Privacy Policy

Adding a privacy policy to your app's store listing helps provide transparency about how you treat sensitive user and device data.
The privacy policy must, together with any in-app disclosures, comprehensively disclose how your app collects, uses and shares user data, including the types of parties with whom it’s shared. Google is unable to provide you with legal advice and you should consult your own legal representative.

• For apps that request access to sensitive permissions or data (as defined in the user data policies): You must link to a privacy policy on your app's store listing page and within your app. Make sure your privacy policy is available on an active URL, applies to your app, and specifically covers user privacy.
• For apps in the Designed for Families program: You must link to a privacy policy on your app's store listing page and within your app, regardless of your app's access to sensitive permissions or data. Make sure your privacy policy is available on an active URL, applies to your app, and specifically covers user privacy.
• For other apps: You're not required to post a privacy policy.

Add a privacy policy to your store listing

1. Go to your Play Console.
2. Select an app.
3. Select Store presence > Store listing.
4. Under "Privacy Policy," enter the URL where you have the privacy policy hosted online.
5. Save your changes.. 

What a basic privacy policy should say

At a minimum, your privacy policy should answer the three questions below. You can also consider addressing additional topics, such as your information security practices, how users can change or delete their data, and how long you retain users' data.

Note: Your privacy policy must be attributable to your Actions project. Make sure your privacy policy includes your project's name.

Remember, your policy needs to accurately describe your specific Action, so not everything in this guide may be applicable and you may need to disclose practices not described here. If you handle information outside of the Google Assistant, such as through an app or website, your policy should consider all the ways the user could interact with your service and disclose the collection, use, and sharing for those interactions.

• What information do you collect?
  In your policy you should disclose all the information your Action collects. This includes information that you may collect automatically, such as server and HTTP logs, data transmitted by the Actions on Google API to you, and usage information. This also includes information that you get from the user, either directly or via the permissions API. You should also disclose whether you collect any persistent identifiers (like the Google ID).
• How do you use the information?
  In your policy, you should disclose how you use the information you collect. For example, you may use the information to provide certains services to users, to recognize them the next time they use your Action, or to send them promotional emails.
• What information do you share?
  In your policy, you should disclose the circumstances when you share information. For example, you may share information with third parties as part of the service (like a restaurant reservation Action), with other users (like a social network or forum), with marketing partners, or with service providers that assist with your service (like hosting companies or technology platforms).

Where to host your privacy policy

You can host your privacy policy with any publicly accessible URL, such as a Google Site, public Google Doc or hosted PDF (i.e. http://mysite.com/my-privacy-policy.pdf).

Use Google Sites for a Privacy Policy

1. Go to Google Sites and create a new site.
2. Fill in your action's name, the title of the page, and text of your privacy policy. You can also adjust the theme and colors by selecting the Themes tab in the upper right corner.
3. Click Publish and give your site a name.
4. Copy and paste your site's URL in the Privacy Policy field when you register your action.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 3.0 License, and code samples are licensed under the Apache 2.0 License. For details, see our Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated July 17, 2018.