chore(mobile,marketing): app store submission metadata and privacy policy

Merged
SA
3mo ago
+16-11

The final code/content changes before TestFlight (launch-gate D3, D4, D7, D8):

  • iPhone-only (supportsTablet: false): no iPad screenshot set, no iPad review pass, and no stretched phone UI judged on a 13" display. One-way-door aware: device families can be added in any later update but never removed, so claiming iPad now would be irreversible.
  • Review contact (store.config.json): real phone — the org Google Voice number, which is intentionally public-safe (it also serves as the published EU trader phone if we later enable EU storefronts). Review notes rewritten: Sign in with Apple creates a free account instantly (no demo credentials), companion-app empty state explained, account deletion location cited.
  • Privacy policy: covers the mobile app (photo/camera/mic/speech permissions), names analytics (PostHog, identified), user content storage, and the grace-period deletion flow on mobile/desktop/web — including the 30-day recovery window and de-identified retention of shared-org content. Apple reviewers check that the policy matches the app.

Not included by design: app name stays "Superset Mobile" (D5), EU storefronts deferred (D6 — trader declaration is an ASC manual step regardless).

After this: manual ASC steps (age rating questionnaire, privacy nutrition labels, screenshots, trader declaration) → eas metadata:push → first production build → TestFlight.

Summary by cubic

Makes the iOS app iPhone‑only, updates App Store metadata (title, review contact, pro‑gated companion‑app notes and demo access), and expands the privacy policy for mobile permissions, analytics, and the 30‑day account deletion window. This narrows v1 review scope and aligns storefront and policy with real behavior.

What to review

  • Device family: supports iPhone only (supportsTablet: false, was true).
  • Store title: renamed from “Superset Mobile” to “Superset: AI Agent Manager”.
  • Review metadata: phone updated to +1 510 519 1602; demoRequired set to true (was false); notes clarify no in‑app purchases, external Pro subscription, companion‑app scope, demo access via “Sign in with email,” and that SSO creates a free account that lands on the subscription‑required screen; deletion path called out.
  • Privacy policy: adds mobile permissions (photos, camera, mic, speech recognition), identifies analytics (PostHog) tied to account identifiers, and documents immediate deactivation, a 30‑day recovery window, and de‑identified retention for shared org content.

Rollout

  • Complete App Store Connect items (age rating, privacy labels, screenshots, trader declaration), ensure demo account is live and referenced in review notes, run eas metadata:push, build, and submit to TestFlight.

Summary by CodeRabbit

  • Documentation

    • Updated the privacy policy with details about third-party sign-ins, AI-agent messages and attachments, analytics, device data, mobile capabilities, and account deletion timelines.
    • Clarified data retention for shared organizational content after account deletion.

  • Configuration

    • Updated iOS settings to disable tablet support.
    • Renamed the app to “Superset: AI Agent Manager.”
    • Expanded App Store review guidance for sign-in, onboarding, subscriptions, support, and account deletion.