core: Missing privacy manifest - Your app includes “Frameworks/GTMSessionFetcher.framework/GTMSessionFetcher”

[halhwadi]

Is there an existing issue for this?

• I have searched the existing issues.

Which plugins are affected?

Core, Messaging

Which platforms are affected?

publising the app on apple store

Description

i just uploaded my new app on app store and got error about TMS-91061: Missing privacy manifest - Your app includes “Frameworks/GTMSessionFetcher.framework/GTMSessionFetcher”,

I found that firebase_core and firebase_meesaging use GTMSessionFetcher and as per Apple store privacy manifest should be added

Currently i use these versions in my project:
firebase_core: ^2.24.2
firebase_messaging: ^14.6.8

Reproducing the issue

ensure you use the firebase packages in your project:
firebase_core: ^2.24.2
firebase_messaging: ^14.6.8

upload the flutter IOS app on apple store using xcode

Firebase Core version

2.24.2

Flutter Version

3.24.5

Relevant Log Output

Doctor summary (to see all details, run flutter doctor -v):
[✓] Flutter (Channel stable, 3.24.5, on macOS 14.6 23G80 darwin-arm64, locale en-AE)
[✓] Android toolchain - develop for Android devices (Android SDK version 34.0.0)
[✓] Xcode - develop for iOS and macOS (Xcode 16.1)
[✓] Chrome - develop for the web
[✓] Android Studio (version 2024.2)
[✓] Connected device (4 available)
[✓] Network resources

"${PODS_CONFIGURATION_BUILD_DIR}/FirebaseCore/FirebaseCore.framework/Headers" "${PODS_CONFIGURATION_BUILD_DIR}/FirebaseCoreInternal/FirebaseCoreInternal.framework/Headers" "${PODS_CONFIGURATION_BUILD_DIR}/FirebaseInstallations/FirebaseInstallations.framework/Headers" "${PODS_CONFIGURATION_BUILD_DIR}/FirebaseMessaging/FirebaseMessaging.framework/Headers" "${PODS_CONFIGURATION_BUILD_DIR}/GTMSessionFetcher/GTMSessionFetcher.framework/Headers"

Flutter dependencies

Expand Flutter dependencies snippet

Replace this line with the contents of your `flutter pub deps -- --style=compact`.

Additional context and comments

No response

[SelaseKay]

Hi @halhwadi, could you update your plugin versions and try again?

[russellwheatley]

@halhwadi - the GTMSessionFetcher framework isn't included in core or messaging. Show us your pubspec.yaml, please

[google-oss-bot]

Hey @halhwadi. We need more information to resolve this issue but there hasn't been an update in 7 weekdays. I'm marking the issue as stale and if there are no new updates in the next 7 days I will close it automatically.

If you have more information that will help us get to the bottom of this, just add a comment!

[alaake]

@google-oss-bot
This is the complete message you get from apple when uploading a new build to appstore connect:

ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/GTMSessionFetcher.framework/GTMSessionFetcher”, which includes GTMSessionFetcher, an SDK that was identified in the documentation as a privacy-impacting third-party SDK. Starting February 12, 2025, if a new app includes a privacy-impacting SDK, or an app update adds a new privacy-impacting SDK, the SDK must include a privacy manifest file. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements.

This seems like a pretty urgent issue since from February 12, 2025 this privacy manifest file is required in the SDK, otherwise developers won't be able to update their apps if they want or need to continue using this SDK.

[whann0205]

They have not waited until February.
My App just got rejected because of that missing privacy manifest.
They are numerous other infamous ITMS-91061: Missing privacy manifest i have to solve.
If "normal" people not developers knew what we have to go through just
to get something released nowadays for questionable privacy.....
Anyway can you help in this matter?

ITMS-91061: Missing privacy manifest - Your app includes “Frameworks/GTMSessionFetcher.framework/GTMSessionFetcher”, which includes GTMSessionFetcher, an SDK that was identified in the documentation as a commonly used third-party SDK. Starting February 12, 2025, if a new app includes a commonly used third-party SDK, or an app update adds a new commonly used third-party SDK, the SDK must include a privacy manifest file or you won’t be able to submit the app for review in App Store Connect. Please contact the provider of the SDK that includes this file to get an updated SDK version with a privacy manifest. For more details about this policy, including a list of SDKs that are required to include signatures and manifests, visit: https://developer.apple.com/support/third-party-SDK-requirements