update_data_safety
Submit the Data safety declaration. data_collection="none" declares the app collects and shares NO user data; data_collection="collects" files the per-data-type questionnaire from data_types. REQUIRES update_privacy_policy to have been called first. This is a public, legally-meaningful statement about the app: "none" is a FALSE declaration for any app that collects anything at all, including a push notification token, so confirm what the app actually collects with the user rather than assuming. Nothing is defaulted on your behalf — an unknown data type or a missing purpose is refused, not approximated. An app where users can sign up must also answer the account section (questions 92-96); pass the real account_creation_methods plus the deletion URLs rather than defaulting to "none", which publicly declares the app has no sign-up.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data_types | No | Required when data_collection="collects". JSON array, one object per data type the app collects or shares: {"type": <data type>, "collected": bool, "shared": bool, "ephemeral": bool, "required": bool, "collection_purposes": [...], "sharing_purposes": [...]}. "required" means users cannot use the app without providing it. Purposes: app_functionality, analytics, developer_communications, fraud_prevention_and_security, advertising_or_marketing, personalization, account_management. Data types include name, email_address, phone_number, physical_address, user_ids, purchase_history, payment_info, device_or_other_ids, approximate_location, precise_location, photos, videos, contacts, crash_logs, diagnostics, app_interactions, installed_apps, files_and_docs, health_info, fitness_info — the tool's error detail lists the full set if one is rejected. | |
| play_app_id | Yes | Numeric Play app id from the Play Console URL (.../app/<this>/...). NOT the package name. | |
| developer_id | Yes | Numeric Play Console developer id (from the Play Console URL). | |
| data_collection | Yes | "none" (app collects/shares nothing) or "collects" (then data_types is required). | |
| data_deletion_url | No | Public https URL where users request data-only deletion (question 96). Needed when supports_data_deletion is "yes". | |
| account_deletion_url | No | Public https URL where users can request account deletion (question 94). Play requires this once the app declares real account creation. Must be reachable without signing in. | |
| encrypted_in_transit | No | Required when data_collection="collects": "true"/"false" — is all collected user data encrypted in transit? Confirm with the user; do not assume. | |
| google_account_email | Yes | The signed-in Google account email that owns this Play Console developer account. Call list_accounts first and confirm with the user — do not guess. | |
| notification_message | No | Short user-facing sentence for this action if the follow-up reply fails. Plain text only; do not mention template syntax or variable names. | |
| supports_data_deletion | No | Question 95 — can users delete their data WITHOUT deleting the whole account? It looks like a yes/no but is a three-way choice: "yes", "no", or "no_auto_deleted" (the app deletes the data automatically). Confirm with the user. | |
| account_creation_methods | No | For data_collection="collects": how users create accounts in the app. MANDATORY for Play (omitting it makes the submission fail with a bare INVALID_ARGUMENT), so it is always sent. Comma-separated — question 92 is a MULTIPLE choice and an app can offer several. Values: none, other, user_id_and_password, user_id_and_other_auth, oauth, user_id_password_and_other_auth, non_app_account, id_through_product_or_service, enterprise_app. "none" means the app has NO sign-up at all and cannot be combined with another value — it is a false declaration for any app with a login, so confirm with the user. Anything other than "none" makes Play require follow-ups; the tool reads the app's live questionnaire and tells you exactly which of account_creation_method_other, account_deletion_url, supports_data_deletion and data_deletion_url it needs. | |
| user_can_request_deletion | No | Required when data_collection="collects": "true"/"false" — can users request that their data be deleted? Confirm with the user; do not assume. | |
| account_creation_method_other | No | Free text describing the sign-up method, for question 93. Required when account_creation_methods includes "other". Ask the user; do not invent a description. |