Apple App Store · Platform guide

Privacy policy for apps using Sign in with Apple

If your app uses Sign in with Apple, your privacy policy should say you receive a name and an email that may be an Apple private relay address, and explain how users delete their account. Apple’s Guideline 5.1.1(v) says apps that support account creation must also offer account deletion within the app.

§ 1

What Apple App Store requires

App Review Guideline 5.1.1(v) — Account Sign-In

“If your app supports account creation, you must also offer account deletion within the app”

Source: developer.apple.com verified 2026-10-30

1.1Guideline 4.8 Login Services. Apps that use a third-party login for the primary account must also offer an equivalent option where “the login service limits data collection to the user’s name and email address” and “allows users to keep their email address private”. Source: developer.apple.com
1.2The policy link itself. “All apps must include a link to their privacy policy in the App Store Connect metadata field and within the app in an easily accessible manner.” Source: developer.apple.com
1.3Offering account deletion. Apple’s account-deletion FAQ: “Apps that support Sign in with Apple should use the Sign in with Apple REST API to revoke user tokens”. Describe the same deletion steps in your policy. Source: developer.apple.com
§ 2

What common SDKs collect

SDK / APIData it collectsSource
Sign in with Apple
  • Name and email address (Guideline 4.8 describes a login that limits collection to these)
  • Email can be kept private by the user
Source: developer.apple.com

Everything in this table must appear in your policy if the SDK ships in your build.

§ 3

Where to put the URL

  1. 3.1App Store Connect → App Privacy → Privacy Policy URL.
  2. 3.2On the sign-in screen and in Settings, next to Delete account.
§ 4

Sample clause

§ 4.1 · Sign in with Apple

If you sign in with Apple, we receive your name if you choose to share it, a unique user ID, and an email address. If you choose Hide My Email, the address is a private relay address that forwards to you. You can delete your account at any time in Settings → Delete account.

Illustrative wording. Your generated policy is written from your own answers.
§ 5

Questions

Do I need account deletion if I use Sign in with Apple?
If your app supports account creation, Guideline 5.1.1(v) says you must also offer account deletion within the app, whichever login you use.
What is Hide My Email?
An option that gives your app a unique relay address that forwards to the user’s real inbox. Your policy should mention you may receive such an address.