How Tap Tap Tec collects, uses, and protects information in TapTapKids — built for children ages 3–7, with no ads and no behavioral tracking.
This Privacy Policy explains how Tap Tap Tec ("we", "us", "our") collects, uses, and protects information in TapTapKids ("the App"), an educational app for children ages 3–7 that is set up, owned, and paid for by a parent or legal guardian. By creating an account or using TapTapKids, you (the parent or legal guardian) accept this policy on your own behalf and on behalf of any child profile you create. If you do not agree, please do not create an account or use the App.
TapTapKids is designed around a parent account that owns the app and pays for it, and one or more child profiles that a parent creates under that account. A child never signs up, never enters an email address or payment method, and never sees anything asking for personal information — the parent enters a nickname and picks an avatar on the child's behalf when creating the profile.
This is the entire set of data we hold about your child. It's linked internally to a randomly-generated profile ID used only to keep that progress in sync — it is never exported, sold, or shared with anyone outside operating the App itself.
Because TapTapKids is directed to children, U.S. law (COPPA) requires us to verify that a real adult — not a child — is the one creating the account and consenting to this policy, before any child-profile data is collected or used. We do this with what regulators call the "email plus" method: after you sign up with an email address and password (and pass the Parent Gate, §4), we send a verification email to that address, and your child's profile doesn't become usable until you confirm it by clicking the link. If you sign in with Google or Apple instead, that provider has already verified your email as part of its own sign-in process, which satisfies this step.
Before a child can reach account creation, a subscription purchase, voucher redemption, any external link, or app settings, TapTapKids shows a simple math problem sized to be trivial for an adult and to reliably screen out this app's target age group. This is separate from, and in addition to, the email verification in §3 — the Parent Gate stops a child mid-session from reaching those screens; §3 verifies who set up the account in the first place.
We do not use any information collected in TapTapKids for advertising, ad targeting, or building a profile of you or your child for any purpose beyond running the App.
TapTapKids does not include any third-party advertising SDK or third-party analytics/tracking SDK. The only usage data we collect is first-party, aggregated, and non-identifying, stored in our own Firebase project:
We do not use advertising identifiers, cross-app or cross-site tracking, or device fingerprinting, and this data is never shared outside Tap Tap Tec.
TapTapKids relies on the following service providers to operate. Each acts strictly as described below, not for their own advertising or analytics purposes:
We do not use any advertising network, and TapTapKids does not display ads of any kind. If that ever changes, or if we add any new third-party service, we will revise this policy and update the "Last updated" date before the change ships.
We do not sell your or your child's information, and we do not share it with anyone for their own marketing or advertising purposes. We share only the minimum information necessary with the providers in §7 so each can perform the specific function described (for example, RevenueCat needs an anonymous identifier to validate your subscription — nothing about your child). We may disclose information if required by law, or to protect the safety of a user or the public.
TapTapKids is directed to children ages 3–7 and is designed around COPPA, GDPR-K, the UK Age Appropriate Design Code, Apple's Kids Category guidelines, and Google Play's Families Policy. Consistent with those requirements, we: collect only the minimum data described in §2.2; obtain verifiable parental consent before that data is used (§3); never condition a child's participation on disclosing more information than reasonably necessary; and never let a child make a purchase, redeem a voucher, or leave the App without passing through the Parent Gate (§4). If you believe your child has provided us with more information than described here, contact us (§14) and we will delete it.
As the account holder, you can contact us at any time (§14) to review, correct, export, or delete your account and any child profile's data. Depending on your location, you may also have the rights below — we honor them for every user regardless of jurisdiction.
You have the right to access your personal data, correct inaccurate data, request deletion, restrict processing, receive a copy in a portable format, and withdraw consent at any time. Contact us at the email below to exercise these rights.
You have the right to know what we collect, request deletion, and not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no "opt out of sale/sharing" action needed — but you're welcome to contact us with any question.
If your jurisdiction grants similar rights (for example Brazil's LGPD, Canada's PIPEDA, or the UAE's PDPL), contact us and we will respond as applicable law requires.
If you subscribe to TapTapKids, your payment is processed entirely by the Apple App Store or Google Play — we do not handle, see, or store your payment card details. Your subscription receipt is validated through RevenueCat solely to activate and sync your entitlement across devices. Subscriptions are auto-renewing; you can cancel anytime through your platform account settings. See our End User License Agreement for full subscription terms.
Child-profile data and progress are retained while your account is active, and deleted when you request account deletion (§14). Voucher and redemption records are retained as needed to prevent abuse and to meet applicable tax/accounting requirements. Email-verification tokens are transient and expire shortly after use.
Your account and each child profile's data are protected by Firestore security rules that restrict access to your own signed-in account only — no other parent's account can read or write your data, and vice versa. Data in transit is encrypted (TLS). No system is 100% secure, and we cannot guarantee absolute security, but we've deliberately kept what we collect small specifically to limit what would ever be at risk.
For any question about this Privacy Policy, or to review, correct, or delete your account and any child profile's data, contact us at:
Our service providers (§7) may process information outside your country, including in the United States. They contractually commit to GDPR-compatible safeguards, such as Standard Contractual Clauses, for any such transfer.
We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page when we do, and highlight material changes in the App on next launch. Continued use of the App after a change means you accept the updated policy.