Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

iOS privacy manifest required #1909

Open
stuartmorgan opened this issue Dec 7, 2023 · 29 comments
Open

iOS privacy manifest required #1909

stuartmorgan opened this issue Dec 7, 2023 · 29 comments
Labels
bug Something isn't working

Comments

@stuartmorgan
Copy link

This plugin is listed on https://developer.apple.com/support/third-party-SDK-requirements/ as requiring a privacy manifest. Some action will be required, either to clarify with Apple whether this plugin should be on the list, or to add a privacy manifest.

See flutter/flutter#131940 for context.

@stuartmorgan stuartmorgan added the bug Something isn't working label Dec 7, 2023
Copy link

github-actions bot commented Dec 7, 2023

👋 @stuartmorgan

NOTE: This comment is auto-generated.

Are you sure you have already searched for the same problem?

Some people open new issues but they didn't search for something similar or for the same issue. Please, search for it using the GitHub issue search box or on the official inappwebview.dev website, or, also, using Google, StackOverflow, etc. before posting a new one. You may already find an answer to your problem!

If this is really a new issue, then thank you for raising it. I will investigate it and get back to you as soon as possible. Please, make sure you have given me as much context as possible! Also, if you didn't already, post a code example that can replicate this issue.

In the meantime, you can already search for some possible solutions online! Because this plugin uses native WebView, you can search online for the same issue adding android WebView [MY ERROR HERE] or ios WKWebView [MY ERROR HERE] keywords.

Following these steps can save you, me, and other people a lot of time, thanks!

@pichillilorenzo
Copy link
Owner

pichillilorenzo commented Dec 7, 2023

Apple sent me an email about that a while ago but I didn’t understand what I needed to do.
As you say in this comment about webview_flutter flutter/flutter#131940 (comment), this plugin doesn’t collect any kind of data per se.
This is a plugin that offers a lot of features that could be used by other Flutter developers, but in that case this plugin is not responsible of what the developers is doing, as the developer could do the same also using native WKWebView API.

Have you figured it out? Do you have any advice? Thanks!

@stuartmorgan
Copy link
Author

We don't currently have any more information than what is in the issue; we'll update as we learn more, but are also encouraging anyone who was contacted directly to reach out. Have you replied to Apple to explain your usage and ask what the expectation is for your use case?

@pichillilorenzo
Copy link
Owner

Ok thanks a lot! Not yet but I’m replying to them right now to ask more about it! I will let you know if I have any news 👍

@ShuheiSuzuki-07
Copy link

@pichillilorenzo

Nice to meet you, I have always been a fan of this plugin. Thank you very much.

This plugin uses OrderedSet, and OrderedSet seems to be included in the list that needs to be addressed.
https://developer.apple.com/support/third-party-SDK-requirements/

After the PrivacyManifest support is completed on the OrderedSet side, do we need to incorporate it into flutter_inappwebview as well?
If so, please let me know.

Please let me know if my understanding is incorrect.

I have created an issue on OrderedSet. I would like to create a PR if I have time...
Weebly/OrderedSet#41

@ueman
Copy link
Contributor

ueman commented Jan 9, 2024

In flutter/flutter#131940 (comment) it states, that plugins that do not collect data should include an empty privacy manifest. I'm assuming that holds true here too.

@pichillilorenzo
Copy link
Owner

@ueman yes, I think it should be that.
Did the Flutter team already made an example for their plugins?

@ueman
Copy link
Contributor

ueman commented Jan 9, 2024

Yes, see flutter/packages#5846

@pichillilorenzo
Copy link
Owner

pichillilorenzo commented Jan 9, 2024

Thanks, I will look at that as soon as possible 👍

@RMatushkin
Copy link

@pichillilorenzo Is there really a pressing need to use the OrderedSet plugin?

@percival888
Copy link

hello, the deadline is approaching, Is there any new development?

@phuc-tranh-otsv
Copy link

Hi @pichillilorenzo any update from your side for this issue? thank you for your time.

@ryukukimura
Copy link

Hello, @pichillilorenzo I hope you're doing well. Any updates? Thanks for your great work on this project!

@Samo8
Copy link

Samo8 commented Apr 19, 2024

OrderedSet just released new version with PrivacyInfo, so the version of dependency could be raised also

@ShuheiSuzuki-07
Copy link

ShuheiSuzuki-07 commented May 9, 2024

Will this actually be rejected by Apple in the review process if it is not addressed?
Please let me know if you have any actual experience.

@stuartmorgan
Copy link
Author

Will this actually be rejected by Apple in the review process if it is not addressed?
Please let me know if you have any actual experience.

Individual experience on this is likely to vary:

  • Anyone building their Pod dependencies statically won't have issues, because this plugin and OrderedSet won't appear as frameworks in the final binary in that case.
  • In this update there is new language about the enforcement saying that it applies to "new or updated apps that have a newly added third-party SDK", so it doesn't sound like anyone already shipping an app using this plugin would be affected.

(It's also not actually clear that the plugin currently needs a privacy manifest, or if just updating the OrderedSet dependency will be enough. https://developer.apple.com/support/third-party-SDK-requirements/ lists flutter_inappwebview, not flutter_inappwebview_ios, whereas for most other plugins with a federated iOS implementation it is the implementation package that is listed. Given that, it's possible that only older versions of the plugin with the iOS implementation inline would currently trip the validation check, since for a build with a current version there would never be a flutter_inappwebview.framework in the build.)

@rs-huannd1
Copy link

Has this issue been resolved yet?

@phuc-tranh-otsv
Copy link

phuc-tranh-otsv commented Aug 28, 2024

Thus far, my product has been successfully released without any rejections or further requirements from App Store Connect related to add iOS privacy manifest for flutter_inappwebview package. We can address this issue only if it becomes relevant during the review process or if App Store Connect requests changes.

@rs-huannd1
Copy link

rs-huannd1 commented Aug 28, 2024

@phuc-tranh-otsv phu
I meet an issue about the 'Missing privacy manifest' of flutter_inappwebview

App Store Connect
 
Hello,
We noticed one or more issues with a recent submission for App Store review for the following app:
'App Name'
Version 2.2.24
Build 216
Although submission for App Store review was successful, you may want to correct the following issues in your next submission for App Store review. Once you've corrected the issues, upload a new binary to App Store Connect.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseAuth.framework/FirebaseAuth”, which includes FirebaseAuth, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCore.framework/FirebaseCore”, which includes FirebaseCore, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCrashlytics.framework/FirebaseCrashlytics”, which includes FirebaseCrashlytics, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseDynamicLinks.framework/FirebaseDynamicLinks”, which includes FirebaseDynamicLinks, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseMessaging.framework/FirebaseMessaging”, which includes FirebaseMessaging, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/Flutter.framework/Flutter”, which includes Flutter, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/OrderedSet.framework/OrderedSet”, which includes OrderedSet, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/connectivity_plus.framework/connectivity_plus”, which includes connectivity_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/device_info_plus.framework/device_info_plus”, which includes device_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/file_picker.framework/file_picker”, which includes file_picker, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_inappwebview.framework/flutter_inappwebview”, which includes flutter_inappwebview, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_local_notifications.framework/flutter_local_notifications”, which includes flutter_local_notifications, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/nanopb.framework/nanopb”, which includes nanopb, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info.framework/package_info”, which includes package_info, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info_plus.framework/package_info_plus”, which includes package_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/share_plus.framework/share_plus”, which includes share_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/video_player_avfoundation.framework/video_player_avfoundation”, which includes video_player_avfoundation, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/wakelock_plus.framework/wakelock_plus”, which includes wakelock, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
Apple Developer Relations

Thank you. Have a nice day!

@thisisjaymehta
Copy link

I believe it is relevant, or at least it will be after November 24th. This is the email I received from Apple following the submission of my app that utilizes flutter_inappwebview.

image

@phuc-tranh-otsv
Copy link

phuc-tranh-otsv commented Aug 29, 2024

Good day @rs-huannd1 @thisisjaymehta,

From my experience, I think you can follow these step to fix this issue:

  • Step 1: Upgrade Flutter SDK to 3.24 to get support from flutter sdk to fix issue: Your app includes “Frameworks/Flutter.framework/Flutter”, which includes Flutter
  • Step 2: Upgrade version of all dependencies in your pubspec.yaml
  • Step 3: In iOS project, create PrivacyInfo.xcprivacy

For @thisisjaymehta , Your image doesn't inform about the flutter_inappwebview. Please check the ordered_set pub. You can fork it. Update privacy manifest for fork repo and use fork repo in your project if owner have no idea.

I hope my comment can help you to fix your problems.

@stuartmorgan
Copy link
Author

Your image doesn't inform about the flutter_inappwebview. Please check the ordered_set pub. You can fork it.

@phuc-tranh-otsv The ordered_set package isn't a plugin, and is unrelated. The issue is the OrderedSet pod, and specifically the fact that flutter_inappwebview depends on an old version of it that doesn't have a privacy manifest.

@phuc-tranh-otsv
Copy link

phuc-tranh-otsv commented Aug 29, 2024

Hi @stuartmorgan,
Thank for your comment. I think we should open issue for OrderedSet before. Because the flutter_inappwebview depend it. If OrderedSet no yet upgrade they version for privacy manifest, we still stuck here.
But in my app, I use the flutter_inappwebview: 6.0.0 still pass the review privacy manifest. I think you should follow my previous comment and re-submit your app for review to check my solution work or not work for you.

FYI: https://apnspush.com/privacy-manifest-sdks
Issue raised on OrderedSet: Weebly/OrderedSet#41
OrderedSet release new version https://github.com/Weebly/OrderedSet/releases/tag/v6.0.2 to add privacy manifest.
You can fork flutter_inappwebview & update OrderedSet on pod to 6.0.2 and create pull request or use fork repo instead.

@phuc-tranh-otsv
Copy link

The PR upgrade OrderedSet to 6.0.3 still open.
#2161

@ShuheiSuzuki-07
Copy link

ShuheiSuzuki-07 commented Aug 29, 2024

As noted in the comment above, this "may" not affect apps already published to the store using flutter_inappwebview, but this is just speculation.

Will this actually be rejected by Apple in the review process if it is not addressed?
Please let me know if you have any actual experience.

Individual experience on this is likely to vary:

  • Anyone building their Pod dependencies statically won't have issues, because this plugin and OrderedSet won't appear as frameworks in the final binary in that case.
  • In this update there is new language about the enforcement saying that it applies to "new or updated apps that have a newly added third-party SDK", so it doesn't sound like anyone already shipping an app using this plugin would be affected.

(It's also not actually clear that the plugin currently needs a privacy manifest, or if just updating the OrderedSet dependency will be enough. https://developer.apple.com/support/third-party-SDK-requirements/ lists flutter_inappwebview, not flutter_inappwebview_ios, whereas for most other plugins with a federated iOS implementation it is the implementation package that is listed. Given that, it's possible that only older versions of the plugin with the iOS implementation inline would currently trip the validation check, since for a build with a current version there would never be a flutter_inappwebview.framework in the build.)

However, it seems that the author is currently very busy and is not able to work on this project. It may be a good idea to consider using a plugin that is updated more frequently.

@stuartmorgan
Copy link
Author

But in my app, I use the flutter_inappwebview: 6.0.0 still pass the review privacy manifest.

As explained above, different people will have different enforcement experiences.

I think you should follow my previous comment and re-submit your app for review to check my solution work or not work for you.

I don't have an app. I'm a member of the Flutter team, helping the ecosystem adapt to the rollout of the privacy manifest requirements.

However, since I am very familiar with the way the requirements are currently enforced and how that enforcement interacts with different Flutter build configurations, I can definitely say that the steps in your comment will not resolve the situation for someone whose build configuration is such that they receive an enforcement warning about OrderedSet as a result of depending on the current version of flutter_inappwebview.

@rs-huannd1
Copy link

rs-huannd1 commented Sep 6, 2024

@phuc-tranh-otsv phu I meet an issue about the 'Missing privacy manifest' of flutter_inappwebview

App Store Connect
 
Hello,
We noticed one or more issues with a recent submission for App Store review for the following app:
'App Name'
Version 2.2.24
Build 216
Although submission for App Store review was successful, you may want to correct the following issues in your next submission for App Store review. Once you've corrected the issues, upload a new binary to App Store Connect.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseAuth.framework/FirebaseAuth”, which includes FirebaseAuth, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCore.framework/FirebaseCore”, which includes FirebaseCore, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCrashlytics.framework/FirebaseCrashlytics”, which includes FirebaseCrashlytics, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseDynamicLinks.framework/FirebaseDynamicLinks”, which includes FirebaseDynamicLinks, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseMessaging.framework/FirebaseMessaging”, which includes FirebaseMessaging, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/Flutter.framework/Flutter”, which includes Flutter, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/OrderedSet.framework/OrderedSet”, which includes OrderedSet, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/connectivity_plus.framework/connectivity_plus”, which includes connectivity_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/device_info_plus.framework/device_info_plus”, which includes device_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/file_picker.framework/file_picker”, which includes file_picker, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_inappwebview.framework/flutter_inappwebview”, which includes flutter_inappwebview, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_local_notifications.framework/flutter_local_notifications”, which includes flutter_local_notifications, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/nanopb.framework/nanopb”, which includes nanopb, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info.framework/package_info”, which includes package_info, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info_plus.framework/package_info_plus”, which includes package_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/share_plus.framework/share_plus”, which includes share_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/video_player_avfoundation.framework/video_player_avfoundation”, which includes video_player_avfoundation, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/wakelock_plus.framework/wakelock_plus”, which includes wakelock, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
Apple Developer Relations

Thank you. Have a nice day!

Hi @phuc-tranh-otsv
I have just updated all libs. Now I want check privacy of libs. how to check it. I wan't up app to app store review, because my project is outsource project. I want check privacy by myself. Thanks, have a good day

@phuc-tranh-otsv
Copy link

Hi @rs-huannd1,

Apple has informed us: "When you upload a new or updated app to App Store Connect that utilizes an API requiring approved reasons, we'll send you an email if your app's privacy manifest is missing any required details. This will be in addition to the existing notification in App Store Connect."

I recommend uploading the new version of your app to App Store Connect and submitting it for review. This will help you receive the guidelines necessary for your app. Unfortunately, I am unable to check the privacy details myself.

Have a great day!

@bit2008xing
Copy link

bit2008xing commented Sep 22, 2024

for me , I just modify the orderedSet version in file:
project/ios/Podfile.lock

  - flutter_inappwebview_ios (0.0.1):
    - Flutter
    - flutter_inappwebview_ios/Core (= 0.0.1)
    - OrderedSet (~> 6.0.2)
  - flutter_inappwebview_ios/Core (0.0.1):
    - Flutter
    - OrderedSet (~> 6.0.2)
  - OrderedSet (6.0.3)

and then run pod update OrderedSet in project/ios
finally ,use xcode to build app,then it works

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests