Tappy Privacy Policy
Effective: September 8, 2026.
If you are visually impaired, have another disability, or need help accessing this Privacy Policy, email us at cameron@pacific.dev.
The short version
- Your mood entries, journal, habits, to-dos, drawings, and progress stay on your device and, if you turn on iCloud, in your own iCloud account. Pacific Interactive LLC cannot see them and never receives a copy.
- Tappy has no accounts, no login, no advertising, no analytics SDKs, and no tracking. We do not use the advertising identifier, we do not fingerprint your device, and we never sell information about you.
- The only information about you that leaves your device for our benefit is an anonymous purchase record held by our subscription-management provider (currently RevenueCat) so that Tappy Plus and other purchases keep working across your devices.
- Apple Health integration is off by default. When you turn it on, Tappy writes Mindful Minutes and (with Tappy Plus) State of Mind entries to the Health app on your device. That data never goes to us and is never used for marketing.
- You are in control. You can export your mood journal as a CSV, lock it with Face ID, revoke any permission, and delete everything by deleting the app and its iCloud data. Section 12 walks you through it.
1. Who we are and what this covers
Pacific Interactive LLC (“Pacific,” “we,” “us,” or “our”), a California limited liability company, publishes Tappy: Sensory Fidget & Focus. This Privacy Policy explains what information the Tappy iPhone and iPad app, the Tappy Apple Watch app, Tappy’s widgets, and the website at tappy.net (together, the “Service”) handle, where that information lives, who can see it, and the choices you have.
This policy applies only to Tappy and tappy.net. Pacific’s other applications have their own privacy policies. If a link inside the App or on a Pacific website points to Pacific’s general privacy policy, this Tappy Privacy Policy controls for Tappy to the extent of any conflict.
For purposes of data-protection laws such as the GDPR, Pacific Interactive LLC is the “controller” of the limited information described in this policy that we actually receive. Information that stays on your device or in your personal iCloud account is under your control and Apple’s, under your agreements with Apple; we do not have access to it.
Tappy is a casual sensory fidget, entertainment, and general wellness companion. It is not a medical service and does not collect information for medical purposes. Our Terms & Conditions describe the Service’s wellness disclaimers and govern your use of it.
2. Our principles
- Keep it on your device. The best way to protect your information is not to collect it. Tappy is built so that the personal things you record never need to reach a server we run. We do not run a server that stores your content.
- No accounts, no ads, no tracking. Tappy is funded by optional purchases, not by data. There is nothing in Tappy that profiles you, follows you across apps or websites, or shows you advertising.
- Only what a feature needs, only while you use it. Every device permission Tappy asks for powers a specific feature you tapped on, is used on your device, and can be turned off in iOS Settings without breaking the rest of the app.
- Plain language. We have tried to write this policy so a normal person can read it. If anything is unclear, email us and we will explain, and we may improve the wording.
- If we change something, we will tell you. Tappy will not start collecting new categories of information without updating this policy first and, where the law requires it, asking for your consent.
3. Information Tappy handles, and where it lives
This section lists every category of information Tappy works with. For each one we say where the data is stored and whether Pacific can see it. “On your device” means stored inside Tappy’s private storage on your iPhone, iPad, or Apple Watch. “Your iCloud” means the private iCloud database associated with your Apple Account, which only you (and Apple, under Apple’s iCloud terms) can access.
3.1 Content you create
When you use Tappy’s wellness and planning features, you may enter: mood or emotion selections; feelings, activities, and reasons you tag; journal text and the prompt you responded to; habit names, mottos, notes, and reminder times; to-do titles, notes, and subtasks; goals and goal updates; drawings; the name you give your Tappy character; and your customization preferences (theme colors, faces, sounds, haptic intensity, and similar settings).
Where it lives: on your device, and in your iCloud if you have iCloud enabled for Tappy. Can Pacific see it? No. Tappy does not upload this content to Pacific servers, and Pacific has no ability to read your private iCloud database. We do not use it to train models, build profiles, or for advertising.
3.2 Game and progress data
Tappy keeps track of gameplay and care mechanics: tap counts, Sparks, Self-Care Streaks and Streak Freezes, energy and hunger, wardrobe and equipped items, badges, Daily Adventure quests and chest history, timers, and arcade scores.
Where it lives: on your device and, for most of it, in your iCloud so that it syncs between your devices. The Apple Watch app keeps its own settings and tap counts on the watch. Can Pacific see it? No, except for aggregate Game Center scores and achievements you choose to submit (see Section 3.6).
3.3 Apple Health data
If you turn on Apple Health integration, Tappy writes Mindful Minutes from breathing and meditation sessions and, with Tappy Plus, State of Mind entries derived from your mood entries into the Health app. Section 7 describes this in detail. Can Pacific see it? No. Health data stays in Apple Health on your device and is never transmitted to us.
3.4 Purchase information
Tappy Plus (monthly, annual, or lifetime), the optional “Buy Me Coffee” tip, and any legacy one-time packs are sold through Apple’s App Store. Apple processes the payment and holds your payment details and Apple Account information under Apple’s privacy policy. We never receive your name, email address, or payment card details from a purchase.
To confirm which purchases are active and to restore them on a new device, Tappy uses a subscription-management provider, currently RevenueCat, Inc. RevenueCat receives and stores, on our behalf:
- a randomly generated anonymous identifier created by the RevenueCat software on your device (it is not your Apple ID, name, email, or advertising identifier, and Tappy does not link it to anything that identifies you);
- your App Store receipt and the transaction details derived from it (product identifiers, purchase and renewal dates, prices, refund or cancellation status);
- basic technical context: platform, iOS version, Tappy version, country, and locale, plus first-seen and last-seen timestamps.
Tappy does not send RevenueCat your name, email, phone number, IP address as a stored attribute, advertising identifier, or any content from the app. Like any internet service, RevenueCat’s servers necessarily see your device’s IP address while the app is communicating with them. RevenueCat acts as our service provider (a “processor”), may use the data only to provide its service to us, and describes its practices in its privacy policy. We can see this anonymous purchase record in RevenueCat’s dashboard; it does not tell us who you are.
3.5 Device features and permissions
Tappy asks for the following iOS permissions only when you open the feature that needs them. Each is used on your device only and can be revoked at any time in iOS Settings; the related feature then becomes unavailable while the rest of Tappy keeps working.
| Permission | What it powers | What happens to the data |
|---|---|---|
| Camera | An optional live camera backdrop behind the fidget spinner. | The live preview is shown on screen only. No photo or video is captured, saved, analyzed, or uploaded. |
| Location (While Using) | The compass fidget, which needs your device’s heading to point north. | Tappy uses the heading and reads location only as required by iOS to provide heading. Location is not stored, not shared, and not used for anything else. Tappy estimates where the sun and moon are for the character’s backdrop from your device’s time zone, not from your location. |
| Motion sensors | Tilt-based physics fidgets (for example the ball pit, slinky, and bouncy ball). | Accelerometer and gyroscope readings drive on-screen physics in real time and are not stored. |
| Local Network | Nearby multiplayer (for example Connect Four over your local Wi‑Fi). | Your device’s name (as set in iOS Settings, for example “Sam’s iPhone”) is shown to the nearby player you connect with, and game moves are exchanged directly between the two devices. Nothing goes through Pacific servers. Same-device games share nothing. |
| Face ID / Touch ID | The optional journal lock, which asks you to authenticate before opening the Mood Journal or exporting it. | Authentication is handled entirely by iOS. Tappy never sees your biometric data; it only receives a yes-or-no result. |
| Notifications | Reminders you set (mood check-ins, habits, to-dos, Daily Adventure, timers), plus silent iCloud sync notifications. | Reminders are scheduled locally on your device. They may include your Tappy character’s name and the names of habits or to-dos you created, so they can be visible on your lock screen. They never include journal text. Silent sync notifications come from Apple’s iCloud service and contain no content. |
| Apple Health | Optional Mindful Minutes and State of Mind sync. | See Section 7. |
Tappy does not request access to your microphone, photo library, contacts, calendar, Bluetooth, or precise background location.
3.6 Game Center and nearby multiplayer
If you are signed in to Game Center, Tappy can submit arcade scores (for example tap counts, Snake, Tap-Tris, Bubble Pop times, and Mini Golf stars) to leaderboards and report tap-milestone achievements. Game Center is operated by Apple. Your Game Center nickname, avatar, scores, and achievements are handled under Apple’s Game Center privacy terms and your Game Center settings, which you control in iOS Settings. Tappy never submits mood, journal, or health information to Game Center. Nearby multiplayer is described in Section 3.5.
3.7 Remote configuration and shop catalog
Tappy reads a small amount of information from a public, read-only Apple iCloud (CloudKit) database that Pacific maintains: announcements, sale banners, the minimum supported app version, the current legal-notice version, and the wardrobe and shop catalog. This lets us update content without shipping a new app version. The App only reads from this database; it never writes anything about you to it. The request goes to Apple’s CloudKit service, which handles it under Apple’s privacy policy. Pacific receives no per-user information from these reads.
When you accept our Terms and this Privacy Policy in the App, Tappy records the version you accepted and the date on your device only. That record is not sent to us.
3.8 Communications with us
If you email us (for support, feedback, a privacy request, or anything else), we receive your email address, whatever you write, and any attachments you include. We use that information only to respond to you, to fix problems, and to keep a record of the request where the law requires it. Please do not send us journal entries or health details unless you want us to have them; we do not need them to help you.
If you have chosen in iOS Settings to share analytics with app developers, Apple may provide us with aggregated, de-identified crash reports and usage statistics through App Store Connect. These do not identify you, and we cannot link them to you.
3.9 Website visitors
Visiting tappy.net (including when the App opens one of our web pages, such as this one, inside the App) is described in Section 17.
4. What Tappy does not do
Because privacy policies usually describe what a company collects, it is worth stating clearly what Tappy does not do:
- No user accounts, passwords, or login. There is no Pacific account to create, and we hold no profile of you.
- No third-party advertising, ad networks, or advertising SDKs. Tappy has never shown third-party ads and does not use the Apple advertising identifier (IDFA) or App Tracking Transparency, because there is nothing to track.
- No third-party analytics, crash-reporting, or attribution SDKs (no Firebase, Google Analytics, Mixpanel, Amplitude, Meta, AppsFlyer, Adjust, Branch, Sentry, or similar).
- No “tracking” as defined by Apple or by the CCPA: we do not link data about you across apps or websites, and we do not share personal information for cross-context behavioral advertising.
- No selling, renting, or licensing of personal information, and no sharing of health-related information for any purpose other than the ones you turn on yourself.
- No collection of your name, birthday, gender, age, precise location history, contacts, photos, or microphone audio.
- No Pacific server that stores your content. Your mood entries, journal, habits, to-dos, and drawings never leave your device and your own iCloud account.
- No reading of your other Apple Health data. Tappy asks for read access to the two Health types it writes only so it can find and delete its own entries when you delete them in Tappy.
- No monitoring. Nobody at Pacific reviews, screens, or has access to what you write.
5. How information is used
Tappy uses the information described in Section 3 for the following purposes, and no others:
- To provide the features you use. Your content and progress are processed on your device to show your mood charts and insights, run habits and to-dos, animate your character, play games, and sync between your devices through your iCloud.
- To keep your purchases working. The anonymous purchase record lets Tappy unlock Tappy Plus, restore purchases on a new device, handle renewals and refunds, and prevent fraud.
- To deliver remote content and notices. Reads from the public configuration database let us show announcements, update the shop catalog, and tell you when our legal documents change.
- To respond to you. If you contact us, we use what you send to answer, troubleshoot, and improve Tappy.
- To understand how Tappy performs in aggregate. Aggregated purchase statistics from RevenueCat and, if you opted in, de-identified crash and usage statistics from Apple help us decide what to fix and build. None of this identifies you.
- To comply with the law and protect the Service. We may use the limited information we hold to comply with legal obligations, enforce our Terms, and protect Tappy, our users, and others from fraud, abuse, or security threats.
If you are in the EEA, the United Kingdom, or another jurisdiction that requires a legal basis for processing, our bases for the information we actually receive are: performance of our contract with you (purchase records, remote configuration, support), our legitimate interests in operating and securing the Service and understanding aggregate performance (which we have balanced against your rights), and compliance with legal obligations. Processing that happens only on your device or in your iCloud account is carried out by the software under your control, and Apple Health, camera, location, motion, local-network, and Face ID features run only after you grant the relevant iOS permission, which you can withdraw at any time.
6. Where your data lives, and who can see it
6.1 On your device
Tappy stores your content in its private app container on your iPhone, iPad, and Apple Watch. iOS protects this storage with the device’s built-in encryption when your device is locked with a passcode. Other apps cannot read it. Anyone who can unlock your device can open Tappy, so the optional journal lock (Section 11) is there for shared devices.
6.2 In your iCloud
If iCloud is enabled for Tappy (iOS Settings → your name → iCloud → Saved to iCloud → Tappy), your content and progress are also stored in the private iCloud database tied to your Apple Account, which is how Tappy syncs between your iPhone and iPad. Apple encrypts this data in transit and at rest and, depending on your iCloud settings such as Advanced Data Protection, may also protect it end-to-end. This storage is part of your iCloud account and your iCloud storage quota; it is governed by Apple’s privacy policy and the iCloud terms. Pacific cannot read, export, or delete your private iCloud data; only you can, using Apple’s settings.
6.3 Widgets and the lock screen
If you add Tappy widgets, a small snapshot (today’s mood selection, streaks, habit names and progress, to-do titles, Sparks, and adventure progress) is shared with the widget through a private shared container on your device so it can be displayed on your home or lock screen. Anyone who can see your screen can see the widget. Remove the widget if you do not want that information visible.
6.4 Notifications
Reminders can show your character’s name and habit or to-do names on your lock screen. You can control what appears in iOS Settings → Notifications → Tappy (for example by turning off lock-screen previews), or turn reminders off inside Tappy.
6.5 Apple Watch
The Tappy Apple Watch app runs independently. It stores its settings and tap counts on the watch and can submit scores to Game Center. It does not access your mood journal or Apple Health data.
6.6 Shared devices and Family Sharing
Tappy has no separate user profiles. If you share a device, everyone who uses it shares the same Tappy data. If you share an Apple Account, iCloud data is shared as well. Purchases made under Family Sharing are governed by Apple’s Family Sharing rules.
7. Apple Health (HealthKit)
Apple Health integration is off by default. You can turn it on in Tappy’s Settings or from the breathing screen, at which point iOS asks you to grant Tappy access to specific Health data types. You can change or revoke that access at any time in the Health app (Profile → Apps & Services → Tappy, or Privacy → Apps → Tappy, depending on your iOS version).
7.1 What Tappy writes
- Mindful Minutes (the Mindful Session type): the start and end time of breathing and meditation sessions you complete in Tappy.
- State of Mind (iOS 18 and later, with Tappy Plus and only if you turn this option on separately): a momentary-emotion entry created from each mood entry you log, containing the emotion’s pleasantness, associated labels, and time. Your journal text is not written to Health.
7.2 What Tappy reads
Tappy requests read access only to the two data types above, and uses it for one purpose: when you delete a mood entry or session in Tappy, Tappy looks up the matching entry that Tappy itself created in Health so it can delete that entry too. Tappy does not read any other Health data, does not build insights from Health data, and does not import Health data written by other apps or devices.
7.3 Our commitments
- Health data stays in Apple Health on your device. Tappy never transmits it to Pacific, RevenueCat, iCloud (outside of Apple’s own Health sync, which you control), or anyone else.
- We never use Health data for advertising, marketing, analytics, data mining, or any purpose other than the feature you turned on.
- We never sell Health data or share it with data brokers, advertisers, information resellers, or any third party.
- We comply with Apple’s HealthKit developer guidelines and App Store Review requirements for health data.
To delete what Tappy wrote to Health, open the Health app, go to Tappy’s app page, and choose “Delete All Data from Tappy,” or delete individual samples in the relevant Health category.
8. When information is shared
We do not sell, rent, or trade personal information, and we do not share it for advertising. The limited sharing that does occur is listed below.
| Recipient | What they receive | Why |
|---|---|---|
| Apple Inc. | App Store purchase and Apple Account data (Apple’s own); your private iCloud data (stored for you, not shared with us); Health data (on your device); Game Center scores and achievements; push-notification routing; de-identified analytics if you opted in. | Apple provides the platforms Tappy runs on. Each is governed by Apple’s privacy policy and your Apple settings. |
| RevenueCat, Inc. (service provider) | Anonymous purchase record described in Section 3.4. | To validate, restore, and manage purchases on our behalf. Bound by contract to use the data only to provide its service to us. |
| Nearby players | Your device name and game moves, over your local network only. | Only when you start a nearby multiplayer game. |
| People you choose | Whatever you export or share: a mood-journal CSV, a drawing image, a screenshot. | Only when you use the share sheet or export. Once shared, we cannot control what the recipient does with it. |
| Website hosting and font providers | Standard web request data (IP address, browser type) when you visit tappy.net. | See Section 17. |
| Professional advisors | Only the information relevant to their work (for example, support correspondence involved in a legal matter). | Lawyers, accountants, and similar advisors, under confidentiality obligations. |
| Authorities and others as required by law | The limited information we actually hold, if legally compelled. | To comply with law, a valid subpoena or court order, or to protect the rights, safety, or property of Pacific, our users, or others. Because we hold no content and no identity data, there is very little we could produce. |
| A successor business | Information we hold, transferred as part of the business. | If Pacific or Tappy is involved in a merger, acquisition, financing, reorganization, or sale of assets. We will notify you (for example in the App or on tappy.net) before your information becomes subject to a different privacy policy. |
We have no “affiliates” with whom we share personal information, and we do not use third-party marketing or advertising service providers.
9. Consumer health data notice
Some laws, including Washington’s My Health My Data Act, Nevada’s consumer health data law, and Connecticut’s privacy law, give special protection to “consumer health data,” meaning information that could reveal your past, present, or future physical or mental health. Mood entries, journal text, mindfulness sessions, and State of Mind entries could be consumer health data. This section is our consumer health data privacy notice. It applies to everyone, wherever you live.
9.1 Categories of consumer health data Tappy processes, and why
- Mood and emotion selections, feelings, activities, and reasons you tag — processed on your device to show your mood history, charts, and insights to you.
- Journal text and prompts — processed on your device so you can write, read, search, and export your own reflections.
- Habit, goal, and to-do entries (which may describe wellness routines) — processed on your device to track them for you.
- Breathing, meditation, grounding, and Feelscape session activity — processed on your device to run the session and, if you turn on Apple Health, to record Mindful Minutes in your Health app.
- State of Mind entries — created in your Health app from your mood entries only if you have Tappy Plus and turn that option on.
All processing of consumer health data happens on your device and, if you enable iCloud, in your personal iCloud account. Pacific does not collect, receive, store, or infer consumer health data on its own systems.
9.2 Sources
The only source of consumer health data in Tappy is you: what you enter, select, or do in the App.
9.3 Sharing and third parties
Pacific does not share consumer health data with any third party, affiliate, or service provider, and does not sell it. Consumer health data leaves Tappy only when you direct it: to Apple Health on your device after you grant permission, to your own iCloud account if you enable iCloud, or to recipients you choose when you export or share. We do not process consumer health data for advertising, and we do not use geofencing of any kind.
9.4 Your rights
You have the right to know what consumer health data is processed, to access it, to withdraw consent, and to have it deleted. Because this data is on your device and in your iCloud, you exercise these rights directly: view it in Tappy, export it as a CSV, revoke Apple Health access in the Health app, and delete it using the steps in Section 12. If you believe Pacific holds any consumer health data about you, or you want to make a request or appeal a decision, email cameron@pacific.dev with the subject line “Consumer Health Data Request.” We will respond within the time the applicable law requires (45 days in most states, extendable once if permitted), and we will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our response; if your appeal is denied, you may contact your state attorney general.
10. Children
Tappy is a general-audience app that includes health and wellness topics; its age rating is shown on its App Store listing. Tappy is not directed to children under 13, and we do not knowingly collect personal information from children under 13 or from anyone else, because Tappy does not collect personal information beyond the anonymous purchase record described in Section 3.4.
If a child uses Tappy on a device a parent or guardian manages, the child’s content stays on that device and in the family’s iCloud account, subject to Apple’s Family Sharing, Screen Time, Ask to Buy, and Game Center parental controls. Parents and guardians are responsible for deciding whether Tappy’s wellness, journaling, Apple Health, and multiplayer features are appropriate for their child. If you believe we have received personal information from a child under 13 without verifiable parental consent as required by law (for example through a support email), contact us and we will delete it promptly.
Users in the European Union may be subject to a higher age of digital consent (up to 16) under national law; the same approach applies.
11. Your choices and controls
- Device permissions. Grant or revoke camera, location, motion, local network, Face ID, notifications, and Health access at any time in iOS Settings → Tappy, or in the Health app.
- iCloud sync. Turn iCloud on or off for Tappy in iOS Settings → your name → iCloud → Saved to iCloud → Tappy. Turning it off keeps your data on your device; deleting the iCloud copy is described in Section 12.
- Apple Health. Turn Mindful Minutes and State of Mind sync on or off inside Tappy, and manage or revoke permissions in the Health app.
- Journal lock. Turn on Face ID / Touch ID / passcode protection for the Mood Journal in Tappy’s mood-diary settings. It is off by default.
- Notifications. Manage reminders inside Tappy, and control lock-screen previews in iOS Settings → Notifications → Tappy.
- Widgets. Add or remove Tappy widgets from your home or lock screen to control what is visible there.
- Game Center. Sign out of Game Center or adjust its privacy settings in iOS Settings → Game Center to stop score submissions and control who sees your profile.
- Nearby multiplayer. Change your device name in iOS Settings → General → About → Name if you do not want it shown to nearby players, or deny the Local Network permission.
- Export. Export your mood journal as a CSV file (columns: date, mood, feelings, reasons, prompt, journal) from Tappy’s mood-diary settings at any time.
- Reduce Motion and haptics. Not privacy settings, but available in iOS Accessibility and Tappy’s settings if visual or haptic effects bother you.
12. Deleting your data
Because your data is in your hands, you can delete it without asking us. Here is everything, step by step.
- Delete individual entries. Swipe or tap to delete mood entries, journal entries, habits, to-dos, goals, and drawings inside Tappy. Deleting a mood entry also removes the matching State of Mind entry Tappy wrote to Health, if that sync is on. The Habits screen offers “Delete All Habits.”
- Delete everything on your device. Delete the Tappy app (touch and hold the icon → Remove App → Delete App, or iOS Settings → General → iPhone Storage → Tappy → Delete App). “Offload App” does not delete your data. Delete the Watch app from your Apple Watch as well.
- Delete your iCloud copy. Deleting the app does not remove data already synced to iCloud. Go to iOS Settings → your name → iCloud → Manage Account Storage (or “Saved to iCloud” → Manage) → Tappy → Delete Data from iCloud. Labels vary slightly by iOS version. If you reinstall Tappy without doing this, your data will come back.
- Delete Health data Tappy wrote. Open the Health app → your profile → Apps & Services (or Privacy → Apps) → Tappy → Delete All Data from Tappy. You can also turn off Tappy’s write permission there.
- Game Center. Scores and achievements are held by Apple as part of your Game Center profile and are managed through your Apple Account; Pacific cannot delete them.
- Cancel your subscription. Deleting the app does not cancel Tappy Plus. Cancel in iOS Settings → your name → Subscriptions → Tappy.
- Ask us to delete the anonymous purchase record. Email cameron@pacific.dev. Because the record is anonymous, we will need something that lets us find it, such as the order ID from your Apple purchase receipt; we may not be able to locate it otherwise. Deleting it does not affect your Apple purchase history, but it may make restoring Tappy Plus harder (you can still restore through Apple). Apple keeps its own transaction records under its policy.
- Ask us to delete support correspondence. Email us and we will delete or anonymize your messages, except where we must keep them for legal, security, or accounting reasons.
13. How long information is kept
| Information | Kept by | For how long |
|---|---|---|
| Content and progress | You (device and iCloud) | Until you delete it, delete the app, or remove Tappy’s iCloud data. Pacific holds no copy. |
| Apple Health entries | You (Health app) | Until you delete them in Health or in Tappy. |
| Anonymous purchase record | RevenueCat, on our behalf | For as long as needed to keep your purchases working and to meet accounting and legal obligations; deleted or anonymized on request as described in Section 12. |
| Support emails | Pacific | As long as needed to resolve your request and for a reasonable period afterward, generally no more than three years, unless a legal claim or obligation requires longer. |
| Legal acceptance record | You (device) | Until you delete the app. |
| Website server logs | Our hosting provider | Under the hosting provider’s retention policy (Section 17). Pacific does not receive them. |
14. Security
The most effective security measure in Tappy is architectural: we do not hold your content, so it cannot be exposed by a breach of our systems. Beyond that:
- Data on your device is protected by iOS Data Protection and is encrypted when your device is locked with a passcode. Keep a passcode set and iOS up to date.
- Data in your iCloud is encrypted by Apple in transit and at rest, with additional end-to-end protection available through Apple’s Advanced Data Protection.
- All network communication from Tappy (to Apple and to RevenueCat) uses HTTPS/TLS.
- The journal lock is an access control inside the App. It does not add a separate layer of encryption, and it can be satisfied by your device passcode. Pacific cannot bypass, reset, or recover it.
- Access to the RevenueCat dashboard and to our support mailbox is limited to the people who need it to run Tappy and is protected by strong authentication.
No system is perfectly secure. If we learn of a security incident affecting information we hold about you, we will notify you and the relevant authorities as required by law.
15. Your privacy rights
Depending on where you live, you may have legal rights over your personal information. Because nearly all of your Tappy data is under your direct control, most rights can be exercised immediately using the controls in Sections 11 and 12. For anything we hold ourselves (support correspondence and the anonymous purchase record), email cameron@pacific.dev. We will respond within the time the applicable law requires, we may need to verify your request (for example by replying from the email address you used to contact us), and we will never discriminate against you for exercising your rights. You may use an authorized agent where the law allows; we may ask the agent for proof of authority.
15.1 European Economic Area, United Kingdom, and Switzerland
You have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, to withdraw consent at any time (without affecting prior processing), and to lodge a complaint with your local data protection authority. Mood, journal, and health information is “special category” data under Article 9 GDPR; Tappy is designed so that this data is processed only on your device and in your iCloud and never reaches us, which is why we do not ask for your explicit consent to process it ourselves. Apple Health, camera, and other device features run only after you grant the relevant permission. We do not make automated decisions with legal or similarly significant effects.
15.2 California
This section supplements the rest of this policy for California residents and serves as our notice at collection. In the preceding 12 months, in connection with Tappy, we (through RevenueCat) collected the following categories of personal information as defined by the CCPA/CPRA: identifiers (an anonymous, randomly generated purchase identifier), and commercial information (App Store purchase and subscription history). If you emailed us, we also collected identifiers and any other information you chose to include. We collected this directly from your device or from you, for the business purposes described in Section 5, and disclosed it only to the service providers and recipients in Section 8. We do not collect sensitive personal information as defined by the CPRA, including health data, precise geolocation, biometric identifiers, or account credentials, and we do not use or disclose any personal information for purposes other than those permitted for service providers and business purposes.
You have the right to know and access the personal information we have collected about you, to delete it, to correct it, and to opt out of the “sale” or “sharing” of personal information and the use of sensitive personal information. We do not sell or share personal information, and we have not done so in the preceding 12 months, so there is nothing to opt out of; we also do not knowingly sell or share the personal information of consumers under 16. We do not offer financial incentives in exchange for personal information. Under California’s “Shine the Light” law (Civil Code §1798.83), you may request information about disclosures of personal information to third parties for their direct-marketing purposes; we make no such disclosures.
Do Not Track and Global Privacy Control. Tappy and tappy.net do not track you across other sites or apps, and we do not use cookies or advertising technology, so there is nothing to disable. We therefore treat all visitors as if a “Do Not Track” or Global Privacy Control signal were on.
15.3 Other U.S. states
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port personal information, to opt out of targeted advertising, sales, and profiling, and to appeal a denied request. We do not engage in targeted advertising, sales, or profiling. To exercise a right or appeal, email us; if we deny your appeal, you may contact your state attorney general.
15.4 Canada, Australia, Brazil, and elsewhere
If your local law grants you rights to access, correct, or delete personal information, or to complain to a privacy regulator, we will honor those rights. Contact us and we will tell you what we hold (usually nothing beyond the anonymous purchase record) and how to proceed.
16. International users and data transfers
Pacific Interactive LLC is located in the United States, and RevenueCat operates from the United States. The anonymous purchase record and any support correspondence are therefore processed in the United States, whose laws may differ from those of your country. For users in the EEA, UK, and Switzerland, we rely on the European Commission’s Standard Contractual Clauses, which are incorporated into RevenueCat’s Data Processing Addendum with us (together with its UK and Swiss transfer terms), and on the limited and anonymous nature of the data, to protect these transfers. Your content and progress are stored by Apple in your iCloud account under Apple’s own arrangements, which you can review in Apple’s privacy policy.
17. The tappy.net website
tappy.net is a static informational site. It has no accounts, forms, comments, cookies set by us, analytics, or advertising. When you load a page (including when the App opens a tappy.net page such as this policy inside the App), the following happens:
- Hosting. The site is served by GitHub Pages (GitHub, Inc.). Like any web host, GitHub receives your IP address, browser type, and the page requested in its server logs, under GitHub’s privacy statement. Pacific does not receive these logs.
- Fonts. Pages load web fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which means Google receives your IP address and browser information for that request, under Google’s privacy policy. Google states that Google Fonts requests are not used for advertising or cross-site tracking.
- App Store badge and Smart App Banner. The “Download on the App Store” badge is loaded from Apple’s servers, and the site uses Apple’s Smart App Banner tag so Safari can offer the App; these requests go to Apple under Apple’s privacy policy.
- Outbound links. Links to the App Store, pacific.dev, and social-media pages take you to third-party sites with their own privacy policies.
We do not respond differently to Do Not Track or Global Privacy Control signals because we do not track anyone in the first place (Section 15.2).
18. How this maps to the App Store privacy label
Apple asks developers to summarize their data practices in an “App Privacy” label on the App Store. Tappy’s label reflects this policy: Purchases → Purchase History is collected (through RevenueCat) for app functionality and is not linked to your identity and not used for tracking. No other category is collected by Pacific. Health data written to Apple Health, content stored on your device and in your iCloud, and Game Center data handled by Apple are not collected by us and therefore do not appear as data we collect. If the label and this policy ever differ, this policy is the more detailed statement and we will correct the label.
19. Changes to this policy
We may update this Privacy Policy as Tappy evolves or as laws change. When we do, we will revise the “Effective” date at the top and post the new version at www.tappy.net/privacy. For material changes, especially any change that would have Tappy collect a new category of information or share information in a new way, we will provide prominent notice in the App and, where the law requires, ask for your consent before the change applies to you. We will not use previously collected information in materially new ways without telling you first. We encourage you to review this page periodically.
20. Contact
Pacific Interactive LLC
548 Market St, PMB 797753
San Francisco, CA 94104 USA
Email: cameron@pacific.dev
Website: www.pacific.dev · www.tappy.net
Please put “Privacy Request” in the subject line for requests about your rights so we can route them quickly. We aim to acknowledge every request within 10 business days and to resolve it within the time the applicable law requires.
