Privacy policy
Last updated: 1 October 2026
Who we are
TapTap is operated by TapTap Regulation Ltd (company number 16428806), and is a wellness app for relaxation, focus and self-regulation. It is not a medical device and does not diagnose or treat any condition.
What we collect
We collect your email address for account access. Passwords are handled securely by Google Firebase Authentication; TapTap does not see or store your password.
We store your in-app preferences and aggregate usage statistics, such as total taps, sessions, active time and timing information. We do not store a step-by-step history of each individual tap. If you use the optional routine check-in, we store counts of completed check-ins and how many times you reported feeling calmer. This is emotional wellbeing information, which we treat as health-related data — but we only ever store aggregate counts, never a diary of individual answers.
If you subscribe to TapTap Pro on the web, Stripe processes your payment details (such as card information) on our behalf. TapTap does not see or store your full card number. We store your account identifier, trial eligibility, subscription status and Stripe customer and subscription identifiers. Apple processes iOS subscriptions; we store Apple transaction identifiers, product, expiry and renewal status, and a random identifier linking the purchase to your TapTap account.
How we use it
We use account information to provide and secure your account, sync preferences across devices, and show your personal statistics. We use payment information, handled by Stripe, to set up and manage your Pro subscription. We also use limited account records to prevent repeated trial use and billing abuse. We do not sell your data, show adverts or use third-party advertising trackers.
Motion and sensory preferences
Your device’s Reduce Motion preference is used on your device to adjust animations. TapTap does not save this preference to your account. Choices you make in TapTap’s Settings, such as Sound, Haptics and Show Progress, are saved with your other in-app preferences.
Website analytics
We use Plausible Analytics on our public website to understand aggregate visitor numbers, approximate countries and device types, clicks to open TapTap and views of our installation instructions. Plausible supports campaign parameters in links so we can compare aggregate conversion sources. We never send your email address to Plausible. Plausible does not use cookies or persistent identifiers. An IP address and browser information are processed briefly to produce aggregate statistics; the raw IP address is not stored.
Who processes it
Google Firebase Authentication and Cloud Firestore store account information, preferences and statistics on our behalf. Stripe processes web subscription payments on our behalf. Apple processes App Store subscription payments. Plausible Analytics processes aggregate public-website usage information on our behalf.
Legal basis under UK GDPR
We process account data where necessary to provide the service you request. We process payment data where necessary to perform the contract when you subscribe to Pro.
Keeping and deleting your data
We keep your account data while your account remains active. Using Settings → Delete Account or Delete account on the email-verification screen cancels any Stripe subscription and removes your sign-in account, saved settings, statistics, Apple purchase-to-account link and Pro entitlement. Apple subscriptions are not cancelled by deleting your TapTap account: cancel them separately in your Apple subscription settings. If billing cancellation fails, the account is retained so you can retry.
To enforce one trial per verified email, we retain a hashed version of that email, the account identifier and the date the trial was used after account deletion. A hash is not the plain email address, but is still treated as personal data.
We also retain limited account-deletion markers, request-limit counters and processed billing-event records to prevent abuse and stop delayed events restoring a deleted account. These records are not your saved settings or session history.
Stripe and Apple retain payment records for as long as required for accounting, tax and fraud-prevention purposes, in line with their own privacy policies.
Your rights
You may ask to access, correct or delete your personal data. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Children
Kids Mode is a child-friendly theme designed to be used under the supervision of a parent or guardian. Accounts must be created and managed by an adult. We do not knowingly allow children to create accounts or collect personal information directly from a child.
Contact
For privacy questions or requests, email oliver@taptap.org.uk.