This document combines Apple App Store Review Guidelines, Google Play Developer Policy, and additional hidden considerations into one master checklist with examples.
- Objectionable Content – No offensive, violent, or hateful content.
Example: A chat app must block hate speech. - User-Generated Content – Apps must include reporting/blocking.
Example: A forum must allow users to report abusive posts. - Kids Category – No ads, links, or IAP without parental gate.
Example: A kids drawing app must disable external links unless behind parental lock. - Data Security – Encrypt personal data, use HTTPS.
Example: Login APIs must use TLS.
- App Completeness – No placeholders or “test” screens.
Example: Submit full production build, not demo screens. - No Beta Builds – TestFlight not allowed for review.
- Metadata Accuracy – Screenshots must reflect actual app.
- In-App Purchases – All digital content uses IAP.
Example: Buying coins must go through Apple IAP. - Loot Box Disclosure – Games must display odds.
- No Copycats – Don’t mimic other apps.
Example: A fake “Netflix Player” will be rejected. - Minimum Functionality – Must be more than a webview.
- Push Notifications – Cannot be used for ads/spam.
- Privacy Policy – Must be included in metadata & app.
- Purpose Strings – Explain why camera/mic/location are needed.
Example: “Camera used to scan QR codes.” - IP Rights – Don’t use copyrighted music/images without license.
- Policy: No explicit, violent, or hateful material.
Example: Meditation app must not show violent ads.
- Apps must respect copyright/trademarks.
Example: A music app can’t stream copyrighted songs without license.
- Must disclose data use & avoid deceptive behavior.
Example: A flashlight app can’t secretly collect contacts.
- No hidden miners, trojans, or exploits.
- Ads must be kid-safe, not deceptive.
Example: A kids’ game can’t show gambling ads.
- Metadata must be honest & accurate.
Example: Don’t advertise “Free” if everything is locked.
- Apps must provide value, no spammy clones.
- Don’t mimic popular apps.
- Must include moderation/reporting features.
- Real money gambling requires licenses & regional compliance.
- Apps for kids must follow Designed for Families & limit ads/data collection.
- Repeated violations → account termination.
- Must use official badges for App Store / Google Play.
- Cannot redesign logos or use standalone Apple/Google symbols.
- ✅ Correct: “Download on the App Store” badge from Apple.
- ❌ Wrong: Just using the Apple logo.
- Export Compliance required for encryption apps.
- GDPR/CCPA: Must handle EU/California data rights.
- Accessibility: Support VoiceOver (iOS) / TalkBack (Android).
- App Size Limits – Apple has OTA size constraints.
- 64-bit Support mandatory.
- Target SDK – Google requires updated Android API targeting.
- No Keyword Stuffing in titles.
- Onboarding – Don’t block app without sign-up unless essential.
- Dark Mode recommended.
- Frequent Updates – Inactive apps may be removed.
- Crash Fixes – Critical bugs must be patched quickly.
- Reviews – Must use official in-app review APIs.
- Screenshots – Must reflect actual UI, not concept mockups.
- No incentivized ratings allowed.
✅ Use this document as a master pre-submission checklist for both platforms.