DarnlyPrivacy policy and terms for your app
Tick a few boxes and get a clear privacy policy and terms of service that name the services you actually use. Ready for the App Store, Google Play and Stripe. Free, and nothing leaves your browser.
This is a starting point, not legal advice. Read it before you publish, and make sure it matches what your app really does.
5 blanks to fill
More free tools
How it works
- Fill in your app’s name, your name or company and a contact email. Anything you leave blank shows up highlighted in the preview so you can spot it.
- Tick what your app collects, which services it uses (Supabase, Stripe, Google Analytics, OpenAI and so on) and where your users are. The policy and terms rewrite themselves as you go, and name each service with a link to its own privacy policy.
- Switch between the Privacy Policy and Terms of Service tabs, then copy each one as Markdown or HTML, download it, or copy a prompt that asks your AI coding agent to add both pages to your app.
Questions
Is this legal advice?
No. It’s a clear, plain-English starting point built from templates. Read it, make sure it matches what your app really does, and ask a lawyer if your app handles health data, money for other people, children’s data or anything high risk.
Is it good enough for the App Store, Google Play or Stripe?
They ask for a public link to a privacy policy that says what you collect and how people can delete their data. This one covers both. Put it on a page like yoursite.com/privacy and paste that link into App Store Connect, the Play Console or Stripe. Apple also requires that people can delete their account inside the app.
Do I need the GDPR or CCPA sections?
If anyone in the EU or UK can use your app, include the GDPR part. If people in California can use it, include the CCPA part. Most apps on the internet can be used from anywhere, so we tick all regions by default.
Why does it name the services I use?
Privacy laws and app stores expect you to say who else gets your users’ data. Naming Supabase, Stripe or OpenAI, with a link to their policy, is clearer than saying “third parties”.
Does it use AI or upload my answers?
No. It’s built from fixed templates, and everything happens in your browser. Nothing you type is sent anywhere.
Do I need a cookie banner?
If you have visitors from the EU or UK and use cookies for analytics or ads, usually yes. Essential cookies, like the one that keeps people signed in, don’t need consent. Cookie-free analytics such as Plausible usually don’t need a banner.