Privacy Policy

Your Family's Data,
Our Responsibility.

How Tap Tap Tec collects, uses, and protects information in TapTapLearn — built for children ages 2–14, with no ads and no behavioral tracking.

Effective date: 3 September 2026
Last updated: 3 September 2026

This Privacy Policy explains how Tap Tap Tec ("we", "us", "our") collects, uses, and protects information in TapTapLearn ("the App"), an educational app offering 101 mini-games across 13 skill categories for children ages 2–14 that is set up, owned, and paid for by a parent or legal guardian. By creating an account or using TapTapLearn, you (the parent or legal guardian) accept this policy on your own behalf and on behalf of any child profile you create. If you do not agree, please do not create an account or use the App.

The short version: TapTapLearn has no ads, no third-party advertising SDKs, and no third-party analytics that track you or your child across apps or the web. Your child never enters their real name, email, birthdate, photo, or location — just a nickname and a picture avatar the parent picks. Every purchase, account action, and settings change sits behind a Parent Gate so a child can't reach it alone.

1. Who This Policy Covers

TapTapLearn is designed around a parent account that owns the app and pays for it, and one or more child profiles that a parent creates under that account. A child never signs up, never enters an email address or payment method, and never sees anything asking for personal information — the parent enters a nickname and picks an avatar on the child's behalf when creating the profile.

2. Information We Collect

2.1 From the parent (account holder)

  • Email address — used to create and secure your account, and to verify you're an adult before any child data is used (see §3).
  • Authentication data — handled by Firebase Authentication; if you choose to sign in with Google or Apple instead of email/password, we receive only the identifier and email those providers give us for sign-in purposes.
  • Subscription/entitlement state — which subscription tier (if any) is active on your account, managed via RevenueCat (see §7).

2.2 About your child (profile data only)

  • Nickname — chosen by the parent or child. The app's own filter blocks inappropriate language, and the app's own prompt nudges you not to use your child's real full name.
  • Avatar selection — a picture chosen from a built-in set; not a photo of your child. The App has no camera or photo-upload access anywhere a child can reach.
  • In-app progress — which games and levels have been played, stars earned, and difficulty-adjustment data, so the App can pick age-appropriate content and a parent can see progress.
  • Optional leaderboard entry — if a parent enables the leaderboard, it shows the child's nickname, a family-only sequence number (so two children with the same nickname can be told apart), country, and score. No other child's real identity is ever shown, and the leaderboard is off unless a parent turns it on.

This is the entire set of data we hold about your child. It's linked internally to a randomly-generated profile ID used only to keep that progress in sync — it is never exported, sold, or shared with anyone outside operating the App itself.

2.3 What we do not collect, ever

  • Your child's real name, birthdate, phone number, or government ID.
  • Photos, videos, or audio recordings of your child.
  • Precise or approximate GPS location.
  • Contacts, camera, or microphone access.
  • Advertising identifiers (Google Advertising ID / IDFA) — we don't show ads, so we have no reason to collect these.
  • Payment card details — all purchases are processed entirely by the Apple App Store or Google Play; we never see or store your card information.

3. Verifiable Parental Consent

Because TapTapLearn is directed to children, U.S. law (COPPA) requires us to verify that a real adult — not a child — is the one creating the account and consenting to this policy, before any child-profile data is collected or used. We do this with what regulators call the "email plus" method: after you sign up with an email address and password (and pass the Parent Gate, §4), we send a one-time verification code to that address, and your child's profile doesn't become usable until you confirm it. If you sign in with Google or Apple instead, that provider has already verified your email as part of its own sign-in process, which satisfies this step.

4. The Parent Gate

Before a child can reach account creation, a subscription purchase, voucher redemption, any external link, or app settings, TapTapLearn shows a simple math problem sized to be trivial for an adult and to reliably screen out this app's target age group. This is separate from, and in addition to, the email verification in §3 — the Parent Gate stops a child mid-session from reaching those screens; §3 verifies who set up the account in the first place.

5. How We Use Information

  • To run the App and keep your child's progress saved between sessions.
  • To verify your account and confirm you're the adult who consented to this policy (§3).
  • To process, validate, and restore subscription purchases and voucher redemptions.
  • To send you account-related email (e.g. the verification code in §3) and, only if you opt in, an occasional summary of your child's activity.
  • To keep the App and our backend secure, and to comply with legal obligations.

We do not use any information collected in TapTapLearn for advertising, ad targeting, or building a profile of you or your child for any purpose beyond running the App.

6. Aggregated, Non-Identifying Analytics — No Third-Party Tracking

TapTapLearn does not include any third-party advertising SDK or third-party analytics/tracking SDK. The only usage data we collect is first-party, stored in our own Firebase project, and keyed to a randomly-generated profile ID with no link back to a real name, email, or device:

  • Which game and level was played, stars earned, and time spent — used to pick age-appropriate content and let a parent see progress.
  • Subscription tier start/expiry events (tier only — no payment details).

We do not use advertising identifiers, cross-app or cross-site tracking, or device fingerprinting, and this data is never shared outside Tap Tap Tec.

7. Third-Party Services We Use

TapTapLearn relies on the following service providers to operate. Each acts strictly as described below, not for their own advertising or analytics purposes:

  • Firebase (Google) — account sign-in, our database, backend functions, product analytics, and crash reporting. policies.google.com/privacy
  • RevenueCat — validates and manages subscription purchases and voucher-granted entitlements only, tied to your account/device, never to a child's profile. revenuecat.com/privacy
  • SendGrid — delivers account emails (such as one-time login codes and an optional weekly progress digest) to the parent's email address only. No child data is ever sent to SendGrid.
  • ElevenLabs — used only during development to generate the App's spoken-word audio clips, which ship inside the App. No gameplay or account data is ever sent to this provider at runtime.
  • Apple App Store / Google Play — process all purchases; we never see or store your payment card details. apple.com/legal/privacy and policies.google.com/privacy

We do not use any advertising network, and TapTapLearn does not display ads of any kind. If that ever changes, or if we add any new third-party service, we will revise this policy and update the "Last updated" date before the change ships.

8. Sharing of Information

We do not sell your or your child's information, and we do not share it with anyone for their own marketing or advertising purposes. We share only the minimum information necessary with the providers in §7 so each can perform the specific function described (for example, RevenueCat needs an anonymous identifier to validate your subscription — nothing about your child). We may disclose information if required by law, or to protect the safety of a user or the public.

9. Children's Privacy

TapTapLearn is directed to children ages 2–14 and is designed around COPPA, UK GDPR Article 8, the UK Age Appropriate Design Code, Apple's Kids Category guidelines, and Google Play's Families Policy. Consistent with those requirements, we: collect only the minimum data described in §2.2; obtain verifiable parental consent before that data is used (§3); never condition a child's participation on disclosing more information than reasonably necessary; and never let a child make a purchase, redeem a voucher, or leave the App without passing through the Parent Gate (§4). If you believe your child has provided us with more information than described here, contact us (§15) and we will delete it.

10. Parents' Rights & Choices

As the account holder, you can at any time, from inside the App (Parent Zone), review the games and progress recorded for each child profile, delete an individual child's profile, or delete your entire account — which permanently removes every child profile and all associated data. You can also contact us (§15) to review, correct, export, or delete your account and any child profile's data. Depending on your location, you may also have the rights below — we honor them for every user regardless of jurisdiction.

10.1 EEA, UK, Switzerland (GDPR)

You have the right to access your personal data, correct inaccurate data, request deletion, restrict processing, receive a copy in a portable format, and withdraw consent at any time. Contact us at the email below to exercise these rights.

10.2 California, Virginia, Colorado, Connecticut, Utah, and other US states

You have the right to know what we collect, request deletion, and not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is no "opt out of sale/sharing" action needed — but you're welcome to contact us with any question.

10.3 Other jurisdictions

If your jurisdiction grants similar rights (for example Brazil's LGPD, Canada's PIPEDA, or the UAE's PDPL), contact us and we will respond as applicable law requires.

11. Subscriptions and Payments

If you subscribe to TapTapLearn, your payment is processed entirely by the Apple App Store or Google Play — we do not handle, see, or store your payment card details. Your subscription receipt is validated through RevenueCat solely to activate and sync your entitlement across devices. Subscriptions are auto-renewing; you can cancel anytime through your platform account settings. See our End User License Agreement for full subscription terms.

12. Data Retention

Child-profile data and progress are retained while your account is active, and deleted when you delete a profile or your account (§10). Voucher and redemption records are retained as needed to prevent abuse and to meet applicable tax/accounting requirements. Email-verification codes are transient and expire shortly after use.

13. Data Security

Your account and each child profile's data are protected by Firestore security rules that restrict access to your own signed-in account only — no other parent's account can read or write your data, and vice versa. Data in transit is encrypted (TLS), and diagnostic crash/error logs are encrypted at rest. No system is 100% secure, and we cannot guarantee absolute security, but we've deliberately kept what we collect small specifically to limit what would ever be at risk.

14. International Data Transfers

Our service providers (§7) may process information outside your country, including in the United States. They contractually commit to GDPR-compatible safeguards, such as Standard Contractual Clauses, for any such transfer.

15. Contact Us

For any question about this Privacy Policy, or to review, correct, or delete your account and any child profile's data, contact us at:

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page when we do, and highlight material changes in the App on next launch. Continued use of the App after a change means you accept the updated policy.