App Store Submission Checklist

Project: Drop — Fintech Payment App Version: 1.0.0 Build: 1 Date: 2026-02-23 Author: John (AI Director, ALAI) Status: Draft — Pre-Submission Reviewers: Alem Bašić (CEO)

Document History

Version	Date	Author	Changes
0.1	2026-02-23	John	Initial draft from app-store-metadata.md + screenshot-texts.md

Pre-Submission Requirements

General Readiness

All P1 and P2 bugs resolved
QA sign-off obtained
Legal sign-off obtained (privacy policy, terms, angrerettloven, finansavtaleloven)
Release notes written and reviewed in Norwegian Bokmål
Version: 1.0.0 (SemVer: MAJOR.MINOR.PATCH)
Build number: 1 (monotonically incrementing — never reused)
All production environment variables set (NEXT_PUBLIC_APP_ENV=production, EXPO_PUBLIC_API_URL)
Crash-free rate > 99.5% in staging
Analytics verified in staging

Apple App Store

App Store Connect Setup

App record created in App Store Connect
App ID no.getdrop.app registered in Apple Developer Portal
Capabilities configured:
- Push Notifications (Phase 2 — when push implemented)
- Background Modes → Remote notifications (Phase 2)
Provisioning profiles up to date (distribution profile)
Code signing certificate valid (not expiring within 30 days)
App Store Connect API key configured for EAS Submit

App Metadata

Full Description (Norwegian):

Drop — Enklere betalinger. Lavere gebyrer.

Drop er den nye standarden for internasjonale overføringer og daglige betalinger i Norge. Enten du skal sende penger til familie i utlandet eller betale for kebaben på hjørnet, gir Drop deg enklere og billigere løsninger enn bankene.

HVA ER DROP?

Drop er en betalingsapp som gjør to ting ekstremt godt:
1. Send penger internasjonalt med lavere gebyrer enn Wise, Vipps eller Western Union
2. Betal i butikk med QR-kode — raskere og billigere enn bankkort

HVORFOR VELGE DROP?

• 0,5% gebyr på internasjonale overføringer — Send 10 000 kr til familie i utlandet for 50 kr i gebyr, ikke 500 kr
• 1% gebyr for QR-betalinger — Billigere for butikken, enklere for deg
• Trygt med BankID — Norsk autentisering du stoler på
• Regulert i Norge — Vi følger alle norske regler for finansielle tjenester
• Pengene dine forblir i banken din — Drop bruker Open Banking (PSD2), så vi holder aldri pengene dine
• Rask overføring — Internasjonale betalinger tar minutter, ikke dager
• 30+ land — Send til Balkan, Pakistan, Tyrkia, Polen, Tyskland og mange flere

SIKKERHET OG TILLIT

• BankID-pålogging — Norsk standard for sikker autentisering
• Ingen mellomlagring — Pengene dine går direkte fra din bank til mottaker
• Regulert av Finanstilsynet — Vi følger alle norske regler
• Open Banking (PSD2) — Vi bruker samme sikkerhet som bankene
• Transparent prising — Du ser alltid nøyaktig hva du betaler

PRISER

• 0,5% gebyr på internasjonale overføringer (ingen skjulte kostnader)
• 1% gebyr på QR-betalinger i butikk
• Gratis å laste ned og opprette konto
• Ingen månedlig avgift

Drop er et produkt av ALAI Holding AS (org.nr 932 516 136), et norskregistrert selskap.

Screenshots

Required screenshots (Norwegian text overlays — from project/store/screenshot-texts.md):

#	Screen	Headline	Subtext	Device Required
1	Login / BankID	"Trygg pålogging"	"Verifiser deg med BankID på under 2 minutter"	All
2	Dashboard	"Alt på ett sted"	"Send penger, betal med QR, se saldo — enkelt"	All
3	Send Money	"0,5% gebyr"	"Send til 30+ land — billigere enn banken"	All
4	QR Payment	"Betal på sekunder"	"Skann QR-kode i butikk — raskere enn kort"	All
5	Transaction History	"Full kontroll"	"Se alle betalinger og overføringer"	All
6	Bank Accounts	"Koble banken din"	"Se saldo fra din bank med Open Banking"	Optional
7	Notifications	"Hold deg oppdatert"	"Varsler for hver betaling og overføring"	Optional
8	Profile	"Dine innstillinger"	"Administrer konto, sikkerhet og varsler"	Optional

Required device sizes:

Device	Dimensions	Required	Status
iPhone 6.7" (16 Pro Max)	1320×2868	Required	TODO
iPhone 6.5" (11 Pro Max / 12 Pro Max)	1242×2688	Required	TODO
iPhone 5.5" (8 Plus)	1242×2208	Required	TODO
iPad Pro 12.9" (6th gen)	2048×2732	Required if iPad supported	TODO

Screenshot rules:

Max 10 screenshots per device
First screenshot = most compelling (Login with BankID trust signal)
No "Download on the App Store" badge in screenshots
Text overlays use Fraunces (headlines) + DM Sans (subtext) — see brand guide
Drop branding: green #0B6E35, gold accent #D4A017
Logo watermark in corner (48px height)
Final review by Alem (native Norwegian speaker)

App Preview video: Not required for v1.0

App Privacy Details

Data types Drop collects:

Data Type	Collected?	Linked to User?	Used for Tracking?	Purpose
Name	Yes	Yes	No	Identity verification (BankID), KYC/AML
Email	Yes	Yes	No	Account communication, support
Phone	Yes	Yes	No	Registration, verification
Financial info (bank accounts)	Yes	Yes	No	AISP — balance display only
Transaction history	Yes	Yes	No	Service delivery, legal retention
Location (precise)	No	—	—	Not collected
Location (coarse)	No	—	—	Not collected
Usage data	Yes	No	No	Service improvement (anonymized)
Crash data	Yes	No	No	Bug fixing (anonymized)
Device ID	No	—	—	Not collected
Identifiers (Expo push token)	Yes	Yes	No	Push notifications (Phase 2)

App Tracking Transparency (ATT) — NOT required (no IDFA usage)
NSUserTrackingUsageDescription — NOT required

Data retention: Transaction and identity data retained minimum 5 years per hvitvaskingsloven.

Review Guidelines Compliance

No private API usage
No undocumented device capabilities
No in-app purchases (Drop is a payment service, not selling digital goods)
No Sign in with Apple required (Drop uses BankID — Norwegian regulatory requirement)
User account deletion implemented via support contact ([email protected]) — pending: self-service deletion
App works as described — demo account for App Review (see below)

Demo account for App Review:

Username: [email protected]
Password: TBD — vault reference
Notes to reviewer: "This is a Norwegian payment app. BankID (Norway's national ID system) is required for full verification. For App Review purposes, a pre-verified demo account is provided. Camera permission is requested for QR payment scanning — use 'Simuler skanning' button to test without physical QR code."

Language note for App Review team: "The app is in Norwegian (Bokmål) — Norway's primary language. App Review guidelines allow non-English apps when serving a specific geographic market."

TestFlight Beta Testing

Internal testing completed (ALAI team — up to 100 testers)
External beta testing — testers: TBD, duration: TBD
Crash rate < 1% in TestFlight
Beta feedback addressed
What's New (v1.0 beta): "Første betaversjon av Drop — gi oss tilbakemeldinger!"

App Transport Security

All network connections use HTTPS (drop-app.vercel.app)
No NSAllowsArbitraryLoads: true
Certificate pinning — TBD (requires implementation before production)
No ATS exceptions needed

Google Play Store

Google Play Console Setup

App created in Google Play Console
Signing key configured (Play App Signing — recommended)
Service account for EAS Submit configured
Developer account in good standing (ALAI Holding AS)

Store Listing

App name: Drop — Send penger (18 chars — under 50 char limit)
Short description: Send penger internasjonalt. Betal i butikk med QR. 0,5% gebyr. Trygt med BankID. (80 chars exactly)
Full description: Same Norwegian content as iOS (4000 char limit)
App icon: 512×512 PNG (no alpha — TODO: export from Figma)
Feature graphic: 1024×500 PNG — "drop" wordmark on green gradient (TODO)
Screenshots: min 2, max 8 per device type

Device	Min Dimensions	Status
Phone	1080×1920 px	TODO
7" tablet	Same constraints	TODO
10" tablet	Same constraints	TODO

Content Rating Questionnaire

IARC questionnaire completed in Play Console
Expected rating: 17+ (financial transactions, real money)
Rating certificate generated and applied

Data Safety Form

Data types declared (same as Apple Privacy Details above)
Security practices answered:
- Data in transit encrypted: Yes (HTTPS/TLS 1.3)
- Data at rest encrypted: TBD (server-side)
- Users can request deletion: Yes (via support contact — pending self-service)

Target Audience & Content

Target age group: 18+ (BankID requires 18+, Norwegian residents)
No ads — Drop does not serve advertisements
Sensitive permissions: Camera (QR scanning) — justified in listing

Testing Tracks

Track	Audience	Status
Internal testing	ALAI team (up to 100)	TODO
Closed testing (alpha)	Limited Norwegian testers	TODO
Open testing (beta)	Optional public opt-in	TODO
Production	Staged 10% → 100%	TODO

Staged rollout: Start at 10% → increase to 25% after 48 hours → 100% after 7 days (monitoring crash rate).

Cross-Platform Checklist

Version Naming

Field	iOS	Android	Value
Version string	`CFBundleShortVersionString`	`versionName`	`1.0.0`
Build number	`CFBundleVersion`	`versionCode`	`1` (monotonically increasing)

Release Notes (Norwegian)

Velkommen til Drop!

Dette er den første versjonen av Drop — din nye app for enklere og billigere betalinger.

Hva kan du gjøre:
• Send penger til utlandet med 0,5% gebyr
• Betal i butikk med QR-kode
• Verifiser deg trygt med BankID
• Se alle transaksjoner på ett sted

Kommer snart:
• Støtte for flere land
• Wallet og dagligbetalinger

Har du tilbakemeldinger? Send oss en e-post på [email protected] — vi leser alt!

Marketing Assets Checklist

App icon final — 1024×1024 (iOS), 512×512 (Android) — from Figma brand/ assets
Feature graphic final — 1024×500 PNG (Google Play)
Screenshots with Norwegian text overlays — all device sizes
Press kit updated at https://getdrop.no/presse
Social media announcement in Norwegian prepared

Legal Requirements

Privacy Policy URL: https://getdrop.no/personvern — GDPR-compliant, covers all data collected
Terms of Service URL: https://getdrop.no/vilkar
GDPR: Right to deletion (via support, pending self-service portal)
Angrerettloven: 14-day withdrawal right form at /withdrawal
Finansavtaleloven §3-53: Complaint form at /complaints
Hvitvaskingsloven: 5-year AML data retention stated in privacy policy
COPPA: Not applicable (18+ minimum age, Norwegian residents only)

Drop-Specific Submission Notes

BankID requirement: Explicitly mention in App Review notes that BankID (Norwegian national digital ID system) is required. Provide pre-verified demo account.
Age restriction: 17+ (App Store) due to financial transactions and real money. BankID legally requires 18+.
Permissions: Camera (QR scanning) — justified as core feature. Push notifications (Phase 2) — transaction alerts.
Regulatory compliance: ALAI Holding AS, Org.nr 932 516 136, Norway. Regulert av Finanstilsynet.
Pass-through model: Drop never holds user money. Emphasize in reviewer notes to avoid confusion with e-money apps that require different regulatory disclosure.
Norwegian language: All store content in Norwegian Bokmål — correct for geographic target market (Norway).
Target market: Norway only (Phase 1). Sverige, Danmark in Phase 2.

Final Submission Sign-Off

Item	Status	Sign-Off
All checklist items complete	Not yet
QA approval received	Not yet
Legal approval received	Not yet
Marketing assets ready	Not yet
Support team briefed ([email protected])	Not yet
Alem final review	Not yet

Approval

Role	Name	Date
Author	John (AI Director)	2026-02-23
Mobile Lead
QA Lead
Product Manager	Alem Bašić
Legal