App Store Review Notes

Privacy Policy URL

Declared in App Store Connect: ieltsmasterflow.com/PrivacyPolicy (reachable without login, no redirect, loads correctly on iOS Safari).

In-App link

The Privacy Policy is linked in three places inside the app: (a) the footer of every page, (b) the AI Consent modal ("learn more" text), and (c) the Settings / account section in the mobile nav.

Data Types Declared in App Store Connect

All analytics are first-party and anonymised (Google Analytics 4 with analytics_storage denied by default until the user explicitly accepts analytics cookies). GA4 is isolated to the app's WKWebView and cannot be read by Safari or other apps.

This is explicitly documented in the Privacy Policy §6. If the app's tracking practices change in a future update, an ATT prompt will be implemented before release.

GA4 analytics storage is permanently denied via the Consent API on module load — no analytics cookies are written at any point:

// components/CookieConsent.jsx — applied on module load
if (typeof window !== 'undefined' && window.gtag) {
  window.gtag('consent', 'default', {
    analytics_storage: 'denied',
    ad_storage: 'denied',
  });
}
// No UI rendered — component returns null

Only strictly necessary cookies are used (auth session, Stripe fraud-prevention). These do not require user consent under GDPR or Apple's guidelines as they are essential for the service to function.

No tracking occurs. No cookie banner appears. No ATT prompt is needed.

NSMicrophoneUsageDescription value:

"This app requires microphone access to record your voice notes and audio memos, which are saved directly inside your app history for playback."

Localised strings (Info.plist / Localizable.strings)

When the permission prompt appears:

The microphone is only accessed when the user actively taps Record. It is never accessed in the background and is not used for any purpose other than recording the spoken IELTS response.

How it works (code summary):

// hooks/useAIConsent.js
const CONSENT_KEY = "ielts_ai_consent";

export function hasAIConsent() {
  const record = JSON.parse(localStorage.getItem(CONSENT_KEY) || "null");
  return record?.granted === true;
}

// In Writing / Speaking / DailyQuestion pages:
// Before calling InvokeLLM → check hasAIConsent().
// If false → show <AIConsentModal>.
// Modal "I Agree" button → setAIConsent(true) → resumes submission.
// Modal "Decline" → clears form, nothing is sent.

What the modal shows:

• Exact fields that will be sent (response text, question prompt, task metadata) with real examples.
• Prominent green box listing what is never sent (name, email, device ID, IP, audio).
• Named third parties (Anthropic, Base44) with links to their privacy policies.
• Link to revoke consent at any time from the Privacy Policy.

Features gated by AI consent:

• Writing — Submit for Grading (Task 1 & Task 2)
• Speaking — AI feedback on recorded/typed responses
• Daily Question — AI coaching feedback on Home dashboard

To test the AI consent flow:

To revoke consent:

Available Plans:

How IAP works (iOS):

• On the Pricing screen, iOS users see "Subscribe with Apple" buttons that invoke StoreKit via a JavaScript → WKWebView message bridge (window.webkit.messageHandlers.iap).
• On successful purchase, the native layer posts a iap_result message back to the WebView, which updates the user's subscription_tier in the database.
• Users who subscribed on the web can tap "Restore previous purchases" at the bottom of the Pricing screen to restore access.
• All gated features unlock immediately after purchase confirmation without requiring re-login.

Cross-platform access (guideline 3.1.3(b)):

Users who subscribed via the web (Stripe) can access their content in the iOS app by logging in. Their subscription_tier is read from the server on every session — no iOS purchase is required for existing web subscribers.

iOS pricing flow for review:

The demo account is on the Free tier. The paywall overlay on the Writing feedback panel (criteria breakdown blurred) is visible after grading. This verifies the purchase gate is active.

Complete Review Walkthrough (in order):