Privacy Policy

TapTyme is a mobile time-estimation, reflex and competition game. Players start a hidden timer and try to stop it as close as possible to a target time, in solo, pressure and online 1v1 / duel modes.

We care about your privacy. This policy explains what data TapTyme actually processes, why it is processed, and which third-party services are involved. We only collect what the app needs in order to work.

• Account information. When you create an account we process your e-mail address and an account identifier so that your progress can be linked to you across sessions and devices.
• E-mail / password accounts. If you sign up with e-mail and password, authentication is handled by our backend authentication provider (Supabase Auth). Passwords are handled by that provider and are not readable by TapTyme.
• Google Sign-In information. If you choose “Continue with Google”, we receive basic profile information from Google (account identifier, e-mail address and, if available, display name) solely to create and authenticate your account.
• Player profile information. Username, optional avatar (uploaded image or preset), optional country, language preference, and subscription status. This is what other players may see next to your score.
• Gameplay data. Reaction and stop timings, target times, deviation values, round results, streaks and daily quest progress. This data is validated on our server so that scores are fair.
• Scores, rankings, achievements and leaderboards. Rank points (RP), wins, losses, draws, league tier and achievements. Parts of this (username, avatar, country, RP, win/loss record) are shown publicly on leaderboards and profiles.
• Online / duel technical information. To run matchmaking, rooms and duels we process match and room identifiers, participant identifiers, presence / online status, heartbeat timestamps and server-side round timings. Friend requests, friendships and blocks are stored if you use the Friends system.
• Device and app information. Basic technical information needed for the app to run and to diagnose errors, such as app version, platform and error/diagnostic messages. Sound and haptic preferences are stored locally on your device.
• Advertising-related information. Rewarded and interstitial ads are served by Google AdMob. Google may process advertising identifiers and related device data for ad delivery, ad measurement and (where applicable and permitted) ad personalisation. TapTyme itself does not build advertising profiles.
• Purchase and subscription information. When you buy tickets or a subscription through Google Play Billing, we process the purchase token, product identifier and purchase state returned by Google Play in order to verify the purchase and unlock your entitlement.

• to create, authenticate and manage your account;
• to let you sign in with Google;
• to operate the game and its solo, pressure, duel and online 1v1 modes;
• to calculate and display scores, rank points, leagues and leaderboards;
• to run matchmaking, rooms, friend lists and online presence;
• to keep the game fair and to prevent cheating, abuse and fraud;
• to display advertising, including rewarded ads that grant in-game items;
• to verify purchases and subscription status;
• to detect errors and improve the app.

If you sign in with Google, we receive only the basic identity information described above (account identifier, e-mail address and, when provided, display name / profile picture URL) and use it exclusively to create and authenticate your TapTyme account.

We do not request or collect your Google password, contacts, calendar, files, location or any other Google data, and we do not use Google account data for advertising.

TapTyme shows ads through Google AdMob (Google Mobile Ads) — rewarded video ads that grant in-game rewards, and occasional interstitial ads. Users with an active subscription do not see these ads.

Google’s advertising services may use device and advertising identifiers and related information for ad delivery, ad measurement, fraud prevention and, where applicable and permitted, ad personalisation. This processing is governed by Google’s own policies.

In-app purchases and subscriptions on Android are processed exclusively through Google Play Billing. Payments happen on Google’s platform.

TapTyme never receives or stores your card number, bank details or other payment credentials. We only process the purchase data Google Play returns (purchase token, product identifier, purchase state) to verify the transaction and to record your entitlement, such as ticket balance or subscription expiry date.

Account data, profiles, gameplay results, leaderboards, friendships and entitlements are stored in our backend, which is built on Supabase (PostgreSQL database, authentication and file storage). Google Firebase configuration files are included in the Android app only to enable Google Sign-In on the device.

We apply reasonable technical and organisational measures, including row-level access rules that restrict each account to its own data, server-side validation of game results, and encrypted transport (HTTPS/TLS) between the app and the backend. Authentication credentials are managed by our authentication provider; TapTyme has no access to your plaintext password. No system can be guaranteed to be completely secure.

We do not sell your personal data. Data is shared only with the third-party service providers that are required for the app to function, and only to the extent needed for that function:

• Google (Sign-In and Firebase configuration) — authentication;
• Supabase — database, authentication and storage;
• Google AdMob — advertising;
• Google Play Billing — purchases and subscriptions.

Public parts of your profile (username, avatar, country, rank points and win/loss record) are visible to other players through leaderboards, profiles and matches. We may also disclose information where required by law.

• Google Sign-In / Google account services — policies.google.com/privacy
• Google Firebase — firebase.google.com/support/privacy
• Supabase — supabase.com/privacy
• Google AdMob — support.google.com/admob/answer/6128543
• Google Play (Billing) — play.google.com/about/play-terms

We keep your account, profile, gameplay and leaderboard data for as long as your account exists, because these are needed to provide continuous progression, rankings and social features. Purchase and subscription records are kept as long as needed to honour your entitlement and to comply with platform and legal obligations.

When data is no longer needed for these purposes, it is deleted or anonymised within a reasonable period. If you delete your account, the associated account data is removed from our authentication provider and linked records are deleted or detached.

Depending on your jurisdiction, you may have the right to:

• ask what data we hold about your account;
• ask for inaccurate data to be corrected — profile fields such as username, avatar and country can be edited directly in the app;
• request deletion of your data where applicable;
• close your account — the app provides an account deletion option in the profile screen, which permanently deletes your account.

For requests that cannot be handled inside the app, contact us using the address in the “Contact Us” section.

TapTyme is a general-audience game and is not specifically designed for or directed to young children. We do not knowingly collect personal information from children who are below the minimum age required to hold an account in their country.

If you believe a child has created an account and provided personal information, please contact us and we will review the account and delete the data where appropriate.

We may update this Privacy Policy when the app changes or when required by law. Updates will be published on this page and the “Last updated” date below will be revised. Continued use of TapTyme after an update means you accept the revised policy.

For privacy questions or data requests, contact us at: Taptyme@gmail.com