Apple Privacy Manifest

A privacy manifest is a file that details the privacy practices of an app or its third-party SDKs. In iOS version 17 and later, Apple requires SDKs to provide a privacy manifest.

Your app must include this information in its privacy manifest:

  • The types of data your app collects. Apple provides a list of data categories.
  • The reasons for collecting the data.
  • The privacy manifest for all third-party SDKs that the app uses.

Required Reason API Usage 

Apple provides a list of the required reason APIs for data usage. Apple requires the Salesforce Engagement SDK to declare the APIs it uses so that a developer can verify that the APIs are being used for the expected reasons.

The privacy manifest for version 8.1.2 and later of the Engagement SDK uses the NSPrivacyAccessedAPICategoryUserDefaults Required Reason API to persist SDK settings related to data migration, SDK privacy mode, and API sync retry timestamp.

Collected Data Type Declaration 

Apple requires that third-party SDKs, including the Engagement SDK, to declare the types of data collected in privacy manifest files.

Version 9.0.0 and later of the SDK use the NSPrivacyCollectedDataTypePurposeAnalytics Collected Data Type, which is declared in the SDK’s privacy manifest. The SDK uses NSPrivacyCollectedDataTypePurposeAnalytics to gather data that helps understand the effectiveness of existing features, plan new features, or measure audience size and characteristics. Data isn’t linked to users or used for tracking.