Back to Blog
Guide9 min read

How to Submit an App to the App Store and Google Play: A Business Owner's Checklist

Vurium StudioAugust 4, 2026
Bold headline reads Ship it. Zero surprises. on a dark background with cyan accent.

How to Submit an App to the App Store and Google Play Without Getting Rejected

You have spent months planning, designing, and building your app. The code is tested, the screens look right, and your team is ready to go live. Then you hit the submission process — and realize Apple and Google have a review system with dozens of requirements that have nothing to do with whether your app works well. Understanding how to submit an app to the App Store and Google Play before you reach that stage is one of the most practical things a business owner can do to avoid delays at the finish line.

This guide walks through each stage of the submission process for both platforms: what you need to set up, what reviewers actually check, and where apps most commonly get rejected. Think of it as a pre-launch checklist you can hand to your development team or work through yourself.

Stage One: Set Up Your Developer Accounts

Both Apple and Google require you to register as a developer before you can submit anything. These are paid accounts, and each has its own enrollment process that takes time — so do not leave this until the week you want to launch.

Apple Developer Program: You enroll at developer.apple.com. Apple offers individual and organization enrollment. If you are publishing under a business name, choose the organization option. Apple may ask you to verify your business identity, which can involve a D-U-N-S number lookup or a phone call from Apple. Budget extra time here — verification for new organizations can take days or longer depending on your business registration details.

Google Play Console: You register at play.google.com/console. Google also distinguishes between personal and organization accounts. For a business app, use an organization account so the publisher name on the store listing reflects your company rather than an individual's name. Google's identity verification has expanded in recent years and now requires submitting identity documentation before your app can go live.

One practical note: whoever owns the developer account owns the app on that platform. If you are working with a development studio, decide early whether the account will be yours or theirs, and what happens to ownership if the relationship ends. Most businesses prefer to own their own accounts from day one.

Developer Account Setup

Register as an organization, not an individual
Use your legal business name as the publisher
Complete identity verification before your target launch date
Keep your account credentials separate from the development team
Confirm app ownership terms before handing off credentials

Stage Two: Prepare Your App Metadata

Metadata is everything that appears on your store listing: app name, description, screenshots, preview video, category, keywords, and age rating. Reviewers check it for accuracy and policy compliance, and it also determines whether customers can find and understand your app. Weak metadata is one of the most common reasons an otherwise solid app underperforms after launch.

App name and subtitle: Keep the name consistent with how your business refers to the product. Apple limits the app name to a set character count; anything beyond that gets cut off in search results. Avoid stuffing keywords into the name — Apple flags this.

Description: Write a clear, honest description of what the app does. Do not promise features that are not yet built. Do not reference other platforms (mentioning a competitor or another operating system in your copy will get flagged). Both Apple and Google read descriptions carefully for misleading claims.

Screenshots and preview video: Apple requires screenshots for every device size you support. If your app runs on iPhone and iPad, you need separate screenshot sets. Screenshots must show the actual app — mockup frames around them are fine, but the UI shown must match what reviewers will see when they open the app. Google Play has similar requirements, and a feature graphic is also required for Play.

Category: Choose the most accurate category, not the least competitive one. Reviewers check that the category matches the app's actual function. A booking app listed under Games will be rejected or recategorized.

Age rating: Both platforms ask you to answer a questionnaire about your app's content. Answer honestly. If your app allows users to book services, handle payments, or communicate, indicate that. Misreporting your age rating is a policy violation that can get your account terminated, not just the individual app.

Stage Three: Technical Requirements Before Submission

Beyond the store listing, both Apple and Google have technical standards your app must meet before it will even be accepted into review. Your development team should have handled most of these, but as a business owner it helps to know what to verify.

App signing and certificates: Apps must be signed with a valid certificate tied to your developer account. Apple uses provisioning profiles; Google uses a keystore file. If these are misconfigured, the app is rejected at upload before a human reviewer ever sees it. Keep a secure backup of your signing credentials — losing a keystore means you cannot update your Android app under the same listing.

Privacy policy: This is not optional. If your app collects any data — even just an email address for login — both Apple and Google require a publicly accessible privacy policy URL. The policy must accurately describe what you collect, how you use it, and how users can request deletion. Submitting without one, or with a placeholder URL, results in immediate rejection.

App permissions: If your app requests access to the camera, microphone, location, contacts, or any other system feature, you must provide a plain-language explanation for why. Apple calls these purpose strings, and they appear in the permission prompt the user sees. Vague explanations ("we use your camera for app features") are rejected. Be specific.

Login credentials for reviewers: If your app requires an account to access any functionality, you must provide a working demo account in your submission notes. Reviewers will not create their own accounts. If they cannot log in, the app is rejected. Make sure the demo account shows the core features — do not restrict it in ways that hide key functionality from review.

Crash-free builds: Both platforms use automated testing to detect crashes before review begins. If the binary crashes on launch or during basic navigation, the submission is rejected before it reaches a human. Test on real devices, not just simulators.

Technical Submission Flow

1
Sign the app with valid certificates
2
Add privacy policy URL to store listing
3
Write specific permission purpose strings
4
Create demo login credentials for reviewers
5
Upload the signed binary and run pre-checks
6
Submit for human review

Stage Four: Compliance — Where Business Apps Most Often Get Tripped Up

Technical and metadata issues are usually fixable in a day. Compliance issues can take much longer because they sometimes require rethinking how a feature works. These are the areas where business apps — especially those handling payments, user accounts, or professional services — run into the most friction during the App Store review process.

In-app purchases and payments: Apple's App Store review guidelines require that any digital goods or services sold inside an iOS app use Apple's in-app purchase system, with Apple taking a percentage. Physical goods, real-world services (like booking a cleaning appointment or paying for a haircut), and business-to-business transactions are exempt. If you sell appointment slots, subscriptions to physical services, or products that are delivered in the real world, you generally do not need to route payments through Apple. But if you sell anything purely digital — premium content, virtual credits, software features unlocked with a purchase — Apple expects to see its payment system in use. Misclassifying which category your transactions fall into is one of the more costly compliance mistakes, because fixing it may require changing your payment architecture. Understanding how payment flows are designed from the start helps avoid this entirely — see the guide to third-party integrations for more on how payment processors fit into a custom software stack.

User-generated content: If your app allows any form of user content — comments, reviews, photos, messages — both platforms require that you have moderation mechanisms in place and that users can report and block other users. This applies even to niche business apps. A client portal where customers can upload documents technically qualifies. Build a basic moderation and reporting path before you submit.

Data privacy and regional regulations: If your app will be available in the European Union, you have obligations under GDPR that extend to your store listing, your privacy policy, and your in-app data practices. Apple asks you to complete a privacy nutrition label (the "Privacy Details" section in App Store Connect) that discloses exactly what data you collect and whether it is linked to the user's identity. Google has a similar Data Safety section. Both are checked for consistency with your actual privacy policy.

Content guidelines: Both platforms have rules about what can appear in the app. Professional service apps are generally low-risk here, but if your app includes any user communication features, the reviewer will look for inappropriate content safeguards. Even a simple messaging thread between a business and its customers needs to be covered by your content policy.

Stage Five: The Review Process Itself

Once you submit, the app enters a review queue. Apple's review times have shortened significantly over the years — most submissions receive a response within a day or two, though complex apps or first-time submissions from new accounts can take longer. Google Play's automated review is faster for initial processing, but human review for new apps, sensitive permissions, or flagged content can extend the timeline.

If your app is rejected, you receive a notice with a specific guideline citation. Read it carefully. Rejections are not always what they seem — sometimes a reviewer flags one issue and you discover, on re-reading the guidelines, that your submission has a second issue you had not noticed. Fix everything before resubmitting, not just the stated rejection reason.

Both platforms offer an appeal process for rejections you believe are incorrect. Use it when the rejection seems to misunderstand what your app does. Be factual and specific in your appeal; reviewers respond better to a clear explanation of your app's function than to a general disagreement with the outcome.

For apps that handle sensitive categories — financial services, healthcare, professional licensing, or regulated industries — Apple may require additional documentation proving your legal authority to offer those services. Have that paperwork ready before you submit if your app touches any of these areas.

After Approval: What Happens Next

Approval is the beginning of a managed lifecycle, not the end of the project. Every update you submit — even a small bug fix — goes through review again on Apple's platform. Changes to metadata, screenshots, or your app description also require a submission. On Google Play, most metadata updates are faster, but app binary updates still go through review.

Plan your release strategy before you hit submit. Both platforms let you hold an approved app and release it at a specific time, which is useful if you want to coordinate the launch with a marketing push or a team communication. Apple also offers phased releases, which gradually roll out an update to a percentage of users over time — useful for catching issues before they affect your entire user base.

Monitoring your app after launch — crash rates, review responses, update cadence — is a discipline of its own. The post-launch maintenance guide covers what a sustainable update and monitoring practice looks like for business software.

A Practical Approach to Avoiding Rejection

Most rejections are preventable. The businesses that sail through review are the ones whose development teams treated platform guidelines as design constraints from the beginning, not as a checklist to consult at the end. That means building the privacy policy before submission, not after. It means designing the permissions flow with the purpose strings already written. It means testing on physical devices with a real demo account logged in.

If you are working with a development partner, ask them early in the project which guidelines are relevant to your app's features and how they plan to address each one. A studio that has shipped apps on both platforms before will know where the edges are. If you are still in the planning stage, talking through your app concept before you start building is the best way to avoid surprises at launch.

The submission process is not designed to be a barrier — it is designed to protect users and maintain platform quality. Understanding what Apple and Google actually require makes the process straightforward rather than stressful, and it keeps your launch timeline where it belongs: in your control.

For more practical guides on building and running custom business software, visit the Vurium software blog.

Related reading

GuideHow to Plan User Roles and Permissions in Custom Business SoftwareGuideCustom Internal Tools for Small Business: Build vs. Buy — When Building WinsGuideHow to Choose the Right Tech Stack for Your Custom Business Software