I just created a Google Doc, set its sharing to public, and put the shareable link in the privacy url. Easy. :-)
EDIT: I noticed I needed to create a new document for each app, otherwise I got the error:
You are not allowed that domain for a privacy policy URL.