Apple App Store 리뷰 준수 에이전트

## Compliance Plan for ${app_name} ### Summary [2–3 sentence overall risk assessment] ### Requirements Review #### REQ-01 · Privacy Policy - Guideline 5.1.1 - [UNKNOWN] **Finding:** No information provided about privacy policy URL or in-app link. **Risk:** Missing or inaccessible privacy policy causes immediate rejection. **Action:** Provide the privacy policy URL and confirm it is linked in-app. Host on your own domain or a reliable service (Notion published page, Carrd, simple HTML). Add to App Store Connect under "App Information → Privacy Policy URL" and include a tappable link in Settings or onboarding. #### REQ-02 · Permission Usage Descriptions - Guideline 5.1.1 - [UNKNOWN] **Finding:** No information provided about Info.plist permission strings. **Risk:** Vague or missing NSUsageDescription strings cause rejection. **Action:** List all permissions requested (camera, location, microphone, etc.) and provide the exact strings. Each must be specific, user-facing, and match actual feature usage. #### REQ-03 · Permissions Match Actual Usage - Guideline 5.1.1 - [UNKNOWN] **Finding:** No information provided about when permissions are requested. **Risk:** Speculative or unused permission requests cause rejection. **Action:** Confirm permissions are requested only at the moment of need (lazy request pattern), not on launch. Ensure the triggering feature is reachable by the reviewer without a paid account. #### REQ-04 · No Private APIs - Guideline 2.5.1 - [UNKNOWN] **Finding:** No information provided about frameworks or libraries used. **Risk:** Private API calls are caught by automated analysis before human review. **Action:** Provide the list of frameworks and third-party dependencies. Run `nm -u YourApp.app/YourApp | grep " U "` on the built binary to check for unexpected symbols. Verify all libraries are from reputable sources. #### REQ-05 · App Must Not Crash on Launch - Guideline 2.1 - [UNKNOWN] **Finding:** No information provided about minimum OS version or testing practices. **Risk:** Crash on launch or black screen causes immediate rejection. **Action:** Confirm the minimum iOS version and testing coverage. Test on a physical device running the oldest supported OS, not just the latest simulator. Archive and install via TestFlight before submitting. #### REQ-06 · Guest / No-Account Access - Guideline 5.1.1 - [UNKNOWN] **Finding:** No information provided about account requirements. **Risk:** Login wall before core functionality causes rejection. **Action:** Confirm whether users can experience core features without an account. If not, add guest/demo mode or provide demo credentials in App Review Notes. #### REQ-07 · In-App Account Deletion - Guideline 5.1.1 - [UNKNOWN] **Finding:** No information provided about account deletion flow. **Risk:** Missing in-app account deletion causes rejection (mandatory since June 2022). **Action:** If the app allows account creation, confirm a self-serve "Delete Account" option exists in Settings. It must trigger actual deletion, not just deactivation, and work without contacting support. #### REQ-08 · No External Payment Links - Guideline 3.1.1 - [UNKNOWN] **Finding:** No information provided about payment flows. **Risk:** External payment links for digital goods cause rejection. **Action:** Confirm whether the app sells digital goods or subscriptions. If yes, they must use StoreKit only. Physical goods/services are exempt. No price comparisons or incentive language referencing external purchase options. #### REQ-09 · Demo Credentials in Review Notes - Guideline 2.1 - [UNKNOWN] **Finding:** No information provided about authentication requirements. **Risk:** Reviewer cannot access features behind login causes rejection. **Action:** If any feature requires authentication, provide demo credentials in App Review Notes (not the description). Include username, password, and any 2FA workaround. #### REQ-10 · Screenshots Reflect Actual App - Guideline 5.2.2 - [UNKNOWN] **Finding:** No information provided about screenshot sourcing. **Risk:** Misleading or mockup screenshots cause rejection. **Action:** Confirm screenshots are real captures from the current build, not Figma mockups or marketing renders. Real UI must match what is in the binary. #### REQ-11 · App Name Matches Binary - Guideline 1.2 - [UNKNOWN] **Finding:** No information provided about app name configuration. **Risk:** Mismatch between CFBundleDisplayName and App Store Connect name causes automated rejection. **Action:** Confirm `CFBundleDisplayName` in Info.plist exactly matches the name in App Store Connect. Note the ~13–14 character truncation limit for home screen display. #### REQ-12 · No Reference to Other Platforms - Guideline 2.3.3 - [UNKNOWN] **Finding:** No information provided about cross-platform references. **Risk:** Mentions of Android, Google Play, or competing platforms cause rejection. **Action:** Confirm description, screenshots, and in-app text contain no references to other platforms or cross-platform frameworks. Remove any Android-style UI elements from screenshots. #### REQ-13 · Age Rating Accuracy - Guideline 1.3 - [UNKNOWN] **Finding:** No information provided about content or age rating. **Risk:** Declared age rating lower than actual content causes rejection or removal. **Action:** Confirm the declared age rating matches content. User-generated content requires 17+ unless moderation (report/flag, stated policy, human or automated filtering) is implemented. #### REQ-14 · Supports Current Screen Sizes - Guideline 2.1 - [UNKNOWN] **Finding:** No information provided about layout approach. **Risk:** Content obscured by Dynamic Island or fixed frames causes rejection. **Action:** Confirm use of Safe Area insets and adaptive layouts. Test on iPhone 15 Pro (Dynamic Island) and iPhone SE (small screen) simulators. #### REQ-15 · HTTPS / App Transport Security - Guideline 5.1.1 - [UNKNOWN] **Finding:** No information provided about network configuration. **Risk:** HTTP calls or global ATS exceptions cause rejection. **Action:** Confirm all network calls use HTTPS. If `NSAllowsArbitraryLoads` is set, justify it or migrate endpoints. Use `NSExceptionDomains` for specific HTTP-only domains if unavoidable. #### REQ-16 · Built with Current Xcode / SDK - Guideline 2.5 - [UNKNOWN] **Finding:** No information provided about build environment. **Risk:** Outdated Xcode/SDK causes automatic upload rejection. **Action:** Confirm Xcode 15+ is used targeting iOS 17 SDK minimum. Run `xcode-select --version` to verify. This is a hard pipeline requirement with no workaround. #### REQ-17 · App Icon Has No Alpha Channel - Guideline 2.1 - [UNKNOWN] **Finding:** No information provided about app icon format. **Risk:** Alpha channel in icon causes automated upload rejection. **Action:** Confirm the 1024×1024 icon has no transparency. Verify with `python3 -c "from PIL import Image; img = Image.open('icon.png'); print(img.mode)"` - must be `RGB`, not `RGBA`. #### REQ-18 · Privacy Manifest (PrivacyInfo.xcprivacy) - Guideline 5.1.2 - [UNKNOWN] **Finding:** No information provided about API usage or privacy manifest. **Risk:** Missing PrivacyInfo.xcprivacy for required APIs causes rejection. **Action:** Confirm whether the app uses UserDefaults, FileManager, disk space, active keyboard, or installed app list APIs. If yes, add PrivacyInfo.xcprivacy with required reason codes. Verify third-party SDKs include their own manifests. ### Priority Order List items AT RISK in order from most likely to cause rejection to least. ### App Review Notes Template Draft the text the developer should paste into the App Review Notes field in App Store Connect.