VundaPublishing · Last verified 3 July 2026
Your privacy obligations
You publish under your own accounts, so the privacy obligations are yours. What your app collects when you enable analytics or push, why you need a privacy policy, and the in-app link gap to work around.
Your app ships under your own developer accounts, so you are the one responsible for its privacy compliance. When you turn on analytics or push, your app collects data from shoppers, and both Apple and Google require you to disclose that and to publish a privacy policy. This guide covers what to declare and one current gap to work around.
Vunda gives you the tools; the privacy obligations are yours. You decide which integrations to enable, so you are the one who must disclose what they collect and keep a privacy policy that matches.
What your app collects depends on what you enable
A Vunda app only collects what its enabled integrations collect:
- Analytics: when you
Enable Google Analyticson the Integrations page, your app reports events (screen views, product views, add to cart, checkout) to your GA4 property. - Push: when you
Enable KlaviyoorEnable OneSignal, your app asks the shopper for notification permission, registers a device push token, and identifies the signed-in shopper to your push provider.
If you leave these off, the app does not send that data. Declare whatever you do enable in your App Store privacy details and your Google Play Data safety form, and reflect it in your privacy policy. (Sources: Apple - App privacy details, and Google Play - Data safety.)
You must publish a privacy policy
Both stores require a privacy policy URL for an app that collects data, and Apple's guidelines require one for essentially every app. Put a privacy policy that reflects your data use at a stable URL, and set that URL in both your App Store and Google Play listings (see the store listings guide in this section). (Sources: Apple - App Review Guidelines, Privacy, and Google Play - User Data policy.)
A current gap: the in-app privacy link is not wired yet
Vunda's mobile app has a built-in Privacy Policy link on its onboarding screen, but that link only appears when a privacy policy URL is configured in the build, through the EXPO_PUBLIC_PRIVACY_POLICY_URL setting. Today Vunda does not collect that URL from you or push it into your build, so the in-app link stays hidden. Until we wire that up, rely on the privacy policy URL in your store listings to meet each store's requirement, and make sure it is set on both. If you need the policy reachable from inside the app as well, contact us.
What to do
- Write a privacy policy that matches the integrations you enable.
- Add its URL to both your App Store and Google Play listings.
- Complete Apple's privacy details and Google Play's Data safety form to match.
- Update all of the above whenever you change which integrations are on.