Short answer
Put the policy on a public web page with a valid HTTPS certificate that loads without a login, from any country. Make it about this app and what data it collects and shares. Add the URL under App content > Privacy policy in Play Console, add the same link inside the app, then send the update for review.
Rather not fix it yourself? App Fix Ticket starts with a fixed-price diagnosis, then a fixed price for the fix before any fix work.
What Play checks, and the fix
01
The policy is linked in one place, not both
“You must link to a privacy policy on your store listing and within your app, even if your app doesn't access personal or sensitive user data or target children.” Google Play Console Help, Prepare your app for review (Privacy policy)
Play wants the link in Play Console and inside the app. An app with no account and no tracking still needs one. A reviewer may not sign in, so don’t hide the in-app link behind login: put it on the sign-in or first screen as well as in Settings.
02
The URL doesn’t load for the reviewer
“It is accessible worldwide without geographical restrictions, geofencing, or login requirements.” Google Play Console Help, Prepare your app for review (Privacy policy)
An expired domain, a broken SSL certificate, a page behind a login, or a site that blocks some countries or bots all fail. Open the exact URL from Play Console in a private window, on mobile data if you can.
03
The link opens a PDF, a doc or an editable page
“It is displayed on a standard, non-editable webpage (not a PDF or downloadable file).” Google Play Console Help, Prepare your app for review (Privacy policy)
A PDF download doesn’t count, and a shared Google Doc or an editable Notion page isn’t a standard, non-editable web page. Publish the policy on your own domain or a static host.
04
The policy is generic or names another app
“It applies specifically to your app, covers user privacy, and comprehensively discloses how your app collects, uses, and shares user data” Google Play Console Help, Prepare your app for review (Privacy policy)
A template with another app’s name, or a company policy that never names this app, can be rejected. Use the same app and developer name as the listing, list the data the app collects (including what SDKs such as analytics, ads and crash reporting collect), say why and who it is shared with, and say how users can ask for their data to be deleted if you collect any. Keep it in line with the Data safety form.
05
The URL has no valid SSL certificate
“It is hosted on an active, publicly accessible URL (starting with http:// or https://) with a valid SSL certificate.” Google Play Console Help, Prepare your app for review (Privacy policy)
Play asks for an active, public URL with a valid SSL certificate. Use an https:// address, and check that the certificate hasn’t expired and covers the exact host name you linked.
Checked against the vendor’s docs on : Google Play Console Help: Prepare your app for review.
Rather hand it over?
Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.
“Very responsive, attentive to fixing bugs, and completed the project as needed! Thank you!”
Related: Google Play Data safety form rejected · Google Play photo and video permissions · Google Play 12 testers for 14 days · Google Play impersonation