Privacy Policy

Effective date: July 28, 2026 · Version 2026-07-28

TAPiN ("we," "us," "our") is a private social health-and-memory app. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. TAPiN is operated by TapIn Health, Inc., a Delaware corporation (United States).

1. Information we collect

Account & profile

Your name and chosen username, and the email address associated with your Apple (or, in the future, Google) sign-in. If you use Apple's "Hide My Email," we store the private relay address Apple provides for you rather than your personal email.
Date of birth (to confirm you are 13+ and to age-gate certain features), gender, and your city.
A profile photo, if you add one.

Health & fitness data (Apple Health / HealthKit)

With your explicit permission, TAPiN reads workout, step, distance, active-energy, heart-rate, and sleep data from Apple Health to build your fitness dashboard and detect activities. We never use HealthKit data for advertising or marketing, sell it, or use it for data-mining. It is used only to provide the app's features. You can revoke Health access at any time in the iOS Settings app.

Body metrics

Optionally, your height and weight, used only to estimate your resting metabolic rate for more accurate energy stats. These are stored privately and are not shown to other users.

Content you create

Your "TAPs" / moments, photos, notes, comments, reactions, and re-TAPs.
Wellness logs you choose to keep: sleep, mood, diet, hydration, alcohol, and (optionally) menstrual-cycle tracking.

Social & usage data

Your friends, and any groups or challenges you join.
Optional location attached to a moment, and your city for discovery.
A device identifier and push-notification token so we can deliver notifications you've enabled.

2. How we use your information

To provide, personalize, and improve the app: your feed, dashboards, streaks, recaps, and social features.
To send notifications you have opted into (reactions, comments, friend activity, reminders).
To contact you about your account, important service or policy updates, and security notices, using the email associated with your sign-in.
To keep the community safe: reviewing reports and enforcing our Terms.
To secure the service and prevent abuse.

3. How we share your information

With other people, per your choices

TAPiN is built around privacy controls. Your full name is visible only to you and to friends whose requests you've accepted; others see only your @username. You choose, per moment, whether to share it with friends, with specific groups, or keep it private ("Just Me"). Health metrics you share appear only to members of the groups you've opted into.

With service providers (sub-processors)

Google Firebase / Google Cloud: hosting, database, authentication, storage, and push infrastructure.
Apple Push Notification service: to deliver notifications.
Resend: to send transactional email (e.g., from our website's sign-up form).

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

For legal & safety reasons

We may disclose information if required by law, or to protect the rights, safety, and property of our users or the public.

4. Your controls & rights

Visibility: choose who sees each moment; keep any log private.
Block & report: block any user (hiding their content) and report objectionable content in-app.
Delete your account: Settings → Account Actions → Delete Account permanently removes your account and all associated data.
Access / portability: to request a copy of your data, contact us (below).
Depending on where you live (e.g., the EU/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of your personal data, and to lodge a complaint with a regulator. Health data may be treated as "sensitive" / "special category" data and receives heightened protection.

5. Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal data from our live systems; residual copies in routine backups are removed on our normal backup cycle.

6. Security

Data is encrypted in transit and at rest by our infrastructure providers. Access controls limit who can see what. No system is perfectly secure, but we work to protect your information.

7. Children

TAPiN is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

8. International users

We operate in the United States and use U.S.-based infrastructure. If you use TAPiN from outside the U.S., your information may be transferred to and processed in the U.S. and other countries.

9. Changes to this policy

We may update this policy; we'll revise the "Effective date" and version above and, for material changes, ask you to review and re-accept.

10. Contact us

Questions or requests: support@tapinhealth.app.