App Release Compliance Checklist
What we check before and after releasing an app — privacy, App Store / Play Store requirements, legal, permissions, advertising, payments, security, accessibility, testing, localisation, analytics, monitoring, support, and operations. Status reflects where each app actually stands today, including open items.
Scholarship Finder
| Area | Check | Status |
|---|---|---|
| 🔐 Privacy | Privacy Policy Full text drafted; needs publishing at a stable URL before store submission | In progress |
| 🔐 Privacy | GDPR assessment Company GDPR/Data Protection Policy + app-level lawful-basis mapping in place | Done |
| 🔐 Privacy | Data collection documented Data Collection Disclosure covers every data element | Done |
| 🔐 Privacy | Data deletion process In-app deletion + DELETE /v1/me, built and tested | Done |
| 📱 Apple | App Store requirements Metadata drafted; demo account, export-compliance flag, Sign in with Apple parity to confirm at submission | In progress |
| Play Store requirements Data Safety answers drafted (ADS-ENABLED variant per ADR-012); final entry into Play Console pending | In progress | |
| 📜 Legal | Terms & Conditions Full text drafted; needs publishing at a stable URL | In progress |
| © IP | Third-party licences Open-Source Policy defines the rules; confirm the in-app licences/attribution screen is shipped | Planned |
| 🔑 Permissions | iOS permissions Only Push (+ ATT when ads on) requested | Done |
| 🔑 Permissions | Android permissions INTERNET, ACCESS_NETWORK_STATE, POST_NOTIFICATIONS (contextual), AD_ID (bundled, off by default) | Done |
| 📢 Ads | Advertising compliance AdMob SDK bundled but toggled OFF (ADR-012); ATT + EEA/UK consent flow required before enabling | Planned |
| 💳 Payments | IAP/subscription compliance Terms drafted; no active subscriptions in v1 | Planned |
| 🛡 Security | Security review Security Policy in force; annual review cadence | Done |
| ♿ Accessibility | Accessibility review Core patterns implemented (200% text, 5 locales incl. Arabic RTL); on-device audits still open | In progress |
| 🧪 Testing | Device/OS testing Tracked in the app repo's own testing documentation — confirm with the app team | Not documented |
| 🌍 Localization | Languages/content 5 locales including Arabic (RTL) implemented | Done |
| 📊 Analytics | Analytics configuration Firebase Analytics wired but OFF by default (ADR-012 Remote Config) | Planned |
| 🚨 Monitoring | Crash/error monitoring Crash/diagnostics collection declared in the Play Data Safety form; confirm the tool is wired | In progress |
| 💬 Support | Customer support Support page defines contact + ~3 business day response | Done |
| 🔄 Operations | Update/maintenance plan No update/maintenance cadence documented in the provided files — define before public release | Not documented |
Job Search Engine
| Area | Check | Status |
|---|