Do you use any third-party APIs, such as AdMob or Firebase (Google)?
If not, you can be incredibly simple with your policy.
Here is the complete policy I have for one of my apps. The guidelines were reviewed by Apple (based on Analytics hits before the app release) and approved.
First things first, the app has no ads of any kind. No. This means that no tracking is performed by Google, Facebook or any of the major ad networks.
Secondly, I do not add any analyzes that will also address that type of data. In fact, the only thing I can see is which country someone came when they downloaded this on the App Store, and even that can not be linked to a specific user.
NothosAdrisor’s policy looks pretty solid for AdMob usage as well; I’ve used similar languages for ad-supported apps. I agree, just be aware of what you are collecting and what you are using it for.