App Privacy Compliance AI
Paste the following prompt into your AI chat to install this skill:
Please install @user_0d0ab158/app-privacy-compliance using https://skillhub.cn/install/skillhub.md.
About this skill
What It Addresses
For apps and mini programs operating in mainland China, privacy compliance failures often surface as rejected app store reviews, regulator notices, user complaints, or missing disclosures around permissions, SDKs, and personal information. This skill structures those issues into a practical workflow: audit risks, draft or revise policies, prepare remediation responses, and support resubmission.
How It Works
- Privacy audit: checks privacy policies, permissions, SDKs, and user rights using
references/detection-checklist.md, then outputs risk levels, legal basis, and remediation steps. - Policy drafting: uses
references/protocol-templates.mdandreferences/compliance-framework.mdto collect operator, business function, data type, SDK, and minor-related details, then drafts privacy or user agreements with compliance annotations. - Remediation: analyzes regulator notices, store rejections, or complaints, separates root cause, engineering changes, policy wording changes, and evidence packaging.
- Review support: prepares platform-specific checklists for iOS App Store, Android vendors, WeChat mini programs, and MIIT filing, then pre-reviews submission materials for likely rejection points.
It also adapts output by role: legal teams get consequence and wording focus, engineers get AndroidManifest, SDK integration, and permission guidance, while business owners get risk and timeline summaries.
Scope And Limits
The skill is scoped to mainland China App and mini program privacy compliance support. It does not cover GDPR or CCPA cross-border compliance and does not replace enterprise data governance design. It provides compliance assistance rather than formal legal advice; for major decisions, verify current regulations and consult licensed counsel.
Use Cases
- After an app store rejects a release for privacy policy noncompliance, locate permission, SDK, and notice gaps and prepare remediation responses.
- Before submitting a WeChat mini program, review privacy settings, API disclosures, SDK lists, and permission timing against store requirements.
- Draft an e-commerce app privacy policy covering required personal data, sensitive data notices, SDK disclosures, and the six user rights clauses.
- After an MIIT notice, analyze delisting reasons and produce permission reduction, deferred request, and evidence-pack remediation steps for engineering and legal.
Best For
- Legal or compliance owners handling app store review, who need to verify privacy policies, permission notices, SDK disclosures, and submission files.
- Android, iOS, or mini program engineers who need to implement privacy remediation in permission timing, SDK integration, configuration, and code changes.
- Mini program or product operations leads who need to assemble privacy settings, API usage notes, SDK lists, and privacy guidance before review.
- Outside counsel or compliance advisors who need PIPL, DSL, and CSL text review, disclosure checks, and risk assessment.
Related Skills
Switch AI from a polite executor into a skeptical thinking partner, using assumption checks, pre-mortems, and evidence gates to expose weak ideas early.
Applies research discipline, data lookup, evidence grading, red-team checks, and structured reporting to analyze AI company investment logic.
Uses Qichacha or Tianyancha MCP data and public information to score corporate credit across 12 dimensions and output a Markdown risk report.
Calculates personal injury compensation via CLI and outputs case summary, standards, line items, sources, and risk notes.