When someone doesn't have proper privacy policy links, Apple points this out very specifically and quickly accepts the app after it's fixed. I've seen them accept policies as simple as a plaintext link containing "We don't store any of your data".