Our children's educational app (COPPA-compliant) was rejected under Guidelines 5.1.1(i) and 5.1.2(i) for sharing personal data with a third-party AI service without clear disclosure and user permission. How our app works: Our app is an AI-powered learning assistant for kids. Children type questions (e.g., Why is the sky blue?) and the app sends the question to Google Gemini's API to generate an age-appropriate answer. This is the core and only purpose of the app — it's an AI chat app, similar to how a search engine sends queries to its servers. Our current setup: Google Gemini operates as a data processor (not a data recipient) — zero data retention, no model training on user data Our privacy policy already discloses Google Gemini as the AI provider, what data is processed, and that no data is stored The app is clearly marketed as an AI-powered assistant — users understand they are interacting with AI Our questions: Infrastructure vs. data sharing: We use Google Gemini to process queries the same way
Topic:
App Store Distribution & Marketing
SubTopic:
App Store Connect