ClearedToShip

Guidelines we check

These are the review rules ShipCheck looks for. A scan names the rule. The paid fix shows the change for your project.

Apple

Apple 5.1.1 Privacy

Tell people what you collect, why a sensitive permission is needed, and link a real privacy policy.

Read the official page

Apple

Apple 5.1.1(v) Account deletion

If someone can create an account, the app has to let them delete it. Sending them to a support email is not enough.

Read the official page

Apple

Apple 5.1.2 Privacy manifest

Apps that use common iOS calls need a privacy manifest. Tracking also has to be disclosed.

Read the official page

Apple

App Tracking Transparency

If you track people across apps or websites, ask before the tracking starts.

Read the official page

Apple

Apple 4.8 Sign in with Apple

If you offer Google, Facebook, or another social login for the account, you also need Sign in with Apple as an equal option.

Read the official page

Apple

Apple 3.1.1 In-App Purchase

Digital features, subscriptions, and unlocks inside the iOS app have to use In-App Purchase. A Stripe card form for those items gets rejected.

Read the official page

Apple

Apple 2.1 App completeness

The build reviewers open has to work. Placeholder text, dead links, and unfinished screens are a common reason for a 2.1 rejection.

Read the official page

Apple

Apple 4.2 Minimum functionality

The app needs a reason to exist on the phone. A thin wrapper around a website is a common 4.2 rejection.

Read the official page

Google

Play target API level

Google Play rejects new apps and updates whose target API is behind the current requirement.

Read the official page

Google

Play Data safety

The Data safety form in Play Console has to match what the app collects. Reviewers reject mismatches for email, location, photos, and advertising ID.

Read the official page

Google

Play permissions

Broad access to photos and files is limited. Declare only what the app really needs.

Read the official page

Google

Play cleartext traffic

Allowing cleartext HTTP can get the app flagged when user data is sent without HTTPS.

Read the official page