Missing privacy manifest

[Viharshitha Garithra]

Hi Team,

we are using @capacitor-mlkit/barcode-scanning in our ionic App, which is interlink with GoogleToolboxForMac. Recently we got an email from apple store regarding Missing privacy manifest 

ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/GoogleToolboxForMac.framework/GoogleToolboxForMac”, which includes GoogleToolboxForMac, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting February 12, 2025, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests,

Do we need to add PrivacyInfo.xcprivacy file manually in our project, if so which file we need to add below

<dict>
<key>NSPrivacyAccessedAPITypes</key>
<array/>
<key>NSPrivacyCollectedDataTypes</key>
<array/>
<key>NSPrivacyTracking</key>
<false/>
<key>NSPrivacyTrackingDomains</key>
<array/>
</dict> 

OR

<dict>
<key>NSPrivacyAccessedAPITypes</key>
<array>
<dict>
<key>NSPrivacyAccessedAPIType</key>
<string>NSPrivacyAccessedAPICategoryUserDefaults</string>
<key>NSPrivacyAccessedAPITypeReasons</key>
<array>
<string>CA92.1</string>
</array>
</dict>
</array>
<key>NSPrivacyCollectedDataTypes</key>
<array/>
<key>NSPrivacyTracking</key>
<false/>
<key>NSPrivacyTrackingDomains</key>
<array/></dict>

[Thomas Van Lenten]

The CocoaPods support has been included for Privacy Manifests since the 4.2.1 release in January of 2024. If you are using CocoaPods, then you just need to ensure you update your dependencies have the correct thing auto provided.

If you are on something older that 4.2.1, then neither file could be right as it could be older code that has other apis usages that might need Privacy Manifest entries that the current versions no long need.

If you are not using CocoaPods, but are on the current sources, then which file will depend on exactly what part of GTM you are building/linking. You can look at the podspec file to see what sub modules get which file, and that should help guide you to which file you need.

TVL

[Viharshitha Garithra]

Thanks for reply. we are using cocoapods in our ionic project. Actuality we are using @capacitor-mlkit/barcode-scanning:6.1.0 in our ionic App, which is interlink with GoogleToolboxForMac. Recently @capacitor-mlkit/barcode-scanning released new 7 version, which consist of GoogleToolboxForMac 4.2.0 version(assuming). as we have tight schedule with our Road map so not able upgrade now as it is adhoc requirement. So how can PrivacyInfo.xcprivacy file manually in our project, without updating the package (@capacitor-mlkit/barcode-scanning:7 or GoogleToolboxForMac). i updated cocoapods but it is not updated any GoogleToolboxForMac. 

please help me how to add  PrivacyInfo.xcprivacy file manually in our project and where to add this file? which folder n file

please reply ASAP

[Viharshitha Garithra]

Hi,

Cocoapods are being used in this project. The GoogleToolboxForMac package is not being used directly in our project. @capacitor-mlkit/barcode-scanning:6.0.0 is what we're using. Perhaps the GoogleToolboxForMac package is interdependent. They recently released an upgrade for version 7.0.0. after we upgrade to a new version our podfile.lock was changed. I now have the attached report after generating a privacy manifest report and archiving my app. Is there a problem? For it, what do I want to do? and what about my Apple below email?

TMS-91061: Missing privacy manifest - Your app includes “Frameworks/GoogleToolboxForMac.framework/GoogleToolboxForMac”, which includes GoogleToolboxForMac, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting February 12, 2025, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests,

podfile.lock

 - MLKitBarcodeScanning (6.0.0):
    - MLKitCommon (~> 12.0)
    - MLKitVision (~> 8.0)
  - MLKitCommon (12.0.0):
    - GoogleDataTransport (~> 10.0)
    - GoogleToolboxForMac/Logger (< 5.0, >= 4.2.1)
    - "GoogleToolboxForMac/NSData+zlib (< 5.0, >= 4.2.1)"
    - GoogleUtilities/Logger (~> 8.0)
    - GoogleUtilities/UserDefaults (~> 8.0)
    - GTMSessionFetcher/Core (< 4.0, >= 3.3.2)
  - MLKitVision (8.0.0):
    - GoogleToolboxForMac/Logger (< 5.0, >= 4.2.1)
    - "GoogleToolboxForMac/NSData+zlib (< 5.0, >= 4.2.1)"
    - GTMSessionFetcher/Core (< 4.0, >= 3.3.2)
    - MLImage (= 1.0.0-beta6)
    - MLKitCommon (~> 12.0)

Regards,

Viharshitha

On Tuesday, 18 February 2025 at 22:29:16 UTC+5:30 Thomas Van Lenten wrote:

[Viharshitha Garithra]

HI,

we are using @capacitor-mlkit/barcode-scanning in our ionic App, which is interlink dependent with GoogleToolboxForMac. Recently we got an email from apple store regarding Missing privacy manifest. We try to upgrade @capacitor-mlkit/barcode-scanning which is internally updated GoogleToolboxForMac version to 4.2.0. but once I ran xcode for privacy report, it is not showing up in xcode. Any idea on it(if privacy manifest is added that should be shown up xcode generated report, right?) please help me n correct me 

podfile.lock

- MLKitBarcodeScanning (6.0.0):
    - MLKitCommon (~> 12.0)
    - MLKitVision (~> 8.0)
  - MLKitCommon (12.0.0):
    - GoogleDataTransport (~> 10.0)
    - GoogleToolboxForMac/Logger (< 5.0, >= 4.2.1)
    - "GoogleToolboxForMac/NSData+zlib (< 5.0, >= 4.2.1)"
    - GoogleUtilities/Logger (~> 8.0)
    - GoogleUtilities/UserDefaults (~> 8.0)
    - GTMSessionFetcher/Core (< 4.0, >= 3.3.2)
  - MLKitVision (8.0.0):
    - GoogleToolboxForMac/Logger (< 5.0, >= 4.2.1)
    - "GoogleToolboxForMac/NSData+zlib (< 5.0, >= 4.2.1)"
    - GTMSessionFetcher/Core (< 4.0, >= 3.3.2)
    - MLImage (= 1.0.0-beta6)
    - MLKitCommon (~> 12.0)

 

 

Apple Email:

[Thomas Van Lenten]

This doesn't sound like an issue with this library, but a problem with CocoaPods and/or Xcode for your specific build since there are no other reports of problems.  The normally suggestions you'll find on the internet probably apply, delete your current build results, clear the Xcode caches, and try a *full* *clean* build to see if that gets everything to show up that needs to show up.  Outside of that, I'd suggest reaching out to CocoaPods/Xcode discussion groups and/or trying to make a new project ad add in dependency (or subsets) and if your can reproduce it there.

TVL