Guides
App Review and privacy label
The Swift SDK is built to pass App Review without special explanations: no tracking, no IDFA, no fingerprinting, no clipboard reads without a tap, and no third-party dependencies.
What the privacy manifest declares
The package ships PrivacyInfo.xcprivacy. Xcode merges it into your app’s privacy report.
| Key | Value |
|---|---|
NSPrivacyTracking |
false |
NSPrivacyTrackingDomains |
none |
| Purchase history | appTransactionId and redeemed creator codes. Linked to the user; not tracking; app functionality and analytics |
| User ID | Your user ID, the RevenueCat app user ID and a random install ID. Linked; not tracking; app functionality and analytics |
| Product interaction | App opens with the opening link’s click ID. Linked; not tracking; analytics |
| Required-reason APIs | none |
The install ID is a random UUID the SDK creates; it is not derived from the device.
Answering App Privacy in App Store Connect
Add these to your existing answers (your own data collection may add more):
- Purchases → Purchase History: collected, linked to the user, not used for tracking. Purposes: App Functionality, Analytics.
- Identifiers → User ID: collected, linked, not used for tracking. Purposes: App Functionality, Analytics.
- Usage Data → Product Interaction: collected, linked, not used for tracking. Purpose: Analytics.
Proofline does not collect device IDs, location, contacts or browsing history, and does not use data for third-party advertising.
App Tracking Transparency
You don’t need to show the ATT prompt for Proofline. Nothing it does links your users’ data with other companies’ apps or websites for advertising, and it never reads the IDFA.
The paste button
PasteCodeButton wraps Apple’s UIPasteControl (iOS 16+). The system shows the control; your app
receives the clipboard only when the user taps it, so there is no paste permission prompt. On iOS
15 it falls back to a code field.
If App Review asks
A short answer you can adapt:
The Proofline SDK attributes in-app purchases to the creator whose code or link the user used.
It does not track users across apps or websites, does not access the advertising identifier,
and does not fingerprint the device. Codes are entered by the user or redeemed through Apple's
offer codes. See the SDK's privacy manifest (NSPrivacyTracking = false).
Not supported
Apps in the Kids category aren’t supported in v1, because Apple restricts third-party analytics there.