Permission Policy for Data Collection and User Consent

1. User Consent for Data Collection

• Apps that collect user or usage data must secure user consent for the collection, even if such data is considered to be anonymous at the time of or immediately following collection.
• Paid functionality must not be dependent on or require a user to grant access to this data.
• Apps must provide the customer with an easily accessible and understandable way to withdraw consent.
• Ensure your purpose strings clearly and completely describe your use of the data.

2. GDPR and Similar Statutes Compliance

• Apps that collect data for a legitimate interest without consent by relying on the terms of the European Union’s General Data Protection Regulation (GDPR) or similar statutes must comply with all terms of that law.

3. Purpose Strings Requirements

• Purpose strings must clearly describe how an app uses the ability, data, or resource.
• The purpose strings must provide an example of the data's use.

Examples of Clear Purpose Strings

• "App would like to access your Contacts to help you find friends who are using this app."
• "App needs microphone access to enable voice messaging and voice commands."
• "App needs camera access to allow you to take and share photos within the app."
• "App needs access to your photo library to allow you to upload and share your photos."
• "App requires your username and password to securely log you into your account."
• "App needs access to your payment information to process your transactions."