The background to the three questions is whether or not your app collects or shares user data with other companies or organizations. The simplest is if you do not collect information that can be traced back to a natural and living person.
The European General Data Protection Regulation (GDPR) uses a broad definition of what this falls under. As a person who has the advertising provided by Google on his app, you can place the GDPR responsibility with Google if you do not collect personal data with that app, such as and not limited to email addresses, IDs and network addresses.
Because if you simply: don't collect anything, you don't have to store anything, keep anything, don't provide any information, don't explain anything, don't protect anything, don't clean up anything. The very first question that you should always start with and that will help you with this is: What is the indisputable reason for (in this case) collecting information? I can tell you that in practice, in most cases, a well-founded and irrefutable argumentation is simply lacking.