Appoval scans your iOS, React Native, or Flutter project against all App Store guidelines and flags blockers before you submit. Free static check — no login needed.
I built Appoval after getting an app rejected by Apple for a missing privacy manifest entry — a 2-line fix that cost me 4 days of back-and-forth.
I looked for a tool that could catch this automatically.
Nothing existed. So I built it.
Appoval runs a full static + AI-powered analysis of your project against the latest App Store guidelines:
Privacy manifests & NSUsageDescription keys
Entitlements mismatches
IAP & StoreKit issues
ATS configuration
Design & metadata guidelines
Security flags
Works with iOS (Swift), React Native, and Flutter. GitHub webhook support so every push gets scanned — no manual step.
Would love your feedback. Especially from anyone who's been burned by a surprise rejection.
Report
I personally had experience with the App Store approval and it was painful, glad to see there is a solution to this now!
I have a quick question, do you advise on things like "You have OTA functionality, make sure not to push updates over-the-air while its in review" or "your app has a closed auth, make sure to provide example credentials for the app reviewer"?
@jarjarmadeit That’s a great catch! Currently, Appoval focuses primarily on technical compliance (private APIs, metadata rules, and static analysis).
However, adding 'Contextual Submission Tips' is definitely on my roadmap. I am looking into detecting dependencies like CodePush or Expo Updates to trigger a warning about pushing updates during review.
Also, about credentials & co, there is some guidelines not covered: some of them need app store description, screenshots, keywords, review notes, etc... I am working on an App Store Connect integration to automate the verification of submission-specific guidelines.
Thanks for the feedback – stay tuned for updates!
Report
Congrats on the launch! Beyond privacy manifests and entitlements, are there plans to expand Appoval's ruleset to cover Google Play guidelines as well or is the focus staying iOS-first for now? How does Appoval stay in sync as Apple updates its guidelines? Is the ruleset manually maintained, pulled from an official source, or does the AI component handle the delta automatically?
As iOS dev, I currently focusing on App Store, but maybe I will able to support Play Store.
Ruleset is manually maintained, because I don’t use guidelines as they are provided by Apple: I manually override each guideline to give more context, check spec to AI. Furthermore, I have incorporated numerous custom guidelines based on my past interactions with the Apple review process.
Report
As a solo founder currently building my first app, this caught my eye! Any plans to support Google Play guidelines down the road?
@boukar_sall Not yet, Appoval is intended to be a part of CI/CD process: beyond the free analysis, you have to connect your github repo. Push & PR also launching analysis.
Would you be interested in being able to easily analyze a project without relying on GitHub or a monthly subscription?
Report
Had the same thing happen with a web app — wrong security header that nobody caught until it was already in prod. One-line fix, but finding it mid-deploy is a different story. Makes sense to have this running automatically before you even get to that point.
Replies
Appoval
Hey hunters,
I built Appoval after getting an app rejected by Apple for a missing privacy manifest entry — a 2-line fix that cost me 4 days of back-and-forth.
I looked for a tool that could catch this automatically.
Nothing existed. So I built it.
Appoval runs a full static + AI-powered analysis of your project against the latest App Store guidelines:
Privacy manifests & NSUsageDescription keys
Entitlements mismatches
IAP & StoreKit issues
ATS configuration
Design & metadata guidelines
Security flags
Works with iOS (Swift), React Native, and Flutter. GitHub webhook support so every push gets scanned — no manual step.
Would love your feedback. Especially from anyone who's been burned by a surprise rejection.
I personally had experience with the App Store approval and it was painful, glad to see there is a solution to this now!
I have a quick question, do you advise on things like "You have OTA functionality, make sure not to push updates over-the-air while its in review" or "your app has a closed auth, make sure to provide example credentials for the app reviewer"?
Congrats on the launch! 🎉
Appoval
@jarjarmadeit That’s a great catch! Currently, Appoval focuses primarily on technical compliance (private APIs, metadata rules, and static analysis).
However, adding 'Contextual Submission Tips' is definitely on my roadmap. I am looking into detecting dependencies like CodePush or Expo Updates to trigger a warning about pushing updates during review.
Also, about credentials & co, there is some guidelines not covered: some of them need app store description, screenshots, keywords, review notes, etc... I am working on an App Store Connect integration to automate the verification of submission-specific guidelines.
Thanks for the feedback – stay tuned for updates!
Congrats on the launch! Beyond privacy manifests and entitlements, are there plans to expand Appoval's ruleset to cover Google Play guidelines as well or is the focus staying iOS-first for now? How does Appoval stay in sync as Apple updates its guidelines? Is the ruleset manually maintained, pulled from an official source, or does the AI component handle the delta automatically?
Appoval
@rephelper Hi buddy, ty for support!
As iOS dev, I currently focusing on App Store, but maybe I will able to support Play Store.
Ruleset is manually maintained, because I don’t use guidelines as they are provided by Apple: I manually override each guideline to give more context, check spec to AI. Furthermore, I have incorporated numerous custom guidelines based on my past interactions with the Apple review process.
As a solo founder currently building my first app, this caught my eye! Any plans to support Google Play guidelines down the road?
Appoval
@jasmin_v Hi!
Perhaps further down the road, when the current product is more mature.
do you have a one-time analysis ?
Appoval
@boukar_sall Not yet, Appoval is intended to be a part of CI/CD process: beyond the free analysis, you have to connect your github repo. Push & PR also launching analysis.
Would you be interested in being able to easily analyze a project without relying on GitHub or a monthly subscription?
Had the same thing happen with a web app — wrong security header that nobody caught until it was already in prod. One-line fix, but finding it mid-deploy is a different story. Makes sense to have this running automatically before you even get to that point.