Privacy policy linked in app metadata or UI

GDPR Art. 13, CCPA §1798.100, and COPPA §312.4 all require that a privacy policy be provided to users before or at the time of data collection. Apple's App Store Review Guidelines (5.1.1) mandate a privacy policy URL in app metadata for any app that collects user or device data — apps without one are rejected at review. Google Play similarly requires a privacy policy link in the store listing for apps with any data collection. A placeholder URL (e.g., https://example.com/privacy) satisfies neither the legal disclosure requirement nor the app store technical requirement — reviewers check that the URL resolves to actual policy content. COPPA additionally requires specific disclosures when an app may be used by children under 13.

Add a real privacy policy URL to app.json and link to it from your Settings screen. The URL must resolve to actual policy content, not a placeholder or 404.

{
  "expo": {
    "privacy": "https://yourapp.com/privacy"
  }
}

// In your Settings or About screen
import { Linking } from 'react-native'

function LegalLinks() {
  return (
    <Pressable onPress={() => Linking.openURL('https://yourapp.com/privacy')}>
      <Text>Privacy Policy</Text>
    </Pressable>
  )
}

For COPPA compliance, the policy must explicitly state whether the app is directed at children and how parental consent is obtained. For GDPR, it must identify the data controller, legal basis for processing, and the user's rights under Arts. 15–22.