App Information & Compliance
App Store Information
App Name: Mythivara
Premium storytelling platform with books, audiobooks, and picture books
Category: Books & Entertainment
Developer: Mythivara
Version: 1.0.0
Languages Supported:
English, Spanish, French, German, Italian, Portuguese, Arabic, Hebrew, Hindi, Chinese, Japanese, Korean, Russian, Dutch
Content Rating & Age Restrictions
App Rating: 17+ (Mature)
Mythivara contains content for various age groups. While the app includes children's content (ages 1-10) and teen content (ages 11-17), some sections contain mature content restricted to users 18+, requiring a 17+ app store rating.
Content Descriptors:
- • Infrequent/Mild Cartoon or Fantasy Violence
- • Infrequent/Mild Realistic Violence (Teen Section)
- • Frequent/Intense Sexual Content or Nudity (Adult Section - Age Restricted)
- • Infrequent/Mild Mature/Suggestive Themes
- • Infrequent/Mild Alcohol, Tobacco, or Drug Use or References
- • In-App Purchases (Digital Content)
Age Gate Protection:
Adult-only content (18+) requires mandatory age verification. Users must confirm they are 18+ before accessing mature or explicit content. This content is clearly labeled and separated from general content.
Content Categories:
- Children (Ages 1-10): Picture books with illustrations, no violence, no mature themes, appropriate language
- Teens (Ages 11-17): Adventure and coming-of-age stories, mild fantasy violence, age-appropriate themes
- Adults (Ages 18+): Mature narratives including romance, thriller, mystery genres
- Adult-Only (18+ Verified): Mature content, explicit themes - requires age verification to access
Data Collection & Privacy
What data we collect:
- • Email address and profile information
- • Reading history and preferences
- • Reviews and ratings you write
- • Achievements and progress data
- • Payment information (processed securely by Stripe)
How we use your data:
- • Personalize your experience
- • Recommend stories based on preferences
- • Track reading progress
- • Process payments for story purchases
- • Send notifications about new releases (opt-in)
Parental Controls & Child Safety (COPPA Compliance)
Age-Appropriate Content Sections
Content is clearly categorized by age (Children 1-10, Teens 11-17, Adults 18+). Parents can guide children to appropriate sections. Adult content requires age verification and is completely separated.
COPPA Compliance (Children Under 13)
- • We do not knowingly collect personal information from children under 13 without verifiable parental consent
- • Parental email verification required for accounts for children under 13
- • Parents can review, delete, or refuse further collection of their child's information
- • No behavioral advertising targeted at children
- • No sharing of children's data with third parties except as required for service operation
Parental Supervision Recommended
We recommend parents supervise children's use, especially for users under 10. Parents can monitor reading history and set spending limits through account settings.
Content Reporting
Users can report inappropriate content through the Support page. All reports are reviewed within 24 hours.
Apple App Store Review Notes
Guideline 5.1.2 — Privacy & Data Tracking
Our position: Mythivara does not track users for advertising or third-party data brokering purposes. The data listed in App Store Connect (email, user ID, purchase history, device ID, product interaction) is collected solely to operate the service — to authenticate users, process payments, deliver content, and personalise reading experience. None of this data is:
- • Linked to third-party advertising networks
- • Shared with data brokers
- • Used to build advertising profiles across apps or websites
Per Apple's definition, "tracking" specifically means linking user data with third-party data for advertising, or sharing data with a data broker. Mythivara does neither. Therefore, the AppTrackingTransparency (ATT) framework is not required.
Action taken in App Store Connect:
Update the privacy label to reflect that no "tracking" (as Apple defines it) occurs. The data collected falls under "Data Linked to You" for app functionality — not tracking. Remove "Other Usage Data" and "Emails or Text Messages" if not explicitly collected, and reclassify remaining data under "App Functionality" / "Analytics" (not "Tracking").
Guideline 2.3.6 — Age Rating / In-App Controls
Our position: The "Parental Controls" and "Age Assurance" selections in our age rating were set in error. Mythivara does not implement a formal parental control system or a third-party age assurance mechanism.
What we do have is an in-app age gate: before accessing any adult (18+) content, users must tap to confirm they are 18 or older. This is a self-declaration gate, not a verified parental control or certified age assurance system.
Action taken in App Store Connect:
Set both "Parental Controls" and "Age Assurance" to None in the Age Rating section. The app rating should remain 17+ due to mature content descriptors (sexual themes, violence), but without claiming a parental control or age assurance system that does not exist in the technical sense required by Apple.
Guideline 2.1 — App Completeness (Bug Report)
Issue reported by Apple reviewer: On iPad Air 11-inch (M3) running iPadOS 26.3, the app failed to Sign in with Apple and the Buy Token button was unresponsive.
Root Cause — Sign in with Apple:
Root Cause — Buy Tokens unresponsive:
The "Buy Tokens" button routes through Stripe Checkout (an external web payment flow), which Apple reviewers consider non-functional on iOS because it violates Guideline 3.1.1 (must use In-App Purchase). To Apple's reviewer the button appeared broken/unresponsive. Resolution: Implement StoreKit (Apple In-App Purchase) for all token purchases on iOS. The Stripe flow must be removed or hidden from the iOS binary.
Guideline 4.8 — Login Services (Sign in with Apple)
Issue: Mythivara uses a third-party login system but does not currently offer Sign in with Apple as an equivalent option.
Requirement: Apple requires that if any third-party login is offered, Sign in with Apple must also be offered as an equivalent option, since it:
- • Limits data collection to name and email only
- • Allows users to hide their real email address
- • Does not collect interaction data for advertising
Action required:
Guideline 3.1.1 — In-App Purchase (Token Currency)
Issue: Our token system (virtual currency used to unlock digital content) must be sold exclusively through Apple's In-App Purchase (IAP) system on iOS. Using Stripe or external web checkout for token purchases violates App Store guidelines on the iOS platform.
Note on US storefront: Apps in the US App Store may include a link to an external website for payment, following the court ruling in Epic v. Apple. However, this does not replace the IAP requirement — IAP must still be offered as the primary option.
Action required:
Implement Apple In-App Purchases (StoreKit) for all token packages on iOS. The current Stripe payment flow should be retained for the web version only. On the iOS app, all token purchases must route through StoreKit, with App Store Connect products created for each token package. Stripe can remain for web, but must not be accessible from within the iOS app binary.
Guideline 2.1 — China Mainland Publishing Permit
Issue: Distributing a book/magazine content app on the China mainland App Store requires an Internet Publishing License (网络出版服务许可证) issued by China's National Press and Publication Administration (NPPA).
Options to resolve:
- • Option A (Recommended): Remove China mainland from the app's distribution territories in App Store Connect until a valid NPPA Internet Publishing License is obtained.
- • Option B: Partner with a licensed Chinese publisher who holds the required permit and submit their license documentation in App Store Connect under "Publication Availability in China mainland."
- • Option C: Apply directly to China's NPPA for an Internet Publishing License — this process typically takes several months and requires a Chinese legal entity.
Immediate action: In App Store Connect → App Information → Pricing and Availability, deselect China mainland from the territory list for this submission to resolve the rejection and ship to all other regions without delay.
In-App Purchases & Monetization
Token Packages (Consumable)
- • Small Token Pack: $2.99 USD (100 Tokens)
- • Medium Token Pack: $4.99 USD (200 Tokens + 50 Bonus)
- • Large Token Pack: $9.99 USD (500 Tokens + 150 Bonus)
- • Mega Token Pack: $19.99 USD (1200 Tokens + 400 Bonus)
- • Ultimate Token Pack: $49.99 USD (3500 Tokens + 1500 Bonus)
Content Unlocks
• Reading Books: 10-30 tokens per story
• Picture Books: 15-25 tokens per book
• Series Episodes: 5-10 tokens per chapter
• Video Stories: 10-20 tokens per video
Free Content
The app includes free stories, daily rewards, and achievement-based token earning. Full browsing and discovery features are free. Purchases are optional for premium content.
Transparent Pricing
All prices are clearly displayed before purchase. Token costs are shown on each story. No hidden fees or surprise charges. Users can earn free tokens through daily rewards, streaks, and achievements.
User Rights & Account Management (GDPR/CCPA Compliant)
Users can exercise the following rights:
- ✓ Access: Request a copy of all personal data we hold
- ✓ Rectification: Correct inaccurate or incomplete data
- ✓ Erasure ("Right to be Forgotten"): Delete account and all associated data permanently
- ✓ Data Portability: Export data in machine-readable format
- ✓ Opt-Out: Unsubscribe from marketing communications at any time
- ✓ Restrict Processing: Limit how we use your data
- ✓ Object: Object to processing based on legitimate interests
Access these features in My Profile or contact Support.
Data Retention: Personal data is retained as long as your account is active. Upon account deletion, data is permanently removed within 30 days, except as required by law.
🌍 Regional Compliance & Geo-Blocking Regulations
EU Geo-Blocking Regulation (EU 2018/302)
Mythivara complies with EU Regulation 2018/302, which prohibits unjustified restriction of access to digital content based on customer location, nationality, or residence.
- ✓ EU residents can access all content from any EU country
- ✓ Pricing may vary by VAT (legitimate regulatory reason) but not by location
- ✓ No geo-blocking unless required by law or licensing agreements
- ✓ Payment methods available across all EU member states
Regional Data Protection Laws
🇪🇺 European Union (GDPR)
Full GDPR compliance including data subject rights, data protection officers, and cross-border data transfers with adequate safeguards.
🇬🇧 United Kingdom (UK GDPR & Data Protection Act 2018)
Complies with UK GDPR and UK Data Protection Act with equivalent protections as EU GDPR.
🇺🇸 United States (CCPA & COPPA)
CCPA compliance for California residents. COPPA compliant for children under 13 with parental verification.
🇨🇦 Canada (PIPEDA)
Personal Information Protection and Electronic Documents Act compliance for Canadian users.
🇦🇺 Australia (Privacy Act)
Australian Privacy Act compliance including APP (Australian Privacy Principles) adherence.
Age Verification by Region
- • EU/UK: Digital age verification for 18+ content (GDPR Article 8 compliant)
- • USA: Age verification required for adult content in states with age-gating laws
- • Australia: Classification Board compliance for content ratings
Payment & Tax Compliance
- • EU VAT: Compliant with EU VAT directives for digital services
- • US Sales Tax: Compliant with US state tax requirements
- • Payment Methods: Available payment methods comply with local regulations in each country
- • Currency: Pricing available in major global currencies
Content Restrictions by Country
- • Adult-only content requires age verification in all regions
- • Content complies with local laws regarding explicit material, violence, and cultural sensitivity
- • Users in restricted regions are clearly informed before accessing region-specific content
- • Compliance with local rating boards (ESRB, PEGI, ClassInd, etc.)
Export Compliance & Encryption Documentation
Encryption Usage Declaration
This app uses standard, publicly available encryption solely to protect user data in transit and at rest. It does not implement any proprietary or custom encryption algorithms.
Encryption Technologies Used
- • HTTPS / TLS 1.2+: All network communications are encrypted using industry-standard TLS (Transport Layer Security). This is handled by the operating system and underlying platform — not custom code.
- • HTTPS API Calls: All third-party API calls (Stripe, audio providers, AI services) are made over HTTPS.
- • Platform Authentication: User authentication tokens are transmitted over TLS. No custom cryptographic code is implemented.
Export Compliance — US EAR (Export Administration Regulations)
- ✓ This app qualifies for EAR99 classification (no export licence required)
- ✓ Encryption is used exclusively for securing data in transit — not as a primary feature of the app
- ✓ No custom encryption algorithms — relies solely on OS-level and platform-provided TLS
- ✓ App is a consumer storytelling/entertainment app with no military, government, or dual-use functionality
- ✓ Exempt from BIS encryption reporting requirements under Section 740.17(b) (ENC exception)
Apple App Store Export Compliance Answers
Does this app use encryption? — Yes (standard HTTPS/TLS only)
Is the encryption exempt from export regulations? — Yes — uses only standard HTTPS provided by iOS/platform
Does the app qualify for the "Standard Encryption" exemption? — Yes — encryption is used solely to protect data in transit, not as a primary feature
Is an ERN (Encryption Registration Number) required? — No — app qualifies under the standard encryption exemption
Legal Basis: Per US Bureau of Industry and Security (BIS) regulations, apps that use encryption solely for standard HTTPS data-in-transit protection (and not as a standalone product feature) are exempt from encryption export licensing requirements and do not require an ERN. This app falls under the ENC exception (15 CFR § 740.17).
Security & Data Protection
- • Encryption: All data transmitted between app and servers uses TLS 1.3 encryption
- • Secure Storage: Personal data stored on secure, encrypted servers
- • Payment Security: PCI-DSS compliant payment processing via Stripe - we never store full credit card numbers
- • Access Controls: Strict internal access controls and regular security audits
- • Third-Party Services: All third-party services vetted for security and privacy compliance
Contact Information
Developer: Mythivara
Support: Available through in-app Support Chat
Response Time: Typically within 24-48 hours
Privacy Inquiries: Contact via Support for GDPR/CCPA requests
Intellectual Property & Purchase Rights
All content on this app is protected on an all-rights-reserved basis. Users may browse the app, but may not clone, copy, mirror, scrape, white-label, or commercially reuse the app, its structure, designs, branding, or content library without written permission.
When a user purchases a specific item, that purchased item belongs to the buyer for their own use and enjoyment. The purchase does not transfer ownership of the full app, the Mythivara brand, the software, or any content that was not purchased.