iOS Privacy Guidelines for BitLabs SDK Integration

This document outlines the key privacy considerations and requirements when integrating the BitLabs iOS SDK, particularly in relation to Apple’s privacy framework and App Store submission requirements.

1. App Tracking Transparency (ATT)

If your app uses the BitLabs SDK in a way that accesses the Identifier for Advertisers (IDFA), you must comply with Apple’s App Tracking Transparency framework.

When is this required?

You need to request user permission if:

  • You access the IDFA
  • You perform any tracking across apps or websites owned by other companies

Required Declaration

You must include the NSUserTrackingUsageDescription key in your app’s Info.plist.

This key should clearly explain:

  • Why you are requesting tracking permission
  • How the data will be used

Optional SDK Support

The BitLabs SDK provides a helper function to request tracking authorization:

  • requestTrackingAuthorisation

If you choose to use this function, you are responsible for:

  • Triggering the permission prompt at an appropriate time
  • Ensuring compliance with Apple’s ATT policies

For more details, refer to Apple’s App Tracking Transparency documentation.

2. App Store Connect – App Privacy Disclosures

When submitting your app, Apple requires you to declare how user data is collected and used. You should review whether your existing privacy disclosures cover the following data types used by the BitLabs SDK:

Potentially Collected Data

  • User ID

    • A unique identifier used to associate activity within the BitLabs platform
  • Device ID (IDFA)

    • Only applicable if the user has granted tracking permission via ATT
  • Diagnostics

    • Includes technical data used for debugging and improving SDK performance

Action Required

Ensure that:

  • These data types are accurately reflected in your App Store Connect privacy questionnaire
  • Your app’s privacy policy clearly explains how this data is used

3. Privacy Manifest (SDK Privacy Report)

Apple may require SDKs to include a Privacy Manifest file if they depend on certain third-party SDKs.

BitLabs SDK Status

  • The BitLabs iOS SDK does not require a Privacy Manifest

Action Required

  • No additional configuration is needed for Privacy Manifests when using the BitLabs SDK

4. Summary Checklist

Before submitting your app, ensure the following:

  • NSUserTrackingUsageDescription is added (if using IDFA)
  • ATT permission flow is implemented correctly (if applicable)
  • App Privacy disclosures include:
    • User ID
    • Device ID (IDFA, if consented)
    • Diagnostics
  • Privacy policy is updated accordingly
  • No Privacy Manifest file is required

If you are unsure whether your implementation requires ATT or specific disclosures, review your SDK usage and consult Apple’s latest privacy guidelines before submission.