> ## Documentation Index
> Fetch the complete documentation index at: https://docs.spendowl.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Privacy

> Privacy manifest and App Store compliance

# Privacy

SpendOwl is designed with privacy in mind. No IDFA is required, and a privacy manifest is included for App Store compliance.

## Privacy Manifest

SpendOwl includes an Apple Privacy Manifest (`PrivacyInfo.xcprivacy`) that declares:

* **Data collected** and its purposes
* **Tracking domains** used
* **Required reasons API** usage

The manifest is automatically bundled with the SDK.

## Data Collection

### What SpendOwl Collects

| Data Type         | Purpose           | Linked to Identity        |
| ----------------- | ----------------- | ------------------------- |
| Device ID         | Analytics         | No (anonymous)            |
| Purchase History  | ROAS calculation  | Optional (if user ID set) |
| Attribution Token | Campaign tracking | No                        |

### What SpendOwl Does NOT Collect

* IDFA (Advertising Identifier)
* Location data
* Contacts
* Photos
* Health data
* Emails or messages

## No IDFA Required

SpendOwl uses Apple's AdServices framework for attribution, which doesn't require IDFA or App Tracking Transparency (ATT) prompt.

```swift theme={null}
// No ATT prompt needed
SpendOwl.configure(apiKey: "your-api-key")
```

<Note>
  Users who enable "Limit Ad Tracking" may still have attribution data via AdServices, though with reduced accuracy.
</Note>

## App Store Privacy Questionnaire

When submitting to the App Store, you'll answer privacy questions. Here's how SpendOwl affects your answers:

### Data Types

<AccordionGroup>
  <Accordion title="Identifiers → Device ID">
    **Collected:** Yes (anonymous device ID for analytics)
    **Linked to Identity:** No (unless you call `setUserId()`)
    **Used for Tracking:** No
  </Accordion>

  <Accordion title="Purchases → Purchase History">
    **Collected:** Yes (for ROAS calculation)
    **Linked to Identity:** Optional (if you set user ID)
    **Used for Tracking:** No
  </Accordion>

  <Accordion title="Usage Data → Product Interaction">
    **Collected:** Yes (app install attribution)
    **Linked to Identity:** No
    **Used for Tracking:** No
  </Accordion>
</AccordionGroup>

### Tracking Definition

Apple defines "tracking" as linking data with third-party data for advertising purposes. SpendOwl:

* Does NOT link data with third-party advertising data
* Does NOT share data with data brokers
* Only uses data for your own analytics

**Answer "No" to tracking questions** unless your app has other tracking.

## User Identity

### Anonymous by Default

Without calling `setUserId()`, all data is anonymous:

```swift theme={null}
SpendOwl.configure(apiKey: "your-api-key")
// All data is anonymous
```

### Identified Users

When you set a user ID, data is linked to that identity:

```swift theme={null}
SpendOwl.setUserId("user-123")
// Attribution and purchases linked to this user
```

Update your privacy policy if linking data to user accounts.

## Data Retention

* **Attribution data:** Stored indefinitely for ROAS reporting
* **Purchase data:** Stored indefinitely for revenue analytics
* **Device IDs:** Hashed before storage

## Data Deletion

To request data deletion for a user:

1. Go to [SpendOwl Dashboard](https://spendowl.io/dashboard)
2. Navigate to **Settings → Privacy**
3. Enter the user ID
4. Click **Delete User Data**

Or contact [support@spendowl.io](mailto:support@spendowl.io).

## GDPR Compliance

For GDPR compliance:

1. **Data Processing Agreement (DPA):** Available upon request
2. **Data location:** Processed in the United States
3. **User rights:** Deletion requests honored within 30 days

## CCPA Compliance

SpendOwl supports California Consumer Privacy Act (CCPA):

* SpendOwl does NOT sell personal information
* Users can request data deletion
* SpendOwl acts as a "service provider" under CCPA

## Privacy Policy Template

Add this to your app's privacy policy:

> **Analytics and Attribution**
>
> We use SpendOwl to measure advertising effectiveness. SpendOwl collects:
>
> * Anonymous device identifiers
> * App install attribution data
> * Purchase information (for analytics only)
>
> This data is not used for advertising targeting or sold to third parties.
> For more information, see SpendOwl's privacy policy at spendowl.io/privacy.

## Required Reasons API

SpendOwl uses these APIs that require disclosure in the privacy manifest:

| API                 | Reason                     |
| ------------------- | -------------------------- |
| `NSUserDefaults`    | App preferences (C56D.1)   |
| File timestamp APIs | App functionality (DDA9.1) |

These are already declared in SpendOwl's bundled privacy manifest.

## Questions?

Contact [privacy@spendowl.io](mailto:privacy@spendowl.io) for privacy-related inquiries.