Analytics and consent

Makes product analytics in an Expo app something a reviewer can trust: nothing leaves the device until the user said yes, the vendor SDK exists only after that yes, every event comes from a typed catalog that cannot carry personal data, analytics never tracks unless the app deliberately opts into Apple's ATT, and the App Store and Google Play answers are generated from the same contract the code is checked against. Two zero-dependency checkers prove it on the real code.

Rules that must hold