rescind_consent

Learn about the RESCIND_CONSENT App Store Server Notification V2. Fired when a parent or guardian withdraws consent for a child's use of your app.

App Store Server Notifications V2Consent
rescind_consent

The RESCIND_CONSENT notification fires when a parent or guardian withdraws consent for a child's use of your app. Apple then prevents the app from launching for that child, so use it to stop any processing tied to that account.


When does it fire?


This notification triggers when a guardian revokes consent through Apple's age-assurance flow. It concerns access to the app itself, not a purchase, so it can arrive for a free app that has never sold anything.


Payload highlights


This is the only V2 notification that carries an appData object instead of data. It holds the bundle ID, the environment, and a signed app transaction — there is no purchase transaction in it.


How Yeethook helps


Consent withdrawals are easy to miss in a raw JWS stream. Yeethook delivers a warning-level message with the bundle and app transaction already decoded, so privacy and support teams can act quickly.


Common use cases


  • Alert privacy or support when a guardian withdraws consent
  • Stop processing data for an account that can no longer open the app
  • Keep an audit trail of consent changes in your team's channel

Example payload

The decoded body of a consent withdrawal, sent without a subtype. It is the only V2 notification that carries appData instead of data, so there is no transaction object in it at all — treat signedDate as the effective time of the withdrawal.

{
  "notificationType": "RESCIND_CONSENT",
  "notificationUUID": "1c6d5482-b0f3-4e70-9a28-4d71ec03f5ba",
  "version": "2.0",
  "signedDate": 1790754014000,
  "appData": {
    "appAppleId": 1234567890,
    "bundleId": "com.example.app",
    "environment": "Production",
    "signedAppTransactionInfo": "eyJhbGciOiJFUzI1NiIsIng1YyI6..."
  }
}

What it looks like in Slack

Warning

Consent rescinded

Bundle ID
com.example.app
Environment
Production
App transaction
704601000000000

Questions about rescind_consent

Which consent does this notification refer to?

A parent or guardian withdrawing consent for a child's use of the app, not consent attached to a purchase. Apple sends it under the age-assurance rules and then prevents the app from launching for that child, so it is an access event rather than a billing one.

Why is there no transaction in the payload?

Because consent covers the app, not a purchase. RESCIND_CONSENT is the only notification type that uses the appData object, which carries bundleId, environment and signedAppTransactionInfo — an app transaction, which exists even for free apps that have never sold anything.

Can I tell which customer it applies to?

Only through the app transaction: decode signedAppTransactionInfo and read appTransactionId, which identifies the Apple Account that downloaded the app. Store that value on first launch, or the notification arrives with nothing you can match it against.

Get this event in Slack or Discord

Connect Yeethook to receive rescind_consent notifications in your team's Slack or Discord channels.

Get Started Free