Tappy Privacy Policy

Effective: October 12, 2026.

If you are visually impaired, have another disability, or need help accessing this Privacy Policy, email us at cameron@pacific.dev.

1. Who we are and what this covers

Pacific Interactive LLC (“Pacific,” “we,” “us,” or “our”), a California limited liability company, publishes Tappy, currently titled Tappy: Self Care Pet & Fidget on the App Store. This Privacy Policy explains what information the Tappy iPhone app, the Tappy Apple Watch app, Tappy’s widgets, and the website at tappy.net (together, the “Service”) handle, where that information lives, who can see it, and the choices you have.

This policy applies only to Tappy and tappy.net. Pacific’s other applications have their own privacy policies. If a link inside the App or on a Pacific website points to Pacific’s general privacy policy, this Tappy Privacy Policy controls for Tappy to the extent of any conflict.

For purposes of data-protection laws such as the GDPR, Pacific Interactive LLC is the “controller” of the limited information described in this policy that we actually receive. Information that stays on your device or in your personal iCloud account is under your control and Apple’s, under your agreements with Apple; we do not have access to it.

Tappy is a casual sensory fidget, entertainment, and general wellness companion. It is not a medical service and does not collect information for medical purposes. Our Terms & Conditions describe the Service’s wellness disclaimers and govern your use of it.

2. Information Tappy handles, and where it lives

This section lists every category of information Tappy works with. For each one we say where the data is stored and whether Pacific can see it. “On your device” means stored inside Tappy’s private storage on your iPhone or Apple Watch. “Your iCloud” means the private iCloud database associated with your Apple Account, which only you (and Apple, under Apple’s iCloud terms) can access.

2.1 Content you create

When you use Tappy’s wellness and planning features, you may enter: mood or emotion selections; feelings, activities, and reasons you tag; journal text and the prompt you responded to; habit names, notes, and reminder times; to-do titles, notes, and subtasks; goals and goal updates; drawings; the name you give your Tappy character; the names you give custom Daily Adventure quests and saved outfits; Tappy’s bedtime schedule; and your customization preferences (theme colors, faces, sounds, haptic intensity, and similar settings).

What you write or draw during the Daily Adventure gratitude quest is not saved. It exists only on screen while the quest is open and is discarded when you close it; Tappy records only that you completed the quest.

Where it lives: on your device and, if you have iCloud enabled for Tappy, in your iCloud. A few settings, such as your character’s name, stay on the device only. Can Pacific see it? No. Tappy does not upload this content to Pacific servers, and Pacific has no ability to read your private iCloud database. We do not use it to train models, build profiles, or for advertising.

2.2 Game and progress data

Tappy keeps track of gameplay and care mechanics: tap counts, Sparks, friendship level, Self-Care Streaks and Streak Freezes, Care Bar progress, wardrobe and equipped items, badges, unlocked scenes and Field Guide visitors, Daily Adventure quests and chest history, gift box history, timers, and arcade scores.

Where it lives: on your device and, for most of it, in your iCloud so that it syncs between your devices. Tappy also keeps a backup copy of your progress in your iCloud account, described in Section 5.2. The Apple Watch app keeps its own settings and tap counts on the watch. Can Pacific see it? No, except for scores and achievements you choose to submit to Game Center, which appear on Apple’s leaderboards (see Section 2.6).

2.3 Apple Health data

If you turn on Apple Health integration, Tappy writes Mindful Minutes from breathing and meditation sessions and, with Tappy Plus, State of Mind entries derived from your mood entries into the Health app. Section 6 describes this in detail. Can Pacific see it? No. Health data stays in Apple Health on your device and is never transmitted to us.

2.4 Purchase information

Tappy Plus (monthly or annual, plus Lifetime purchases from earlier versions), the optional “Buy Me Coffee” tip, and legacy one-time packs are all purchased through Apple’s App Store. Apple processes the payment and holds your payment details and Apple Account information under Apple’s privacy policy. We never receive your name, email address, or payment card details from a purchase.

To confirm which purchases are active and to restore them on a new device, Tappy uses a subscription-management provider, currently RevenueCat, Inc. RevenueCat receives and stores, on our behalf:

• a randomly generated anonymous identifier created by the RevenueCat software on your device (it is not your Apple ID, name, email, or advertising identifier, and Tappy does not link it to anything that identifies you);
• your App Store receipt and the transaction details derived from it (product identifiers, purchase and renewal dates, prices, refund or cancellation status);
• basic technical context: platform, iOS version, Tappy version, country, and locale, plus first-seen and last-seen timestamps.

Tappy does not send RevenueCat your name, email, phone number, advertising identifier, or any content from the app. Like any internet service, RevenueCat sees your device’s IP address when the app connects. RevenueCat acts as our service provider (a “processor”), may use the data only to provide its service to us, and describes its practices in its privacy policy. The record we can see in RevenueCat’s dashboard does not tell us who you are.

2.5 Device features and permissions

Tappy asks for the following iOS permissions only when you open the feature that needs them. Each is used on your device only and can be revoked at any time in iOS Settings; the related feature then becomes unavailable while the rest of Tappy keeps working.

Tappy does not request access to your microphone, photo library, contacts, or calendar, does not request the Bluetooth permission, and never uses location in the background.

2.6 Game Center and nearby multiplayer

If you are signed in to Game Center, Tappy can submit arcade scores (for example Snake, Taptris, and Mini Golf) to leaderboards and report tap-milestone achievements. Game Center is operated by Apple: your nickname, scores, and achievements can be seen by other players, and by us through Apple’s tools, according to your Game Center settings and Apple’s Game Center privacy terms. Tappy never submits mood, journal, or health information to Game Center. Nearby multiplayer is described in Section 2.5.

2.7 Remote configuration and shop catalog

Tappy reads a small amount of information from a public, read-only Apple iCloud (CloudKit) database that Pacific maintains: announcements, sale banners, the minimum supported app version, the current legal-notice version, and the wardrobe and shop catalog. This lets us update content without shipping a new app version. The App only reads from this database; it never writes anything about you to it. The request goes to Apple’s CloudKit service, which handles it under Apple’s privacy policy. Pacific receives no per-user information from these reads.

When you accept our Terms and this Privacy Policy in the App, Tappy records the version you accepted and the date on your device only. That record is not sent to us.

2.8 Communications with us

If you email us (for support, feedback, a privacy request, or anything else), we receive your email address, whatever you write, and any attachments you include. We use that information only to respond to you, to fix problems, and to keep a record of the request where the law requires it. Our email provider stores this correspondence on our behalf. Emails from children under 13 are handled as described in Section 9.3. Please do not send us journal entries or health details unless you want us to have them; we do not need them to help you.

If you have chosen in iOS Settings to share analytics with app developers, Apple may provide us with aggregated, de-identified crash reports and usage statistics through App Store Connect. These do not identify you, and we cannot link them to you.

2.9 Website visitors

Visiting tappy.net (including when the App opens one of our web pages, such as this one, inside the App) is described in Section 16.

3. What Tappy does not do

• No user accounts, passwords, or login. There is no Pacific account to create, and we hold no profile of you.
• No ads and no tracking. Tappy shows no third-party ads, does not use the advertising identifier (IDFA) or App Tracking Transparency, and does not link data about you across apps or websites or share it for cross-context behavioral advertising.
• No third-party analytics, crash-reporting, or attribution software.
• No selling, renting, or licensing of personal information.
• No collection of your name, birthday, gender, age, location history, contacts, photos, or microphone audio.
• No Pacific server that stores your content, and no monitoring: nobody at Pacific reviews, screens, or has access to what you write.
• No reading of your other Apple Health data. Tappy reads only the two Health types it writes, so it can delete its own entries when you delete them in Tappy.

4. How information is used

Tappy uses the information described in Section 2 for the following purposes, and no others:

• To provide the features you use. Your content and progress are processed on your device to show your mood charts and insights, run habits and to-dos, animate your character, play games, and sync between your devices through your iCloud.
• To keep your purchases working. The anonymous purchase record lets Tappy unlock Tappy Plus, restore purchases on a new device, handle renewals and refunds, and prevent fraud.
• To deliver remote content and notices. Reads from the public configuration database let us show announcements, update the shop catalog, and tell you when our legal documents change.
• To respond to you. If you contact us, we use what you send to answer, troubleshoot, and improve Tappy.
• To understand how Tappy performs in aggregate. Aggregated purchase statistics from RevenueCat and, if you opted in, de-identified crash and usage statistics from Apple help us decide what to fix and build. None of this identifies you.
• To comply with the law and protect the Service. We may use the limited information we hold to comply with legal obligations, enforce our Terms, and protect Tappy, our users, and others from fraud, abuse, or security threats.

If you are in the EEA, the United Kingdom, or another jurisdiction that requires a legal basis for processing, our bases for the information we actually receive are: performance of our contract with you (purchase records, remote configuration, support), our legitimate interests in operating and securing the Service and understanding aggregate performance (which we have balanced against your rights), and compliance with legal obligations. Processing that happens only on your device or in your iCloud account is carried out by the software under your control, and Apple Health, camera, location, motion, local-network, and Face ID features run only after you grant the relevant iOS permission, which you can withdraw at any time.

5. Where your data lives, and who can see it

5.1 On your device

Tappy stores your content in its private app container on your iPhone and Apple Watch. iOS protects this storage with the device’s built-in encryption when your device is locked with a passcode. Other apps cannot read it. Anyone who can unlock your device can open Tappy, so the optional journal lock (Section 10) is there for shared devices. If you back up your device to iCloud Backup or a computer, the backup includes Tappy’s on-device data until that backup is replaced or deleted.

5.2 In your iCloud

If iCloud is enabled for Tappy (iOS Settings → your name → iCloud → Saved to iCloud → Tappy), your content and progress are also stored in the private iCloud database tied to your Apple Account, which is how Tappy keeps your data when you switch or add devices. Apple encrypts this data in transit and at rest and, depending on your iCloud settings such as Advanced Data Protection, may also protect it end-to-end. This storage is part of your iCloud account and your iCloud storage quota; it is governed by Apple’s privacy policy and the iCloud terms. Pacific cannot read, export, or delete your private iCloud data. You can delete Tappy’s synced data using Apple’s settings, except for the progress backup described next.

Progress backup. Tappy also keeps a small backup of your game progress in iCloud key-value storage, a separate part of your iCloud account, so that Sparks and items you have collected are not lost if syncing runs into a problem. The backup holds your Sparks and friendship level, Self-Care Streak and Streak Freezes, perfect days, owned and equipped wardrobe items, saved outfits and the names you give them, badges, gift box history and one-time gifts already claimed, lifetime tap count, the date of your last Daily Adventure, your Daily Adventure setup, including the names of any custom quests you write, and Tappy’s bedtime schedule. It does not contain mood entries, journal text, habits, to-dos, goals, drawings, or Apple Health data. Like the rest of your iCloud data, it is stored by Apple and Pacific cannot see it. Tappy updates the backup whenever your progress changes, so deleting a custom quest or saved outfit in Tappy also removes its name from the backup. iOS does not list this storage in iCloud settings, and deleting Tappy’s data from iCloud there does not remove it, so if you reinstall Tappy on the same Apple Account, this progress can come back (see Section 11).

5.3 Widgets, Live Activities, and the lock screen

If you add Tappy widgets, a small snapshot (today’s mood and mood streak, habit names and progress, and Daily Adventure progress) is shared with the widget through a private shared container on your device so it can be displayed on your home or lock screen. Anyone who can see your screen can see the widget. Remove the widget if you do not want that information visible.

When a timed quest or Focus timer is running, Tappy may show a countdown with the session’s name as a Live Activity on your lock screen and in the Dynamic Island. It is created and updated on your device, not by a Pacific server, and it ends when the session stops. You can turn Live Activities off in iOS Settings → Tappy.

5.4 Notifications

Reminders can show your character’s name and habit or to-do names on your lock screen. You can control what appears in iOS Settings → Notifications → Tappy (for example by turning off lock-screen previews), or turn reminders off inside Tappy.

5.5 Apple Watch

The Tappy Apple Watch app runs independently. It stores its settings and tap counts on the watch. It does not access your mood journal or Apple Health data.

5.6 Shared devices and Family Sharing

Tappy has no separate user profiles. If you share a device, everyone who uses it shares the same Tappy data. If you share an Apple Account, iCloud data is shared as well. Purchases made under Family Sharing are governed by Apple’s Family Sharing rules.

6. Apple Health (HealthKit)

Apple Health integration is off by default. You can turn it on in Tappy’s Settings or from the breathing screen, at which point iOS asks you to grant Tappy access to specific Health data types. You can change or revoke that access at any time in the Health app (Profile → Apps & Services → Tappy, or Privacy → Apps → Tappy, depending on your iOS version).

6.1 What Tappy writes

• Mindful Minutes (the Mindful Session type): the start and end time of breathing and meditation sessions you complete in Tappy.
• State of Mind (iOS 18 and later, with Tappy Plus and only if you turn this option on separately): a momentary-emotion entry created from each mood entry you log, containing the emotion’s pleasantness, associated labels, and time. Your journal text is not written to Health.

6.2 What Tappy reads

Tappy requests read access only to the two data types above, and uses it for one purpose: when you delete a mood entry or session in Tappy, Tappy looks up the matching entry that Tappy itself created in Health so it can delete that entry too. Tappy does not read any other Health data, does not build insights from Health data, and does not import Health data written by other apps or devices.

6.3 Our commitments

• Health data stays in Apple Health on your device. Tappy never transmits it to Pacific, RevenueCat, iCloud (outside of Apple’s own Health sync, which you control), or anyone else.
• We never use Health data for advertising, marketing, analytics, data mining, or any purpose other than the feature you turned on.
• We never sell Health data or share it with data brokers, advertisers, information resellers, or any third party.
• We comply with Apple’s HealthKit developer guidelines and App Store Review requirements for health data.

To delete what Tappy wrote to Health, open the Health app, go to Tappy’s app page, and choose “Delete All Data from Tappy,” or delete individual samples in the relevant Health category.

7. When information is shared

We do not sell, rent, or trade personal information, and we do not share it for advertising. The limited sharing that does occur is listed below.

We have no “affiliates” with whom we share personal information, and we do not use third-party marketing or advertising service providers.

8. Consumer health data notice

Some laws, including Washington’s My Health My Data Act, Nevada’s consumer health data law, and Connecticut’s privacy law, give special protection to “consumer health data,” meaning information that could reveal your past, present, or future physical or mental health. Mood entries, journal text, mindfulness sessions, and State of Mind entries could be consumer health data. This section is our consumer health data privacy notice. It applies to everyone, wherever you live.

8.1 Categories of consumer health data Tappy processes, and why

• Mood and emotion selections, feelings, activities, and reasons you tag — processed on your device to show your mood history, charts, and insights to you.
• Journal text and prompts — processed on your device so you can write, read, search, and export your own reflections.
• Habit, goal, to-do, and custom Daily Adventure quest entries (which may describe wellness routines) — processed on your device to track them for you.
• Breathing, meditation, grounding, and Feelscape session activity — processed on your device to run the session and, if you turn on Apple Health, to record Mindful Minutes in your Health app.
• State of Mind entries — created in your Health app from your mood entries only if you have Tappy Plus and turn that option on.

All processing of consumer health data happens on your device and, if you enable iCloud, in your personal iCloud account. Pacific does not collect, receive, store, or infer consumer health data on its own systems.

8.2 Sources

The only source of consumer health data in Tappy is you: what you enter, select, or do in the App.

8.3 Sharing and third parties

Pacific does not share consumer health data with any third party, affiliate, or service provider, and does not sell it. Consumer health data leaves Tappy only when you direct it: to Apple Health on your device after you grant permission, to your own iCloud account if you enable iCloud, or to recipients you choose when you export or share. We do not process consumer health data for advertising, and we do not use geofencing of any kind.

8.4 Your rights

You have the right to know what consumer health data is processed, to access it, to withdraw consent, and to have it deleted. Because this data is on your device and in your iCloud, you exercise these rights directly: view it in Tappy, export it as a CSV, revoke Apple Health access in the Health app, and delete it using the steps in Section 11. If you believe Pacific holds any consumer health data about you, or you want to make a request or appeal a decision, email cameron@pacific.dev with the subject line “Consumer Health Data Request.” We will respond within the time the applicable law requires (45 days in most states, extendable once if permitted), and we will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our response; if your appeal is denied, you may contact your state attorney general.

9. Children

Tappy is a general-audience app that includes health and wellness topics; its age rating is shown on its App Store listing. Tappy is not directed to children under 13. Because families and children may still use it, Tappy is built so that we collect almost nothing from anyone, whatever their age, and this section explains exactly what that means for children.

9.1 What we collect from children

A child’s mood entries, journal, habits, to-dos, drawings, character, and progress stay on the device and in the family’s iCloud account. We never receive them. The only information Pacific receives from any Tappy user, regardless of age, is (a) the anonymous purchase record described in Section 2.4, and (b) the contents of any email someone chooses to send us. We do not collect names, email addresses, photos, audio, precise location, or contact details through the App, and we do not let children make personal information public through Tappy: nearby multiplayer shows only a random player name, and Game Center is operated by Apple under its own parental controls.

9.2 The purchase identifier

The random identifier in the purchase record is the only persistent identifier associated with Tappy. We use it solely to support Tappy’s internal operations: validating purchases, restoring them on a new device, processing renewals and refunds, and preventing fraud. We make sure it is used for nothing else by never linking it to a name, email address, or other identifier; never using it to contact anyone, build a profile, or serve advertising; and limiting our subscription-management provider, RevenueCat, by contract to processing it only to provide its service to us.

9.3 Emails from children

If we learn that an email came from a child under 13, we use the child’s email address only to reply once to that message. We then delete the message and the address, and we do not contact the child again or add the address to any list.

9.4 Parents’ rights

A parent or guardian may at any time ask us to review any personal information we hold about their child, to delete it, and to refuse any further collection or use of it. Email cameron@pacific.dev with “Parent Request” in the subject line, or write to us at the address in Section 19. Because we hold no names or accounts, we may ask for details that let us find the information, such as the Apple order ID of a purchase or the email address the child used. We do not require a child to provide more information than Tappy needs in order to use any feature. Everything else is on the family’s device and iCloud, where a parent can review or delete it directly using Sections 10 and 11.

We do not disclose children’s personal information to anyone except RevenueCat as our service provider (Section 9.2) and where required by law (Section 7).

9.5 Parental controls

If a child uses Tappy on a device a parent or guardian manages, Apple’s Family Sharing, Screen Time, Ask to Buy, and Game Center parental controls apply. Parents and guardians are responsible for deciding whether Tappy’s wellness, journaling, Apple Health, and multiplayer features are appropriate for their child. If you believe we have received personal information from a child under 13 in a way this section does not describe, contact us and we will delete it promptly.

Users in the European Union may be subject to a higher age of digital consent (up to 16) under national law; the same approach applies.

10. Your choices and controls

• Device permissions. Grant or revoke camera, location, motion, local network, Face ID, notifications, and Health access at any time in iOS Settings → Tappy, or in the Health app.
• iCloud sync. Turn iCloud on or off for Tappy in iOS Settings → your name → iCloud → Saved to iCloud → Tappy. Turning it off keeps your data on your device; deleting the iCloud copy is described in Section 11.
• Apple Health. Turn Mindful Minutes and State of Mind sync on or off inside Tappy, and manage or revoke permissions in the Health app.
• Journal lock. Turn on Face ID / Touch ID / passcode protection for the Mood Journal in Tappy’s mood-diary settings. It is off by default.
• Notifications. Manage reminders inside Tappy, and control lock-screen previews in iOS Settings → Notifications → Tappy.
• Widgets. Add or remove Tappy widgets from your home or lock screen to control what is visible there.
• Game Center. Sign out of Game Center or adjust its privacy settings in iOS Settings → Game Center to stop score submissions and control who sees your profile.
• Nearby multiplayer. Nearby players see only a random player name. To turn nearby multiplayer off entirely, deny the Local Network permission in iOS Settings → Tappy.
• Export. Export your mood journal as a CSV file from Tappy’s mood-diary settings at any time.

11. Deleting your data

Because your data is in your hands, you can delete it without asking us. Here is everything, step by step.

1. Delete individual entries. Swipe or tap to delete mood entries, journal entries, habits, to-dos, goals, and drawings inside Tappy. Deleting a mood entry also removes the matching State of Mind entry Tappy wrote to Health, if that sync is on. The Habits screen offers “Delete All Habits.”
2. Delete everything on your device. Delete the Tappy app (touch and hold the icon → Remove App → Delete App, or iOS Settings → General → iPhone Storage → Tappy → Delete App). “Offload App” does not delete your data. Delete the Watch app from your Apple Watch as well.
3. Delete your iCloud copy. Deleting the app does not remove data already synced to iCloud. Go to iOS Settings → your name → iCloud → Manage Account Storage (or “Saved to iCloud” → Manage) → Tappy → Delete Data from iCloud. Labels vary slightly by iOS version. If you reinstall Tappy without doing this, your data will come back. This step does not remove the progress backup described in Section 5.2, which iOS does not let you delete from Settings: if you reinstall Tappy on the same Apple Account, your Sparks, wardrobe, badges, Daily Adventure setup, and tap count can return. To remove the custom quest names and outfit names stored in that backup, delete those quests and saved outfits in Tappy before you delete the app.
4. Delete Health data Tappy wrote. Open the Health app → your profile → Apps & Services (or Privacy → Apps) → Tappy → Delete All Data from Tappy. You can also turn off Tappy’s write permission there.
5. Game Center. Scores and achievements are held by Apple as part of your Game Center profile and are managed through your Apple Account; Pacific cannot delete them.
6. Cancel your subscription. Deleting the app does not cancel Tappy Plus. Cancel in iOS Settings → your name → Subscriptions → Tappy.
7. Ask us to delete the anonymous purchase record. Email cameron@pacific.dev. Because the record is anonymous, we will need something that lets us find it, such as the order ID from your Apple purchase receipt; we may not be able to locate it otherwise. Deleting it does not affect your Apple purchase history, but it may make restoring Tappy Plus harder (you can still restore through Apple). Apple keeps its own transaction records under its policy.
8. Ask us to delete support correspondence. Email us and we will delete or anonymize your messages, except where we must keep them for legal, security, or accounting reasons.

12. How long information is kept

13. Security

The most effective security measure in Tappy is architectural: we do not hold your content, so it cannot be exposed by a breach of our systems. Beyond that:

• Data on your device is protected by iOS Data Protection and is encrypted when your device is locked with a passcode. Keep a passcode set and iOS up to date.
• Data in your iCloud is encrypted by Apple in transit and at rest, with additional end-to-end protection available through Apple’s Advanced Data Protection.
• All network communication from Tappy (to Apple and to RevenueCat) uses HTTPS/TLS.
• The journal lock is an access control inside the App. It does not add a separate layer of encryption, and it can be satisfied by your device passcode. Pacific cannot bypass, reset, or recover it.
• Access to the RevenueCat dashboard and to our support mailbox is limited to the people who need it to run Tappy and is protected by strong authentication.

No system is perfectly secure. If we learn of a security incident affecting information we hold about you, we will notify you and the relevant authorities as required by law.

14. Your privacy rights

Depending on where you live, you may have legal rights over your personal information. Because nearly all of your Tappy data is under your direct control, most rights can be exercised immediately using the controls in Sections 10 and 11. For anything we hold ourselves (support correspondence and the anonymous purchase record), email cameron@pacific.dev. We will respond within the time the applicable law requires, we may need to verify your request (for example by replying from the email address you used to contact us), and we will never discriminate against you for exercising your rights. You may use an authorized agent where the law allows; we may ask the agent for proof of authority.

14.1 European Economic Area, United Kingdom, and Switzerland

You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, to withdraw consent at any time (without affecting prior processing), and to lodge a complaint with your local data protection authority. Mood, journal, and health information is “special category” data under Article 9 GDPR; Tappy is designed so that this data is processed only on your device and in your iCloud and never reaches us, which is why we do not ask for your explicit consent to process it ourselves. Apple Health, camera, and other device features run only after you grant the relevant permission. We do not make automated decisions with legal or similarly significant effects.

14.2 California

This section supplements the rest of this policy for California residents and serves as our notice at collection. In the preceding 12 months, in connection with Tappy, we (through RevenueCat) collected the following categories of personal information as defined by the CCPA/CPRA: identifiers (an anonymous, randomly generated purchase identifier), and commercial information (App Store purchase and subscription history). If you emailed us, we also collected identifiers and any other information you chose to include. We collected this directly from your device or from you, for the business purposes described in Section 4, and disclosed it only to the service providers and recipients in Section 7. We do not collect sensitive personal information as defined by the CPRA, including health data, precise geolocation, biometric identifiers, or account credentials, and we do not use or disclose any personal information for purposes other than those permitted for service providers and business purposes.

You have the right to know and access the personal information we have collected about you, to delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information and the use of sensitive personal information. We do not sell or share personal information, and we have not done so in the preceding 12 months, so there is nothing to opt out of; we also do not knowingly sell or share the personal information of consumers under 16. We do not offer financial incentives in exchange for personal information. Under California’s “Shine the Light” law (Civil Code §1798.83), you may request information about disclosures of personal information to third parties for their direct-marketing purposes; we make no such disclosures.

Do Not Track and Global Privacy Control. Tappy and tappy.net do not track you across other sites or apps, and we do not use cookies or advertising technology, so there is nothing to disable. We therefore treat all visitors as if a “Do Not Track” or Global Privacy Control signal were on.

14.3 Other U.S. states

Residents of other U.S. states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Texas, and Oregon) may have similar rights to access, correct, delete, and port personal information, to opt out of targeted advertising, sales, and profiling, and to appeal a denied request. We do not engage in targeted advertising, sales, or profiling. To exercise a right or appeal, email us; if we deny your appeal, you may contact your state attorney general.

14.4 Canada, Australia, Brazil, and elsewhere

If your local law grants you rights to access, correct, or delete personal information, or to complain to a privacy regulator, we will honor those rights. Contact us and we will tell you what we hold (usually nothing beyond the anonymous purchase record) and how to proceed.

15. International users and data transfers

Pacific Interactive LLC is located in the United States, and RevenueCat operates from the United States. The anonymous purchase record and any support correspondence are therefore processed in the United States, whose laws may differ from those of your country. For users in the EEA, UK, and Switzerland, we rely on the European Commission’s Standard Contractual Clauses, which are incorporated into RevenueCat’s Data Processing Addendum with us (together with its UK and Swiss transfer terms), and on the limited and anonymous nature of the data, to protect these transfers. Your content and progress are stored by Apple in your iCloud account under Apple’s own arrangements, which you can review in Apple’s privacy policy.

16. The tappy.net website

tappy.net is a static informational site. It has no accounts, forms, comments, cookies set by us, analytics, or advertising. The interactive demos on the home page (such as the fidgets) run entirely in your browser and do not store or send anything. When you load a page (including when the App opens a tappy.net page such as this policy inside the App), the following happens:

• Hosting. The site is served by GitHub Pages (GitHub, Inc.). Like any web host, GitHub receives your IP address, browser type, and the page requested in its server logs, under GitHub’s privacy statement. Pacific does not receive these logs.
• Fonts. Web fonts are served from tappy.net itself, so no font provider receives information about your visit.
• Smart App Banner. Pages include Apple’s Smart App Banner tag so Safari can offer the App. Safari handles that banner under Apple’s privacy policy.
• Outbound links. Links to the App Store, pacific.dev, and social-media pages take you to third-party sites with their own privacy policies.

17. How this maps to the App Store privacy label

Apple asks developers to summarize their data practices in an “App Privacy” label on the App Store. Tappy’s label reflects this policy: Purchases → Purchase History is collected (through RevenueCat) for app functionality and is not linked to your identity and not used for tracking. No other category is collected by Pacific. Health data written to Apple Health, content stored on your device and in your iCloud, and Game Center data handled by Apple are not collected by us and therefore do not appear as data we collect. If the label and this policy ever differ, this policy is the more detailed statement and we will correct the label.

18. Changes to this policy

We may update this Privacy Policy as Tappy evolves or as laws change. When we do, we will revise the “Effective” date at the top and post the new version at www.tappy.net/privacy. For material changes, especially any change that would have Tappy collect a new category of information or share information in a new way, we will provide prominent notice in the App and, where the law requires, ask for your consent before the change applies to you. We will not use previously collected information in materially new ways without telling you first. We encourage you to review this page periodically.

19. Contact

Pacific Interactive LLC
548 Market St, PMB 797753
San Francisco, CA 94104 USA

Email: cameron@pacific.dev
Website: www.pacific.dev · www.tappy.net

Please put “Privacy Request” in the subject line for requests about your rights so we can route them quickly. We aim to acknowledge every request within 10 business days and to resolve it within the time the applicable law requires.