Explain app permissions on privacy page.