diff --git a/.github/workflows/release-apps.yml b/.github/workflows/release-apps.yml
index 54fc22ff2..fd287cc00 100644
--- a/.github/workflows/release-apps.yml
+++ b/.github/workflows/release-apps.yml
@@ -222,6 +222,7 @@ jobs:
           dotnet publish ${{ env.MAUI_PROJECT_PATH }} \
             -f net10.0-maccatalyst \
             -c Release \
+            -r maccatalyst-arm64 \
             -p:ApplicationId=maccatalyst.nl.versluis.polypilot \
             -p:CodesignKey="${{ secrets.IOS_CODESIGN_KEY }}" \
             -p:CodesignProvision="${{ secrets.MACCATALYST_PROVISIONING_PROFILE_NAME }}" \
@@ -249,6 +250,13 @@ jobs:
             echo "CFBundleIconName already set: $(/usr/libexec/PlistBuddy -c 'Print :CFBundleIconName' "$PLIST")"
           fi
 
+      - name: Embed provisioning profile
+        run: |
+          APP_PATH=$(find PolyPilot/bin/Release/net10.0-maccatalyst -name "PolyPilot.app" -type d | head -1)
+          # CreatePackage=false doesn't embed the profile. TestFlight requires it.
+          cp "$RUNNER_TEMP/maccatalyst.provisionprofile" "$APP_PATH/Contents/embedded.provisionprofile"
+          echo "Embedded provisioning profile in app bundle"
+
       - name: Patch bundle identifier for App Store
         run: |
           APP_PATH=$(find PolyPilot/bin/Release/net10.0-maccatalyst -name "PolyPilot.app" -type d | head -1)