Apple App Store Review Guidelines

Apps must not include content that is offensive, insensitive, upsetting, intended to disgust, in exceptionally poor taste, or simply creepy. Examples include content that is defamatory, discriminatory, or mean-spirited, as well as realistic depictions of violence toward people or animals. Apps that present excessively objectionable content may be rejected even if they include content filtering.

Apps with user-generated content must include methods for filtering objectionable material, a mechanism for users to flag offensive content, the ability to block abusive users, and published contact information for reporting concerns. Apps that facilitate anonymous posting of user-generated content must also implement appropriate moderation and reporting mechanisms to maintain a safe environment.

Apps in the Kids category must comply with applicable children's privacy laws such as COPPA, must not include third-party advertising or analytics, and must not transmit data to third parties. These apps must obtain verifiable parental consent before collecting personal information from children. Apps must be appropriate for the target age range within the Kids category.

Apps that could result in physical harm to users must implement appropriate safeguards and warnings. Medical apps that could provide inaccurate data or information must include clear disclaimers. Apps controlling medical devices must comply with applicable regulatory requirements. Apps that encourage excessive consumption of alcohol or drugs, or facilitate illegal drug purchases, will be rejected.

Developers must provide accurate contact information in their app and App Store Connect profile, including a valid email address and website. This information must be kept up to date. Apps from developer accounts associated with fraudulent or misleading activity may be removed, and the developer account may be terminated.

Apps must implement appropriate security measures to protect user data from unauthorized access, use, or disclosure. Apps that handle sensitive user data such as health, financial, or location information must use encryption and secure network protocols. Apps must comply with Apple's data security requirements and industry best practices for data protection.

Submissions must be final versions of apps, not beta versions or works in progress. Apps must include all necessary URLs, valid demo accounts for features requiring login, and any backend services must be live and accessible during review. Apps that crash, exhibit bugs, or are clearly not finished will be rejected.

Beta testing must be conducted through TestFlight, Apple's official beta testing platform, not through the App Store. Apps distributed through TestFlight should not be used as an alternative distribution mechanism to avoid App Store review. Demo versions, trial versions, and test builds should not be submitted to the App Store.

App metadata including the name, description, screenshots, and previews must accurately reflect the app's content and functionality. Misleading metadata, irrelevant keywords, hidden or undocumented features, and inflated or fake ratings will result in rejection. Screenshots must show the app in use and must not include images that do not reflect the actual user experience.

Apps must be compatible with the hardware and software versions specified in the app's requirements. Apps should be optimized for the devices they support and must not artificially restrict compatibility to exclude devices that could run the app. Universal apps should provide a quality experience across all supported device types.

Apps must use public APIs and must not use private or undocumented APIs. Apps must be self-contained and must not install or launch other executable code by any means. Apps that download code or scripts in ways that change the app's primary purpose or functionality are not permitted. Apps must be built with the current version of Apple's development tools.

Apps that offer digital content, subscriptions, or functionality unlocks must use Apple's In-App Purchase (IAP) system for transactions. Developers may not direct users to external payment mechanisms for digital goods and services offered within the app. Physical goods and services, as well as content consumed outside the app, may use external payment methods. Apple collects a commission on IAP transactions, with rates varying by program eligibility.

Apps must clearly describe their business model and pricing before users commit to purchasing. Free apps must not require payment to unlock core functionality without clearly disclosing this upfront. Subscription apps must clearly explain the billing terms, provide a free trial where applicable, and allow easy cancellation. Apps must not use bait-and-switch tactics or misleading pricing strategies.

Apps must be original and must not simply copy another app's interface, functionality, or content. Apps that are substantially similar to existing apps, or that merely duplicate the functionality of a built-in Apple app without adding significant value, may be rejected. Developers should bring unique ideas, features, or perspectives to the App Store rather than cloning successful apps.

Apps must provide a minimum level of functionality and user value. Apps that are essentially websites wrapped in a native app shell, display only static content without interactivity, or serve as simple marketing materials will be rejected. Apps should take advantage of the unique capabilities of the platform and provide functionality that justifies their existence as a standalone application.

Developers must not submit multiple versions of similar apps, flood categories with near-identical apps, or create apps that are essentially the same with minor cosmetic differences. Apps generated by commercialized templates or app-generation services that submit generic apps on behalf of individual clients may be rejected. Each app should provide a distinct and valuable experience.

Apps must include a privacy policy that clearly explains what data is collected, how it is used, when it is shared, and how users can request deletion of their data. Apps must request user permission before accessing personal data including location, contacts, photos, camera, microphone, and health data. Apps must comply with Apple's App Tracking Transparency framework and provide accurate privacy nutrition labels.

Apps must not infringe on third-party intellectual property rights including copyrights, trademarks, patents, and trade secrets. Developers must ensure they have proper authorization to use all content, images, music, and other creative materials included in their apps. Apps that facilitate piracy of copyrighted content or enable unauthorized distribution of intellectual property will be rejected.

Apps that offer real-money gambling, lotteries, or contests must comply with all applicable laws and must be geo-restricted to jurisdictions where such activities are legal. These apps must be free to download, and developers must have all necessary licenses and permits. Apps that simulate gambling without real-money transactions must be rated appropriately and must not target minors.