Privacy compliance
Privacy Manifest
Background
iOS SDK versions 4.2.0+ contain a privacy manifest file in compliance with Apple's requirements for third-party SDKs. This privacy manifest discloses all of the data types that Rokt's SDK can collect within its control (i.e. unilaterally) and how this data is used.
Content
The privacy manifest discloses the collection of the following 4 data types:
1. NSPrivacyCollectedDataTypeProductInteraction
Rokt's SDK has control over collecting data about user interactions on the Rokt placement such as link and button clicks. For this data type, the privacy manifest also discloses:
- NSPrivacyCollectedDataTypeLinked = true: Placement interaction data can be linked to any of the user attributes that the partner passes to the Rokt integration.
- NSPrivacyCollectedDataTypeTracking = false: Rokt does not use any data for tracking purposes.
- NSPrivacyCollectedDataTypePurposes = [NSPrivacyCollectedDataTypePurposeAnalytics]: This data is used for analytics purposes as per the Apple definition "using data to evaluate user behavior, including to understand the effectiveness of existing product features".
2. NSPrivacyCollectedDataTypeAdvertisingData
Rokt's SDK has control over collecting data about the offers shown in the placement. For this data type, the privacy manifest also discloses:
- NSPrivacyCollectedDataTypeLinked = true: Offer impression data can be linked to any of the user attributes that the partner passes to the Rokt integration.
- NSPrivacyCollectedDataTypeTracking = false: Rokt does not use any data for tracking purposes.
- NSPrivacyCollectedDataTypePurposes = [NSPrivacyCollectedDataTypePurposeAnalytics, NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising, NSPrivacyCollectedDataTypePurposeDeveloperAdvertising]: This data is used for analytics purposes as per the Apple definition "using data to evaluate user behavior, including to understand the effectiveness of existing product features". This data is used for third-party and first-party ads.
3. NSPrivacyCollectedDataTypePerformanceData
Rokt's SDK has control over collecting data about placement launch time performance. For this data type, the privacy manifest also discloses:
- NSPrivacyCollectedDataTypeLinked = true: Placement launch time performance can be linked to any of the user attributes that the partner passes to the Rokt integration.
- NSPrivacyCollectedDataTypeTracking = false: Rokt does not use any data for tracking purposes.
- NSPrivacyCollectedDataTypePurposes = [NSPrivacyCollectedDataTypePurposeAppFunctionality]: This data is used to ensure the SDK's functionality as per Apple's definition of this being something to “ensure server up-time, minimize app crashes, improve scalability and performance”.
4. NSPrivacyCollectedDataTypeOtherDiagnosticData
Rokt's SDK collects and reports other technical diagnostic data. For this data type, the privacy manifest also discloses:
- NSPrivacyCollectedDataTypeLinked = true: Technical diagnostic can be linked to any of the user attributes that the partner passes to the Rokt integration.
- NSPrivacyCollectedDataTypeTracking = false: Rokt does not use any data for tracking purposes.
- NSPrivacyCollectedDataTypePurposes = [NSPrivacyCollectedDataTypePurposeAppFunctionality]: This data is used to ensure the SDK's functionality as per Apple's definition of this being something to “ensure server up-time, minimize app crashes, improve scalability and performance”.
Actions required by the partner
Rokt relies on the partner to disclose, in their own privacy manifest, the attributes that they collect and send in their Rokt integration. The full list of collected data types that Apple requires app developers to report can be found here.
XCFramework Signature
Background
For iOS SDK versions 4.2.0+, the XCFramework is codesigned in compliance with Apple's requirements for third-party SDKs.
Verification
The partner may verify the integrity of the SDK by following these steps.