Most apps just copy-paste a privacy policy template that has zero connection to what they actually collect. That's how you get wrecked.

Here's the move:

Paste this into Claude Code in your project:

"Read this whole codebase and list every piece of personal data the app collects: forms, analytics, cookies and logs. For each one: where it's stored, how long it's kept, and which outside services receive it (analytics, payments, email, AI APIs).

Then write a privacy policy that matches it exactly, plus a cookie list for my consent banner.

Flag anything that breaks GDPR or CCPA, like analytics running before consent or user data sent to an AI API without saying so."

Then have a lawyer check it. Still 10x better than a template that lies and gets you rekt later.

Don't get caught slipping on compliance. Especially if you're handling user wallets or KYC data.