App Store · 2026
How to Publish an App on the App Store: Pre-Launch Checklist (2026)
Short answer
Build with Xcode 26 and the iOS 26 SDK. Add a 1024×1024 icon, at least one iPhone screenshot at 1179×2556 or 1206×2622 (plus 13" iPad if your app runs on iPad), a privacy policy URL and your App Privacy answers. Include a privacy manifest if you use required-reason APIs, and a working demo account if your app has a login.
Checked against Apple: Upcoming requirements, App Store Connect: Screenshot specifications, App Store Connect: App information, App Store Connect: Platform version information, Apple: Privacy manifest files, Apple: Third-party SDK requirements, Apple: App privacy details, App Store Connect: Creative asset specifications and App Review Guidelines in October 2026.
1. Build
| Requirement | Since |
|---|---|
| Built with Xcode 26 and the iOS 26 SDK | April 28, 2026 |
| Deployment target iOS 13 or later | September 9, 2026 |
| Answers to the updated age rating questions | January 31, 2026 |
Made in Lovable, Bolt, Rork or Cursor? The store only sees the native build. Expo, Capacitor and Flutter projects still go through Xcode or a cloud build (for example eas build) and upload to App Store Connect.
2. App icon
- One 1024×1024 PNG in the AppIcon set. Xcode makes every smaller size.
- Full square, no transparency, no rounded corners. An icon with alpha is rejected at upload.
- Optional dark and tinted versions for iOS 18 and later.
Details: iOS app icon sizes.
3. Screenshots
| Device | Pixels (portrait) | Needed |
|---|---|---|
| iPhone with Dynamic Island (medium) | 1179×2556 or 1206×2622 | Yes, at least one |
| iPad 13" | 2064×2752 or 2048×2732 | If the app runs on iPad |
| iPhone Duo, outer display | 1398×2034 | From April 2027 (iOS 27.1 SDK or later) |
| iPhone Duo, inner display | 2007×2853 | From April 2027 (iOS 27.1 SDK or later) |
- 1 to 10 per device size, as JPG or PNG, with no transparency.
- App Store Connect scales them down for smaller devices.
- Up to three can show in search results, so lead with your best ones.
- Show the app in use. A title card, login screen or splash screen alone gets rejected (guideline 2.3.3).
- No prices, discounts, URLs or other platforms' logos on screenshots.
iPhone Duo screenshots are optional today. Adding them also earns a badge on your product page.
Every accepted size and Apple's design advice: App Store screenshot sizes.
4. Header and search result art (iOS 27)
From iOS 27, you can add a header image or video at the top of your product page, and a separate image or video for search results. Both are optional. Without them, search shows your In-App Events, app previews and screenshots.
| Asset | Size | Format |
|---|---|---|
| Product page header image | 3840×1646 (21:9) | JPG or PNG |
| Product page header video | 3840×1646 (21:9), 5–30 s | MOV, M4V or MP4 |
| Search result image | 1920×1280 to 3840×2560 (3:2) | JPG or PNG |
| Search result video | Same range (3:2), 5–30 s | MOV, M4V or MP4 |
Details and safe areas: App Store screenshot sizes.
5. Metadata
| Field | Limit | Required |
|---|---|---|
| Name | 2–30 characters | Yes |
| Subtitle | 30 characters | No |
| Promotional text | 170 characters | No |
| Description | 4000 characters, plain text | Yes |
| Keywords | 100 bytes, comma-separated | Yes |
| Support URL | Must lead to real contact details | Yes |
| Marketing URL | — | No |
| Privacy policy URL | — | Yes |
| Copyright | e.g. 2026 Your Name | Yes |
| Age rating | Questionnaire | Yes |
Keywords: don't repeat your app or company name, and don't use other apps' or companies' names.
6. Privacy
- 01Privacy policy: link it in App Store Connect and inside the app, where people can find it.
- 02App Privacy answers: in App Store Connect, list every type of data you or your SDKs collect, including analytics and ad SDKs.
- 03Privacy manifest: add
PrivacyInfo.xcprivacy(File → New File → App Privacy File) if your code uses a required-reason API. App Store Connect doesn't accept apps that skip this. - 04SDK manifests: SDKs on Apple's list need their own manifest and signature. The list includes Firebase, Google Sign-In, the Facebook SDK, Flutter and Capacitor. Update them to current versions.
- 05AI features: if the app sends personal data to a third-party AI service, say so and ask for permission first (guideline 5.1.2(i)).
<plist version="1.0">
<dict>
<key>NSPrivacyTracking</key>
<false/>
<key>NSPrivacyTrackingDomains</key>
<array/>
<key>NSPrivacyCollectedDataTypes</key>
<array/>
<key>NSPrivacyAccessedAPITypes</key>
<array/>
</dict>
</plist>7. App Review
| Check | Guideline |
|---|---|
| Demo account that doesn't expire, or a full demo mode, if there's a login | 2.1 |
| Back end turned on during review | 2.1 |
| No placeholder text, lorem ipsum or empty screens | 2.1 |
| No crashes or broken links | 2.1 |
| Users who can create an account can delete it inside the app | 5.1.1(v) |
| Social login (Google, Facebook…) also offers a private-email option, such as Sign in with Apple | 4.8 |
| User-generated or AI-generated content has filtering, reporting and blocking | 1.2 |
Put test steps and extra accounts in Notes (up to 4000 bytes).
8. Rejections vibe-coded apps hit most
| Guideline | What it means | How to pass |
|---|---|---|
| 4.2 Minimum functionality | The app must do more than wrap a website | Use native features: offline, notifications, camera, widgets, device storage |
| 4.2.2 | Not just marketing, web clippings or a list of links | Give it a real task people come back for |
| 4.3 Spam | Not a copy of what's already widely available; no duplicate Bundle IDs | Ship one app with a clear difference; avoid flashlight, wallpaper, timer clones |
| 4.2.6 Templates | Template and app-generation services can't submit for their clients | Submit from your own developer account, as the owner of the content |
| 2.3 Accurate metadata | Screenshots and description must match the app | Capture real screens from the build you submit |
Upload and review errors
| You see | Why | Fix |
|---|---|---|
| Upload rejected for the SDK version | Built with Xcode older than 26 | Update Xcode, rebuild, upload again |
| Missing or invalid App Store icon | No 1024 icon, or it has transparency | Add an opaque 1024×1024 PNG |
| Upload rejected for the privacy manifest | Required-reason API without a reason | Add the reason in PrivacyInfo.xcprivacy; update SDKs |
| Screenshot upload fails | Wrong pixel size, or transparency | Use an accepted size, flatten to JPG or PNG |
| Rejected: 2.1 App Completeness | Login didn't work, or the back end was off | Add a demo account; keep the server up |
| Rejected: 4.2 Minimum Functionality | Looks like a website in a wrapper | Add native features, then resubmit with notes |
FAQ
Can I publish an app built with Lovable, Bolt or Cursor?
Yes, if it's a native build that passes review. Apps that only wrap a website are rejected under 4.2.
What screenshots are required in 2026?
At least one iPhone screenshot at 1179×2556 or 1206×2622 (Dynamic Island, medium), plus 13" iPad if the app runs on iPad.
Do I need a privacy manifest?
If your app or its SDKs use a required-reason API, yes. Apps without one aren't accepted. Flutter and Capacitor are on Apple's SDK list.
Do I need a privacy policy?
Yes, for every iOS app: a URL in App Store Connect and a link inside the app.
Is Sign in with Apple required?
Only if you use a third-party login like Google or Facebook. Then you need an option that keeps the email private, such as Sign in with Apple.
How much does it cost to publish?
You need an Apple Developer Program membership to submit apps.