It is required by law if you collect personal information from users - the most important reason why you need a Privacy Policy is because it is a requirement under law.