`apps/mobile/store-assets/privacy-label.md`

46 lines
# App Privacy label — GovArbitrage (draft)

App Store Connect → GovArbitrage → App Privacy. Answer these to match what the NATIVE binary
actually does (cross-checked against the code — see notes). Draft only.

## Does this app collect data? → NO
The native app collects no data for us or any third party.

### Data types collected
| Data type | Collected? | Notes |
|---|---|---|
| Everything | No | The app links no analytics/ads SDK and creates no account. |

- The only values the app persists are the **API base URL** and an optional **access
  credential**, both typed by the user in Settings and stored **encrypted on-device**
  (`expo-secure-store`). They are sent only to the user's configured server; we never receive
  them. Per Apple's definition this is not "collection" (not sent off-device to the developer
  or a third party) → declare **Data Not Collected**.

## Tracking → NONE
- **Not** used to track you. No ATT prompt required, and no `NSUserTrackingUsageDescription`
  is (or should be) added.
- Cross-check / evidence: no analytics or ad SDK appears in `package.json` or the source; all
  network calls are plain `fetch()` to the user's configured `/api/*` endpoints
  (`lib/api.ts`). There is no WebView (so no third-party script surface either).

## Data NOT collected (declare "Not Collected")
- Location, Contacts, Health, Financial info, Browsing history, Search history,
  Identifiers (IDFA), Usage Data, Diagnostics, Photos, Audio, User Content.

## Account deletion (Guideline 5.1.1(v)) — N/A
- The app creates **no user account**. The Settings "credentials" field is an optional API
  auth value for the user's own server, stored on-device — there is no account to delete.
  Do not describe the app as having "accounts" in the listing/review notes.

## No permissions requested
- The app touches no camera, location, photos, contacts, microphone, notifications, or
  tracking APIs — so there are NO `NS*UsageDescription` strings to add (a common binary
  rejection). This is a genuinely low-permission app.

## Reviewer note (for the App Review "Notes" field)
"Native app over the auctions.agentabrams.com JSON API — not a web wrapper, no WebView. Opens
with real data against the default server; no sign-in needed. The app does no ad/analytics
tracking and has no in-app purchase. The Settings credential field is an optional API auth
value for the user's own server, stored encrypted on-device."