Privacy Policy
The short version: you don't create an account. Your original photos stay on your phone. Compressed copies are sent securely to our backend and to OpenAI for temporary analysis and are never stored on our servers. We keep your generated listings, your monthly usage and your subscription status so the app works, and you can ask us to delete them at any time.
1. Who we are
This policy explains how Tap Tap Gone (“we”, “us”) processes personal data when you use the Tap Tap Gone mobile app (the “App”) and the website https://taptapgone.com (the “Website”). We are the controller of that data. You can reach us at hello@taptapgone.com.
2. What data we process
Anonymous identifier
When you open the App, it signs in anonymously with Firebase Authentication. This creates a random user identifier tied to your installation. We do not ask for your name, email address or phone number.
Photos
Original photos you take or choose stay in the App's storage on your device. When you tap “Analyze photos”, the App sends compressed copies over an encrypted connection to our backend, which forwards them to OpenAI to identify the item and suggest questions. The photo copies are processed only for that request and are not stored on our servers. Please avoid photographing people, documents or other personal information alongside the items you sell.
Listing data
To create and show your listing history, we store: the condition you choose, your answers to the follow-up questions, the generated title, description, category and price range, the listing language and currency, the listing status and creation time, and the file names of the photos on your device (not the photos themselves).
Usage and subscription data
We store how many listings you have created in the current monthly period and which plan you have (free, monthly or annual). Purchases are handled by Apple or Google; we never see your payment card details. RevenueCat tells us whether your subscription is active, together with transaction identifiers, product, store and expiry date.
Settings stored on your device
Your app language, default currency and whether you have seen the introduction screen are stored locally on your device only.
Website analytics
The Website may use Google Analytics to understand how visitors use it, for example which pages are viewed and how visitors arrived. Google Analytics uses cookies and collects information such as an online identifier, approximate location, browser and device type. The App does not use Google Analytics.
3. Why we process data and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Analyzing photos and generating listings you request | Performance of our contract with you (Art. 6(1)(b)) |
| Keeping your listing history, usage limits and plan status | Performance of contract (Art. 6(1)(b)) |
| Preventing abuse, securing and fixing the service | Legitimate interests (Art. 6(1)(f)) |
| Website analytics | Consent where required (Art. 6(1)(a)), otherwise legitimate interests |
| Accounting and legal obligations | Legal obligation (Art. 6(1)(c)) |
We do not sell your personal data, we do not use it for advertising, and we do not make decisions about you that have legal or similarly significant effects based solely on automated processing.
4. Service providers
We use the following processors to run the service:
- Google Firebase (Google Ireland Ltd. / Google LLC) — anonymous authentication, database and backend functions. Our database and functions run in the europe-central2 (Warsaw) region.
- OpenAI (OpenAI Ireland Ltd. / OpenAI, L.L.C.) — analysis of compressed photo copies and generation of listing text. Under OpenAI's API terms, data sent through the API is not used to train its models and may be retained by OpenAI for a limited period (generally up to 30 days) for abuse monitoring.
- RevenueCat (RevenueCat, Inc.) — subscription management and purchase validation.
- Apple and Google — app distribution and payment processing under their own privacy policies.
- Google Analytics (Google Ireland Ltd.) — Website analytics only.
5. International transfers
Some providers process data outside the European Economic Area, mainly in the United States. Where they do, transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep data
- Photo copies sent for analysis: not stored on our servers after the request completes.
- Listings, usage and plan data: for as long as your anonymous installation exists, or until you ask us to delete them.
- Subscription event records: as long as needed to provide the subscription and meet accounting obligations.
- Website analytics data: up to 14 months.
Because there is no account, your history belongs to your current installation. After you reinstall the App or switch devices, it may no longer be accessible to you, although it remains on our servers until it is deleted.
7. Deleting your data
To delete your data, email hello@taptapgone.com with the subject “Data deletion request”. Because we do not know who you are, we may ask for details that help us find your installation's data, such as the store purchase receipt or the approximate date and content of a listing. Once we delete your anonymous user, all listings, usage and plan data linked to it are removed. Deleting data does not cancel a subscription — manage or cancel subscriptions in your App Store or Google Play account.
8. Your rights
Depending on where you live, you have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent at any time. To exercise these rights, contact us at hello@taptapgone.com. You can also lodge a complaint with a data protection authority — in Poland, the President of the Personal Data Protection Office (UODO) — or with the authority in your country.
9. Security
Data is encrypted in transit. Access to our backend is restricted, and each anonymous user can only read their own listings. No method of transmission or storage is completely secure, but we work to protect your data using industry-standard measures.
10. Children
The App is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has used the App, contact us and we will delete the related data.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the date above. For significant changes we will also let you know in the App. See also our Terms of Use.