Privacy Policy

1. Who is responsible

   Tapolo is developed and published by an independent developer based in Poland (“we”, “us”). Under the General Data Protection Regulation (GDPR), that developer is the controller of the personal data described in this policy.

   Questions, requests and complaints go to pj.dev.apps@gmail.com . Every privacy message gets an answer, usually within a few working days and always within one month, as the GDPR requires.

2. What this policy covers

   This policy covers the Tapolo app for iPhone and this website. Apple’s own services, such as the App Store and iCloud, are governed by Apple’s privacy policy.

3. Data stored on your iPhone

   To work, Tapolo stores the following on your iPhone, inside the app’s own storage:

   • your progress: the level you have reached and the stars you earned on each level;
   • your Daily results: the days you solved, and the mistakes and time for each;
   • your hint count, your lives and the time of the next life;
   • your settings: sound, haptics, theme, language and skin;
   • the purchase record described under “Purchases”;
   • counters that space out full-screen ads, such as the levels completed since the last one;
   • small records the game needs to work, such as whether you have seen the introduction, a skin trial in progress and when Tapolo last asked you for a rating.

   This data does not identify you and is not sent to us. It stays on your device until you delete the app.

4. Purchases

   In-app purchases are processed by Apple through the App Store. Apple handles your payment and your Apple Account. We do not receive your name, email address, payment card or billing details.

   When you buy something, the app receives confirmation of the purchase so it can unlock what you bought. For purchases that deliver hints or lives, namely the lives refill and the hints included with Premium, the app keeps a record of each purchase so that it is never delivered twice: a one-way fingerprint (a shortened SHA-256 hash) of the purchase identifier, never the identifier itself, with the number of hints delivered and the day of purchase. The record contains no name or Apple Account details and is stored on your device.

5. Purchase management (RevenueCat)

   To know which purchases are active, the app uses RevenueCat, Inc. as a processor acting on our instructions. RevenueCat receives the App Store transaction and receipt data, an anonymous app user ID that RevenueCat creates and that is not linked to your name, and basic technical information such as the app version, iOS version, device model and App Store country. It does not receive your advertising identifier. It answers the app with one thing only: what you have unlocked.

   See RevenueCat’s privacy policy.

6. Ads (Google AdMob)

   The free version of Tapolo shows ads served by Google AdMob, a Google service. There are no banner ads.

   • Full-screen ads (interstitials) appear now and then after you complete a level: never before level 6, never in the first five minutes of your first session, never in Daily, at most once every three levels and at most once every two minutes.
   • Rewarded ads are optional: you choose to watch one in exchange for a reward, such as a hint, extra hearts, a life or a short skin trial.

   Buying Remove Ads or Premium switches off the full-screen ads. Rewarded ads stay available, but only when you choose them.

   In the European Economic Area, the United Kingdom and Switzerland, Google’s consent form asks for your choices before the first ad. After you have completed your second level, iOS asks whether Tapolo may track you across other companies’ apps and websites; Tapolo never asks at launch. If you do not allow tracking, you still see ads, but without your device’s advertising identifier, so they are less tailored to you.

   When an ad is requested, Google may process your advertising identifier (only if you allowed tracking), your IP address and the approximate location derived from it, device and app information, information about the ads shown, clicked and measured, and diagnostic and performance data. Google uses this data to show and measure ads, to personalise them where you agreed, and to prevent fraud. For this processing Google acts as an independent controller. See how Google uses information from apps that use its services.

   You can change your tracking choice at any time in iOS Settings › Privacy & Security › Tracking.

   To change or withdraw the choices you made in Google’s consent form, delete and reinstall Tapolo: the form appears again before the next ad. If you need help, write to pj.dev.apps@gmail.com .

7. When you contact us

   If you email us, we receive your email address, your message and anything you attach. An email started from Settings › Send feedback also contains your Tapolo version and build number. We use this only to answer you and to fix the problem you report. The mailbox is hosted by Google (Gmail).

8. Ratings and sharing

   When Tapolo asks you to rate it, it uses Apple’s own rating prompt. Ratings and reviews are handled by Apple; we see only what Apple publishes on the App Store.

   When you share a Daily result, the text goes through the iOS share sheet to the app and people you choose. It is not sent to us.

9. This website

   This website sets no cookies and uses no analytics, advertising or tracking tools. If you choose a language, your choice is remembered in your browser’s local storage, on your device only.

   The site is hosted by Cloudflare. To deliver pages and protect the site from abuse, Cloudflare processes technical data such as your IP address, browser type and the pages requested. See Cloudflare’s privacy policy.

10. Why we process data, and on what legal basis

    Where the GDPR applies, we rely on the following legal bases:

    • playing and storing progress on your device: the data never reaches us;
    • purchases and restoring them, including the checks by RevenueCat: Article 6(1)(b) GDPR, performance of a contract;
    • personalised ads: Article 6(1)(a) GDPR, your consent, which you may withdraw at any time;
    • non-personalised ads, limits on how often ads appear, fraud prevention and ad security: Article 6(1)(f) GDPR, our legitimate interest in financing a free game and keeping it safe;
    • answering your emails: Article 6(1)(b) and Article 6(1)(f) GDPR, steps you ask us to take and our legitimate interest in supporting our players;
    • delivering and securing this website: Article 6(1)(f) GDPR, our legitimate interest in running a safe and reliable site.

11. How long data is kept

    • Data on your iPhone: until you delete the app.
    • Purchase records at Apple and RevenueCat: as long as contract, accounting and tax law require.
    • Advertising data at Google: according to Google’s own retention periods.
    • Support emails: up to 24 months after your case is closed, then deleted.
    • Website data processed by Cloudflare: according to Cloudflare’s retention periods.

12. Who receives data

    We do not sell your personal data for money. Apart from the advertising described above, which you control through Google’s consent form and the iOS tracking prompt, data is shared only with the service providers needed to run Tapolo:

    • Apple: the App Store, payments and receipts;
    • RevenueCat, Inc.: purchase checks, acting as our processor;
    • Google Ireland Limited and Google LLC: ads (AdMob);
    • Google (Gmail): the support mailbox;
    • Cloudflare, Inc.: hosting this website.

    We may also disclose data if the law requires it.

13. International transfers

    The providers listed above may process data on servers outside the European Economic Area, including in the United States. Those transfers rely on the European Commission’s standard contractual clauses and, where applicable, on the EU–US Data Privacy Framework. You can request a copy of the safeguards from the providers or from us.

14. Your rights

    Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time.

    Because there is no account, we usually cannot identify you on our side, and we cannot reach data stored on your device: you control it directly. To exercise a right over data we hold, such as your emails, write to pj.dev.apps@gmail.com . We answer within one month.

    For purchase data held by RevenueCat, include what helps us find the record, such as the date of the purchase or the order ID from Apple’s receipt email.

    You may also lodge a complaint with a supervisory authority, for example the President of the Personal Data Protection Office in Poland (UODO), or the authority of the country where you live.

15. How to delete your data

    • Delete the Tapolo app to remove all data stored on your iPhone.
    • To stop ads being linked to your device, turn off tracking for Tapolo in iOS Settings › Privacy & Security › Tracking.
    • To have your purchase data deleted at RevenueCat, write to pj.dev.apps@gmail.com with the date of the purchase. Apple keeps its own purchase records under its own policies.
    • Ask us to delete your support emails by writing to pj.dev.apps@gmail.com .

16. Children

    Tapolo is family friendly, but it is not directed at children under 13, and we do not knowingly process their personal data. The app does not ask for age, name or contact details.

    Ads are personalised only where the person using the device has agreed in Google’s consent form and in the iOS tracking prompt. If a child plays, decline both: ads are then not personalised, and Remove Ads or Premium switches off the full-screen ads.

    If you believe a child has sent us personal data, for example by email, contact us and we will delete it.

17. Security

    We keep the data we hold to a minimum and protect it with reasonable technical and organisational measures. No method of storage or transmission is completely secure, but we work to protect your data and will act promptly on any issue.

18. Changes to this policy

    We will update this policy when the app or the law changes. The date at the top shows the latest version. If a change is significant, we will highlight it on this page.

19. Contact

    Privacy questions, data requests and everything else: pj.dev.apps@gmail.com . The Support page answers the most common questions about the game itself.

Back to top