Legal Pages for SaaS App: What Indie iOS Developers Need for App Store Submission

A SaaS app is more than a marketing site: it usually includes authentication, ongoing service delivery, billing, and data handling. For an iOS app, reviewers and users typically expect three things to be clearly available online: a Privacy Policy, Terms (or Terms of Service / Terms & Conditions), and a Support page. Many apps also need a dedicated Data Deletion / Account Deletion page or instructions, depending on what data you collect and whether users can create accounts.

Your App Store listing will ask for a Privacy Policy URL and a Support URL. You should also make your legal pages accessible from your website footer and from inside the app (for example: Settings screen links). Consistency matters: the app, the website, and the App Store listing should all point to the same pages.

1) Privacy Policy: Explains what data you collect, why you collect it, where it’s processed, how long it’s retained, who you share it with, and how users can contact you. If you have accounts or identifiers, include how users can request deletion or export. If you use third-party services (analytics, crash reporting, payments), name them or describe categories and purposes.

2) Terms of Service (or Terms & Conditions): Describes acceptable use, the service you provide, subscription and billing terms (including auto-renewal if applicable), limitations of liability, termination, and changes to terms. This is especially important for SaaS features where users store content or rely on availability.

3) Support page (Support URL): A dedicated page with contact methods (email at minimum), typical response time, and links to troubleshooting, FAQ, and refund/subscription help. Keep it human and direct. App Review often checks that your Support URL works and contains clear ways to reach you.

Common additions: Cookie Policy (if you use cookies on the marketing site), Data Processing Addendum (B2B SaaS), and an Account Deletion / Data Deletion page. For many indie iOS SaaS apps, Privacy + Terms + Support + Deletion instructions cover the typical needs.

Privacy Policy URL: Required for most apps, and effectively mandatory for any app that collects user data or uses third-party SDKs that collect data. The page must be publicly accessible, not behind a login, and load reliably on mobile.

Support URL: Required. This should not be a dead link or a generic social profile. A simple web page that includes support email and basic help is usually enough.

Account deletion and data management: If your app supports account creation, you may need to provide a way for users to request account deletion. This can be in-app functionality or a clearly described method (for example, a deletion request form or instructions with a support email). Your Privacy Policy should also explain deletion timelines and what data may be retained for legal reasons (for example, billing records).

Subscriptions: If you offer subscriptions, your Terms should mention billing cycle, renewal, cancellation (typically managed via Apple for in-app purchases), and how to get help. Your Support page should include a short section explaining how to manage subscriptions in iOS settings.

Use stable, simple URLs you can paste into App Store Connect and keep unchanged over time. Recommended structure:

Example URL set:

https://yourdomain.com/privacy

https://yourdomain.com/terms (or /terms-of-service)

Support page goal: make it obvious how to contact you and get common issues resolved quickly. Keep it concise and include app identification.

Example Support page text you can adapt:

Support

If you need help with the app, contact us at support@yourdomain.com. We typically respond within 2 business days (Mon–Fri).

Your Privacy Policy doesn’t have to be long, but it must be specific. A strong structure includes the sections below. Replace placeholders with your real details.

Example outline:

1) Who we are

YourCompanyName ("we", "us") provides the YourAppName iOS app and the related web service at https://yourdomain.com (the "Service"). Contact: privacy@yourdomain.com.