app account deletion.
4. 4.Make sure the privacy policy URL works and matches your App Privacy answers.
5. 5.Only ask for data you need for the feature in use.

Usually 1 to 2 rounds to fix. Rewording alone works sometimes. Purpose strings and policy links need real changes; the reply explains them.

What to write to App Review

Keep it short, factual and specific. Edit the brackets to match your build.

Hello,

We updated the permission descriptions to explain each use, removed unused permissions, and added in-app account deletion under [Settings > Account]. The privacy policy is at [URL].

Thank you.

Independent developer, not affiliated with Apple. Guidelines change, so check Apple's current App Review Guidelines.