Will Apple reject my app under its new AI and user-content rules?

Probably not, if your app already has the safeguards Apple has asked of user-content apps for years. The 16 October 2026 update matters if people can post, upload or generate anything in your app. It matters most if your app can make images with AI.

Apple now names AI-generated intimate images of real people as content apps must actively prevent and remove. What it costs to meet the rules depends on what your app already has, so that’s the first thing to find out.

What changed on 16 October

Apple revised its App Review Guidelines on 16 October 2026. Three changes matter to most founders:

• User content (guideline 1.2). AI content creation apps are now listed alongside social media and user-content platforms. Images made with AI are named explicitly.
• Hidden features (guideline 2.5.19). A new rule against apps that behave one way in review and another after approval. Apple says it clarifies existing policy.
• Your developer account. Missing safeguards, or not fixing problems after Apple flags them, can breach Apple’s Developer Code of Conduct.

The headlines are about “nudify” apps. The rules reach any app whose users can add content.

Is your app in scope?

Guideline 1.2 covers apps that let people “create, generate, upload, share, or otherwise contribute content”.

Using another company’s AI model doesn’t pass the responsibility on. Apple holds you responsible for everything in your app, including code and services from other companies.

The four safeguards Apple expects

1. A filter that stops objectionable material before it’s posted.
2. A way to report offensive content, with timely responses.
3. A way to block abusive users.
4. Contact details users can find easily.

You’re also expected to remove anything that breaks the rules, your terms or your community standards. Apps used mainly for pornography, anonymous chat, threats or bullying may be removed without notice.

What happens if you fall short

Before launch, a missing safeguard means a rejection and a later launch date. After launch, Apple will ask you to remove the content and send a plan to improve. Your app may come off the store until you show progress. Serious or repeated problems can cost you your developer account, the one you publish every app through.

Apple enforces this at scale. Last year it stopped over 150,000 apps with safety issues from reaching customers.

Features you switch on later

If your team plans to turn on a feature after approval, Apple needs to know first. It wants each new feature described specifically in the notes sent with each version, and it rejects vague ones. A feature Apple never saw can now cost you the listing.

What a fix involves

Nobody can price it honestly without seeing the app. Four things decide the size of the job:

• What’s already there. Reporting, blocking and a contact page are often partly built. Filtering is the bigger job, especially for images.
• What your AI can make. If someone can upload a photo and get a new image back, expect the closest scrutiny.
• Who reads the reports. Timely responses need a person or a process. That’s a monthly cost, not a one-off build.
• Who wrote the code. If a previous supplier or an AI tool built it, someone has to understand it before changing it. Our guide to getting an app built with AI tools ready for real users covers that.

Weigh it against the alternative: a slipped launch, or a live app pulled while you write Apple a plan.

Who’s responsible

You are, as far as Apple is concerned. Not your agency, and not the company behind your AI model. Check the app sits in a developer account your company owns. If you’re moving away from a supplier, here’s how we take over an app another agency built.

Questions to ask your team or supplier

• Where can users post, upload or generate anything? List every place.
• Do we have a filter, a report option, a block option and published contact details?
• Who answers reports, and how quickly?
• Can any AI feature produce images of real people? What stops misuse?
• Is anything switched on only after Apple approves a version?
• Whose developer account is the app in?

If an answer is vague, treat it as a no.

Where Contic fits

If your app is live or nearly finished, start with our free architectural review. We’ll check it against the new rules and tell you, in plain English, what’s missing. If anyone else has changed the code, we’ll review it before we build on top of it.

We’ve built for sensitive user submissions before. For Everyone’s Invited, we built AI anonymisation of submissions, saving about 12,500 hours of review.

Once it’s fixed, TotalCare keeps it running for a fixed monthly price. If your app uses AI on personal data, read AI and GDPR in the UK next.