Android app legal requirements

What Google asks for before an Android app goes live, what the law asks for on top, and which of the two rejects more submissions.

Updated 2026-09-18 · Written from the same rules terms.gg uses to generate documents

Two sets of rules, not one

An Android app answers to the privacy law of the country you operate from, and separately to Google's own rules. They overlap, but neither is a subset of the other: a policy that satisfies the law can still fail review, and a listing that passes review can still leave you exposed.

What Google checks

• A privacy policy URL in the Play Console that loads without a login.
• A Data safety form that agrees with the policy, item by item.
• A deletion URL reachable on the open web, not only inside the app.
• Declarations for sensitive permissions, with a reason a reviewer can check.
• A contact route in the listing that works.

What the law asks for on top

• The legal ground for what you collect, which no store form asks about.
• Retention periods and what deletion actually removes.
• Every processor that sees the data, and where it runs.
• A route to complain to a regulator, named.

Which one rejects more submissions

In practice the store does, because it checks automatically and immediately. The regulator arrives later, on a complaint, and asks harder questions. Passing review is not evidence that the policy is right.

The country you operate from decides the rest

Which law applies, which authority hears complaints, and whether a published legal notice is expected are all set by where you are established.

Keeping it true after launch

A legal page stops being true the moment the product moves past it, usually by adding a payment provider, an analytics SDK or a sign-in. No store re-checks your pages against your build, so the drift is yours to notice.

• Re-read it whenever you add a dependency that sees user data.
• Re-open the Google console after any change to what the app collects: the listing and the policy have to agree.
• Keep the URL stable. Changing where a policy lives breaks every listing that points at it.