Key Points

  1. Do not request permissions you do not actually use.
  2. Configure app-plus.privacy.template so the native privacy consent pops up before entering the app—Huawei review requires first‑launch consent.

manifest.json (excerpt):

{
  "app-plus": {
    "distribute": {
      "android": {
        "permissions": [
          "<uses-permission android:name=\"android.permission.CALL_PHONE\"/>",
          "<uses-permission android:name=\"android.permission.INTERNET\"/>"
        ],
        "permissionExternalStorage": {
          "request": "none",
          "prompt": "为保证您正常、安全地使用，需要获取设备识别码…"
        },
        "permissionPhoneState": {
          "request": "none",
          "prompt": "为保证您正常、安全地使用，需要获取设备识别码…"
        },
        "autoSdkPermissions": false
      },
      "privacy": {
        "prompt": "template",
        "template": {
          "title": "服务协议和隐私政策",
          "message": "请你务必审慎阅读…",
          "buttonAccept": "同意并继续",
          "buttonRefuse": "暂不同意",
          "second": {
            "title": "温馨提示",
            "message": "进入应用前，你需先同意…",
            "buttonAccept": "同意并继续",
            "buttonRefuse": "退出应用"
          }
        }
      }
    }
  }
}

Review Tips

  • Provide working links for the Agreement & Privacy Policy pages.
  • Ensure decline path exits gracefully.
  • Keep permission prompts aligned with actual runtime usage.