search

pichillilorenzo / flutter_inappwebview

A Flutter plugin that allows you to add an inline webview, to use a headless webview, and to open an in-app browser window.
https://inappwebview.dev
Apache License 2.0
3.31k stars 1.64k forks source link

iOS privacy manifest required #1909

Open stuartmorgan opened 11 months ago

stuartmorgan commented 11 months ago

This plugin is listed on https://developer.apple.com/support/third-party-SDK-requirements/ as requiring a privacy manifest. Some action will be required, either to clarify with Apple whether this plugin should be on the list, or to add a privacy manifest.

See https://github.com/flutter/flutter/issues/131940 for context.

github-actions[bot] commented 11 months ago

đź‘‹ @stuartmorgan

NOTE: This comment is auto-generated.

Are you sure you have already searched for the same problem?

Some people open new issues but they didn't search for something similar or for the same issue. Please, search for it using the GitHub issue search box or on the official inappwebview.dev website, or, also, using Google, StackOverflow, etc. before posting a new one. You may already find an answer to your problem!

If this is really a new issue, then thank you for raising it. I will investigate it and get back to you as soon as possible. Please, make sure you have given me as much context as possible! Also, if you didn't already, post a code example that can replicate this issue.

In the meantime, you can already search for some possible solutions online! Because this plugin uses native WebView, you can search online for the same issue adding android WebView [MY ERROR HERE] or ios WKWebView [MY ERROR HERE] keywords.

Following these steps can save you, me, and other people a lot of time, thanks!

pichillilorenzo commented 11 months ago

Apple sent me an email about that a while ago but I didn’t understand what I needed to do. As you say in this comment about webview_flutter https://github.com/flutter/flutter/issues/131940#issuecomment-1846038911, this plugin doesn’t collect any kind of data per se. This is a plugin that offers a lot of features that could be used by other Flutter developers, but in that case this plugin is not responsible of what the developers is doing, as the developer could do the same also using native WKWebView API.

Have you figured it out? Do you have any advice? Thanks!

stuartmorgan commented 11 months ago

We don't currently have any more information than what is in the issue; we'll update as we learn more, but are also encouraging anyone who was contacted directly to reach out. Have you replied to Apple to explain your usage and ask what the expectation is for your use case?

pichillilorenzo commented 11 months ago

Ok thanks a lot! Not yet but I’m replying to them right now to ask more about it! I will let you know if I have any news 👍

ShuheiSuzuki-07 commented 10 months ago

@pichillilorenzo

Nice to meet you, I have always been a fan of this plugin. Thank you very much.

This plugin uses OrderedSet, and OrderedSet seems to be included in the list that needs to be addressed. https://developer.apple.com/support/third-party-SDK-requirements/

After the PrivacyManifest support is completed on the OrderedSet side, do we need to incorporate it into flutter_inappwebview as well? If so, please let me know.

Please let me know if my understanding is incorrect.

I have created an issue on OrderedSet. I would like to create a PR if I have time... https://github.com/Weebly/OrderedSet/issues/41

ueman commented 10 months ago

In https://github.com/flutter/flutter/issues/131940#issuecomment-1881641272 it states, that plugins that do not collect data should include an empty privacy manifest. I'm assuming that holds true here too.

pichillilorenzo commented 10 months ago

@ueman yes, I think it should be that. Did the Flutter team already made an example for their plugins?

ueman commented 10 months ago

Yes, see https://github.com/flutter/packages/pull/5846

pichillilorenzo commented 10 months ago

Thanks, I will look at that as soon as possible đź‘Ť

RMatushkin commented 8 months ago

@pichillilorenzo Is there really a pressing need to use the OrderedSet plugin?

percival888 commented 8 months ago

hello, the deadline is approaching, Is there any new development?

phuc-tranh-otsv commented 8 months ago

Hi @pichillilorenzo any update from your side for this issue? thank you for your time.

ryukukimura commented 7 months ago

Hello, @pichillilorenzo I hope you're doing well. Any updates? Thanks for your great work on this project!

Samo8 commented 7 months ago

OrderedSet just released new version with PrivacyInfo, so the version of dependency could be raised also

ShuheiSuzuki-07 commented 6 months ago

Will this actually be rejected by Apple in the review process if it is not addressed? Please let me know if you have any actual experience.

stuartmorgan commented 6 months ago

Will this actually be rejected by Apple in the review process if it is not addressed? Please let me know if you have any actual experience.

Individual experience on this is likely to vary:

(It's also not actually clear that the plugin currently needs a privacy manifest, or if just updating the OrderedSet dependency will be enough. https://developer.apple.com/support/third-party-SDK-requirements/ lists flutter_inappwebview, not flutter_inappwebview_ios, whereas for most other plugins with a federated iOS implementation it is the implementation package that is listed. Given that, it's possible that only older versions of the plugin with the iOS implementation inline would currently trip the validation check, since for a build with a current version there would never be a flutter_inappwebview.framework in the build.)

rs-huannd1 commented 3 months ago

Has this issue been resolved yet?

phuc-tranh-otsv commented 3 months ago

Thus far, my product has been successfully released without any rejections or further requirements from App Store Connect related to add iOS privacy manifest for flutter_inappwebview package. We can address this issue only if it becomes relevant during the review process or if App Store Connect requests changes.

rs-huannd1 commented 3 months ago

@phuc-tranh-otsv phu I meet an issue about the 'Missing privacy manifest' of flutter_inappwebview

App Store Connect

Hello,
We noticed one or more issues with a recent submission for App Store review for the following app:
'App Name'
Version 2.2.24
Build 216
Although submission for App Store review was successful, you may want to correct the following issues in your next submission for App Store review. Once you've corrected the issues, upload a new binary to App Store Connect.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseAuth.framework/FirebaseAuth”, which includes FirebaseAuth, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCore.framework/FirebaseCore”, which includes FirebaseCore, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCrashlytics.framework/FirebaseCrashlytics”, which includes FirebaseCrashlytics, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseDynamicLinks.framework/FirebaseDynamicLinks”, which includes FirebaseDynamicLinks, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseMessaging.framework/FirebaseMessaging”, which includes FirebaseMessaging, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/Flutter.framework/Flutter”, which includes Flutter, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/OrderedSet.framework/OrderedSet”, which includes OrderedSet, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/connectivity_plus.framework/connectivity_plus”, which includes connectivity_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/device_info_plus.framework/device_info_plus”, which includes device_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/file_picker.framework/file_picker”, which includes file_picker, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_inappwebview.framework/flutter_inappwebview”, which includes flutter_inappwebview, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_local_notifications.framework/flutter_local_notifications”, which includes flutter_local_notifications, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/nanopb.framework/nanopb”, which includes nanopb, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info.framework/package_info”, which includes package_info, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info_plus.framework/package_info_plus”, which includes package_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/share_plus.framework/share_plus”, which includes share_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/video_player_avfoundation.framework/video_player_avfoundation”, which includes video_player_avfoundation, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/wakelock_plus.framework/wakelock_plus”, which includes wakelock, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
Apple Developer Relations

Thank you. Have a nice day!

thisisjaymehta commented 3 months ago

I believe it is relevant, or at least it will be after November 24th. This is the email I received from Apple following the submission of my app that utilizes flutter_inappwebview.

image

phuc-tranh-otsv commented 3 months ago

Good day @rs-huannd1 @thisisjaymehta,

From my experience, I think you can follow these step to fix this issue:

For @thisisjaymehta , Your image doesn't inform about the flutter_inappwebview. Please check the ordered_set pub. You can fork it. Update privacy manifest for fork repo and use fork repo in your project if owner have no idea.

I hope my comment can help you to fix your problems.

stuartmorgan commented 3 months ago

Your image doesn't inform about the flutter_inappwebview. Please check the ordered_set pub. You can fork it.

@phuc-tranh-otsv The ordered_set package isn't a plugin, and is unrelated. The issue is the OrderedSet pod, and specifically the fact that flutter_inappwebview depends on an old version of it that doesn't have a privacy manifest.

phuc-tranh-otsv commented 3 months ago

Hi @stuartmorgan, Thank for your comment. I think we should open issue for OrderedSet before. Because the flutter_inappwebview depend it. If OrderedSet no yet upgrade they version for privacy manifest, we still stuck here. But in my app, I use the flutter_inappwebview: 6.0.0 still pass the review privacy manifest. I think you should follow my previous comment and re-submit your app for review to check my solution work or not work for you.

FYI: https://apnspush.com/privacy-manifest-sdks Issue raised on OrderedSet: https://github.com/Weebly/OrderedSet/issues/41 OrderedSet release new version https://github.com/Weebly/OrderedSet/releases/tag/v6.0.2 to add privacy manifest. You can fork flutter_inappwebview & update OrderedSet on pod to 6.0.2 and create pull request or use fork repo instead.

phuc-tranh-otsv commented 3 months ago

The PR upgrade OrderedSet to 6.0.3 still open. https://github.com/pichillilorenzo/flutter_inappwebview/pull/2161

ShuheiSuzuki-07 commented 3 months ago

As noted in the comment above, this "may" not affect apps already published to the store using flutter_inappwebview, but this is just speculation.

Will this actually be rejected by Apple in the review process if it is not addressed? Please let me know if you have any actual experience.

Individual experience on this is likely to vary:

  • Anyone building their Pod dependencies statically won't have issues, because this plugin and OrderedSet won't appear as frameworks in the final binary in that case.
  • In this update there is new language about the enforcement saying that it applies to "new or updated apps that have a newly added third-party SDK", so it doesn't sound like anyone already shipping an app using this plugin would be affected.

(It's also not actually clear that the plugin currently needs a privacy manifest, or if just updating the OrderedSet dependency will be enough. https://developer.apple.com/support/third-party-SDK-requirements/ lists flutter_inappwebview, not flutter_inappwebview_ios, whereas for most other plugins with a federated iOS implementation it is the implementation package that is listed. Given that, it's possible that only older versions of the plugin with the iOS implementation inline would currently trip the validation check, since for a build with a current version there would never be a flutter_inappwebview.framework in the build.)

However, it seems that the author is currently very busy and is not able to work on this project. It may be a good idea to consider using a plugin that is updated more frequently.

stuartmorgan commented 3 months ago

But in my app, I use the flutter_inappwebview: 6.0.0 still pass the review privacy manifest.

As explained above, different people will have different enforcement experiences.

I think you should follow my previous comment and re-submit your app for review to check my solution work or not work for you.

I don't have an app. I'm a member of the Flutter team, helping the ecosystem adapt to the rollout of the privacy manifest requirements.

However, since I am very familiar with the way the requirements are currently enforced and how that enforcement interacts with different Flutter build configurations, I can definitely say that the steps in your comment will not resolve the situation for someone whose build configuration is such that they receive an enforcement warning about OrderedSet as a result of depending on the current version of flutter_inappwebview.

rs-huannd1 commented 2 months ago

@phuc-tranh-otsv phu I meet an issue about the 'Missing privacy manifest' of flutter_inappwebview

App Store Connect

Hello,
We noticed one or more issues with a recent submission for App Store review for the following app:
'App Name'
Version 2.2.24
Build 216
Although submission for App Store review was successful, you may want to correct the following issues in your next submission for App Store review. Once you've corrected the issues, upload a new binary to App Store Connect.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseAuth.framework/FirebaseAuth”, which includes FirebaseAuth, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCore.framework/FirebaseCore”, which includes FirebaseCore, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseCrashlytics.framework/FirebaseCrashlytics”, which includes FirebaseCrashlytics, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseDynamicLinks.framework/FirebaseDynamicLinks”, which includes FirebaseDynamicLinks, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/FirebaseMessaging.framework/FirebaseMessaging”, which includes FirebaseMessaging, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/Flutter.framework/Flutter”, which includes Flutter, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/OrderedSet.framework/OrderedSet”, which includes OrderedSet, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/connectivity_plus.framework/connectivity_plus”, which includes connectivity_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/device_info_plus.framework/device_info_plus”, which includes device_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/file_picker.framework/file_picker”, which includes file_picker, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_inappwebview.framework/flutter_inappwebview”, which includes flutter_inappwebview, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/flutter_local_notifications.framework/flutter_local_notifications”, which includes flutter_local_notifications, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/nanopb.framework/nanopb”, which includes nanopb, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info.framework/package_info”, which includes package_info, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/package_info_plus.framework/package_info_plus”, which includes package_info_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/share_plus.framework/share_plus”, which includes share_plus, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/video_player_avfoundation.framework/video_player_avfoundation”, which includes video_player_avfoundation, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/wakelock_plus.framework/wakelock_plus”, which includes wakelock, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting November 12, 2024, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.
Apple Developer Relations

Thank you. Have a nice day!

Hi @phuc-tranh-otsv I have just updated all libs. Now I want check privacy of libs. how to check it. I wan't up app to app store review, because my project is outsource project. I want check privacy by myself. Thanks, have a good day

phuc-tranh-otsv commented 2 months ago

Hi @rs-huannd1,

Apple has informed us: "When you upload a new or updated app to App Store Connect that utilizes an API requiring approved reasons, we'll send you an email if your app's privacy manifest is missing any required details. This will be in addition to the existing notification in App Store Connect."

I recommend uploading the new version of your app to App Store Connect and submitting it for review. This will help you receive the guidelines necessary for your app. Unfortunately, I am unable to check the privacy details myself.

Have a great day!

bit2008xing commented 2 months ago

for me , I just modify the orderedSet version in file: project/ios/Podfile.lock

  - flutter_inappwebview_ios (0.0.1):
    - Flutter
    - flutter_inappwebview_ios/Core (= 0.0.1)
    - OrderedSet (~> 6.0.2)
  - flutter_inappwebview_ios/Core (0.0.1):
    - Flutter
    - OrderedSet (~> 6.0.2)
  - OrderedSet (6.0.3)

and then run pod update OrderedSet in project/ios finally ,use xcode to build app,then it works