PrivacyInfo.xcprivacy file doesn't get included for Lottie 4.4.1 SPM

[jaishankar]

Which Version of Lottie are you using?

Lottie 4.4.1

Expected Behavior

When used the version of Lottie 4.4.1 through SPM using below package url
.package(url: "https://github.com/airbnb/lottie-spm.git", from: "4.4.1")

and when we create archive of app > Generate Privacy Info, the .pdf generated should contain the Lottie's Privacy info.

Actual Behavior

When used the version of Lottie 4.4.1 through SPM using below package url
.package(url: "https://github.com/airbnb/lottie-spm.git", from: "4.4.1")

and when we create archive of app > Generate Privacy Info, the .pdf generated does not contain the Lottie's Privacy info.

While I am able to see the PrivacyInfo for other dependencies are getting detected, I couldn't see for Lottie. For the dependencies that are getting their privacy info detected I am seeing resolved source packages folder in my local machine contains the PrivacyInfo.xcprivacy. However for the Lottie I don't see the file being available under this folder which I doubt the reason its not getting detecting while generating privacy info

Please let us know. Thanks in advance!

[ben-p-commits]

@calda , the deadline from Apple is fast approaching. (May 1st) Any update on when this will be released?

[calda]

Are you sure the current behavior is incorrect?

When I archive an example app using lottie-spm 4.4.1 and click "Generate Privacy Report", it succeeds and exports a blank PDF.

When I archive an example app using lottie-spm 4.3.0 and click "Generate Privacy Report", it fails with the message "The archive does not contain any PrivacyInfo.xcprivacy files."

To me this suggests that the privacy manifest inside lottie-ios is being detected properly by Xcode.

[jaishankar]

Hi @calda
"When I archive an example app using lottie-spm 4.4.1 and click "Generate Privacy Report", it succeeds and exports a blank PDF."

The generated privacy report should not be blank right, it should be having the privacy details included from the Lottie-spm. For eg. when I include Firebase and generate privacy report I could see the firebase privacy information showing up in the generated PDF. Can you please clarify?

[Ded77]

I read that Xcode includes only NSPrivacyCollectedDataTypes in the report, not NSPrivacyAccessedAPITypes.

[jaishankar]

ok @calda Managed to create a sample project with Lottie-iOS added through pods, I am seeing the generated privacy report PDF empty there as well. Looks like only privacy nutrition labels from the dependency's manifest might get included in the generated privacy report, based on my experiment.

However I still have one question, where the PrivacyInfo.xcprivacy file is not included in the resolved package folder as per the screenshot attached in my issue report, where as I could see this being available when I install with pods. Also see this file for Firebase Crashlytics added through SPM.

If you could confirm this has no rejections / ask to include this Privacy reason by Apple review with 4.4.1 Lottie added through SPM, would be very helpful. Thanks in advance!

Lottie through SPM

Lottie through Pods

Firebase Crashlytics through SPM

[jaishankar]

yep @Ded77 observing the same

[calda]

lottie-spm integrates a binary XCFramework of the lottie-ios repo. The privacy manifest is included in that binary XCFramework, so doesn't show up in Xcode. We've just confirmed that this part is working as expected.

To reduce confusion, I'll add the privacy manifest text file to the lottie-spm repo as well.

[jaishankar]

Thanks for the update

[Neusoft-Songtn]

hello.

I noticed that the reasons for using File Timestamp were described in the Add privacy manifest in version 4.4.0, but I found the use of CACurrentMediaTime in lottie. However, Apple's interpretation of CACurrentMediaTime is /* Returns the current CoreAnimation absolute time. This is the result of

• calling mach_absolute_time () and converting the units to seconds. */ Clearly states that calling mach_absolute_time (), This Api is available in Apple's System boot time Clearly listed in the APIs (https://developer.apple.com/documentation/bundleresources/privacy_manifest_files/describing_use_of_required_r eason_api#4278394), so I would like to know whether the use of System boot time APIs will be added to the Add privacy manifest in the future version

Thank you.

[Neusoft-Songtn]

Can you help me confirm this issue? Thank you very much