Skip to content

App Store rejectionApp Store Guideline 2.5.2: app downloads or runs code that changes its features

Guideline 2.5.2 is the App Store rule that apps must be self-contained and may not download or run code that adds or changes features. A rejection can point at an over-the-air update setup, a plugin system, or AI-generated code the app runs.

Short answer

Find what Apple saw: a remote update, downloaded scripts, or code the app generates and runs. Put every feature in the reviewed build, keep over-the-air updates to fixes, and if users run small HTML5 or JavaScript apps inside yours, follow Guideline 4.7. Then reply to App Review with what changed.

Rather not fix it yourself? App Fix Ticket starts with a fixed-price diagnosis, then a fixed price for the fix before any fix work.

What triggers 2.5.2, and the fix

  1. 01

    Features arrive after review

    Apple’s text bars downloaded or executed code that introduces or changes features. A remote update that switches on a feature the reviewer never saw risks this, so ship new features in a new build and use remote updates for fixes.

  2. 02

    The app downloads and runs code

    “nor may they download, install, or execute code which introduces or changes features or functionality of the app, including other apps.” Apple, Guideline 2.5.2

    A plugin system that fetches scripts, or a remote config that switches on hidden code paths, changes what the app does after review. Remove it, or describe and show it to App Review.

  3. 03

    Features are hidden from the reviewer

    “Don’t include any hidden, dormant, or undocumented features in your app; your app’s functionality should be clear to end users and App Review.” Apple, Guideline 2.5.19

    A feature flag that keeps part of the app off during review can look like a dormant feature. Turn it on for the review build, or describe it in the review notes.

  4. 04

    Users run mini apps or AI-made code

    “Apps may offer certain software that is not embedded in the binary, specifically HTML5 and JavaScript mini apps and mini games, streaming games, chatbots, and plug-ins.” Apple, Guideline 4.7

    An app builder or AI tool that runs HTML5 or JavaScript mini apps falls under 4.7, which allows them with rules: privacy, content filtering and reporting, in-app purchase for digital goods, an index of the software with universal links, and age limits.

Checked against the vendor’s docs on : App Store Review Guidelines: 2.5.2; App Store Review Guidelines: 4.7 Mini apps.

Rather hand it over?

Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.

Resubmit before Apple’s holiday slowdown

Pay for the Diagnosis and send the rejection and access to the app by (US Eastern). The Diagnosis is back by . Pay for the Fix that day and it arrives as a pull request by , in time to build and resubmit before .

In past years Apple said reviews may take longer around the holidays: December 20 to 26 in 2024 (opens in a new tab), December 22 to 27 in 2023 (opens in a new tab), December 23 to 27 in 2022 (opens in a new tab). Apple hasn’t posted its 2026 dates yet (checked ). Approval stays Apple’s decision.

“Very responsive, attentive to fixing bugs, and completed the project as needed! Thank you!”
A buyer in the United States, July 2022. Shopify on Fiverr
All 127 Fiverr reviews

Related: App Store Guideline 2.5.1 · App Store Guideline 2.1 · App Store Guideline 1.2 · App Store Guideline 5.1.2

Questions

More on this rejection

Should I reply to App Review or appeal?

Reply first. Apple says you can correspond with App Review in App Store Connect to resolve the issues before resubmitting, which is the place for a demo account, a screen recording or an explanation. Appeal to the App Review Board only if you believe App Review misunderstood the app or treated you unfairly. Apple allows one appeal per rejected submission and asks for specific reasons the app complies.

Do I need a new build for a 2.5.2 rejection?

Usually yes, because the code that downloads or runs features lives in the binary. Remove or limit it, then submit a new build with notes on what changed.

Can you fix it for me?

Yes, through the App Fix Ticket: you send the rejection message and access to the app, Simon writes a diagnosis of what App Review hit and how to fix it, then fixes the code so you can resubmit. Each step has a fixed price, paid upfront. Approval stays Apple’s decision; the ticket covers the fix.

A different error?

Describe it and get a written quote

Send the error and what you were doing. You get a written scope, a fixed price and a timeline; Simon replies by email, usually within one business day.