Do Mac apps outside the App Store need a privacy policy?

Apple does not review them, but if your app collects personal data, privacy laws such as the GDPR or CalOPPA may still require a notice. This is not legal advice.

Is the Mac App Store rule the same as iOS?

Yes, Guideline 5.1.1 applies to all apps on the App Store, including macOS apps.

Apple App Store · Platform guide

Privacy policy for Mac apps (Mac App Store and direct download)

Mac App Store apps follow Apple’s App Review Guidelines, so Guideline 5.1.1(i) applies: a privacy policy link in App Store Connect and inside the app. Apps distributed outside the store are not reviewed under these guidelines, but if they collect personal data, privacy laws such as the GDPR still expect a clear notice.

§ 1

What Apple App Store requires

App Review Guideline 5.1.1(i) — Privacy Policies

“All apps must include a link to their privacy policy in the App Store Connect metadata field and within the app in an easily accessible manner.”

Source: developer.apple.com verified 2026-10-30

1.1App Privacy answers include third-party code. Apple asks for “information about your app’s privacy practices, including the practices of third-party partners whose code you integrate into your app, in App Store Connect.” Your privacy policy and these answers should describe the same data. Source: developer.apple.com

1.2Mac App Store extras (Guideline 2.4.5). Apple: “Apps distributed via the Mac App Store have some additional requirements to keep in mind”, including sandboxing. Data your app reads from other apps should be described in your policy. Source: developer.apple.com

1.3Required in App Store Connect. App Store Connect: “A privacy policy URL is required for all apps, while a user privacy choices URL is optional.” Source: developer.apple.com

1.4Direct download: GDPR transparency. If you sell or distribute outside the store to people in the EU, GDPR Article 13 lists the information you must give when you collect personal data, such as your identity, purposes and retention period. Source: gdpr-info.eu

§ 2

What common SDKs collect

SDK / API	Data it collects	Source
Firebase Crashlytics	Crashlytics installation UUIDs Firebase installation IDs Crash traces	Source: firebase.google.com
Sparkle (update framework)	Optional anonymous system profile: macOS version, CPU type, Mac model Sent only if you add SUEnableSystemProfiling to Info.plist	Source: sparkle-project.org

Everything in this table must appear in your policy if the SDK ships in your build.

§ 3

Where to put the URL

3.1App Store Connect → your macOS app → App Privacy → Privacy Policy URL.
3.2Inside the app: Help or About menu item that opens the policy.
3.3Direct download: link it on your download page and in the app’s Help menu.

Source: developer.apple.com

§ 4

Sample clause

§ 4.1 · Update checks

Our app checks for updates on launch. The check sends the app version to our update server. We do not send a system profile unless you opt in under Preferences → Updates.

Illustrative wording. Your generated policy is written from your own answers.

§ 5

Questions

Do Mac apps outside the App Store need a privacy policy?: Apple does not review them, but if your app collects personal data, privacy laws such as the GDPR or CalOPPA may still require a notice. This is not legal advice.
Is the Mac App Store rule the same as iOS?: Yes, Guideline 5.1.1 applies to all apps on the App Store, including macOS apps.