# The App Store checklist built for AI-generated apps specifically

Canonical page: https://acceptmy.app/guides/vibe-coding-app-store-checklist

This isn't the general submission checklist — it's the version built around what AI coding tools specifically tend to skip. Work through it after generation, before you submit.

## Secrets and configuration

No API key, database connection string, or admin credential is hardcoded into client-side code — check anything the AI tool wired up quickly to "just make it work."

Environment-specific config (staging URLs, debug flags, test payment keys) is switched to production values in the submitted build.

## Account and auth

If the app has account creation — including default auth scaffolding from Firebase, Supabase, or Clerk — it has a matching in-app account deletion flow. This is the single most common miss in AI-scaffolded auth.

If any third-party login (Google, etc.) is offered, Sign in with Apple is offered alongside it with equal prominence.

## Privacy

A PrivacyInfo.xcprivacy manifest is present with correct required-reason API codes for anything the generated code touches (UserDefaults, file timestamps, etc.).

The App Privacy questionnaire in App Store Connect reflects what the app and any AI/analytics/backend services it calls actually collect — not a copy-pasted generic answer.

## Functionality depth

The app does something beyond its original one-line prompt — saved state, personalization, or a feature that took real thought after the first generated version.

If the app is a wrapped web build, it includes native functionality (notifications, offline support, a platform-specific feature) — not just a WebView in a frame.

## Metadata and polish

Screenshots and description reflect the finished app, not the AI tool's preview environment or the original prompt's description.

Icon, branding, and UI don't visibly match a generic template style shared by many other apps from the same builder or scaffold.

## Reviewer notes

App Review notes include real test steps and demo credentials if login is required — written for a reviewer who has never seen the app, not assumed knowledge from the build process.


## Related pages
- [From prompt to App Store: the submission process for vibe-coded iOS apps](https://acceptmy.app/guides/vibe-coded-ios-app-submission-process.md)
- [Does your app need an account deletion option? Apple's rule, explained](https://acceptmy.app/guides/app-account-deletion-requirement-ios.md)
- [iOS Privacy Manifest Validator](https://acceptmy.app/free-tools/privacy-manifest-validator.md)

Last updated: 2026-09-09