Privacy policy

1. Who we are

Tappy (usetappy.app) is run by Casefmme LLC, an Ohio limited liability company in the United States. This policy explains what personal information we collect, why we collect it, who we share it with and what choices you have. If you have a question about it, email hello@usetappy.app.

2. What we collect

Your account

Your email address. If you sign in with Google or GitHub, we also get your name and profile picture, plus the sign-in tokens they issue. We never see your Google or GitHub password.

Your work

This includes what you describe, any reference images, brand kits (colours, fonts and logos, including ones imported from websites you name), fonts you upload, and the apps, screens and code Tappy makes. Your browser also keeps a copy of your apps and preferences in its local storage on your device.

Share links and comments

When you create a share link, we store a snapshot of that app. Anyone with the link can view it and leave a comment under a name they type. Comments are stored with the share link and are visible to everyone who has it.

Payments

Stripe handles payments. Your card details go straight to Stripe and never reach our servers. From Stripe, we receive details such as your plan, payment status, billing email and country.

Usage

We record which features you use and how much each run costs, so we can show you your usage and bill you correctly.

Technical data

This means your IP address, browser and device details, and request logs. We use IP addresses to limit abuse of sign-in codes and comments.

Messages

Anything you send us when you email us.

3. How we use it

• To run Tappy: signing you in, designing and storing your apps, rendering screens and hosting share links.
• To bill you and keep records of payments.
• To keep Tappy secure, and to prevent fraud and abuse.
• To send emails you need, such as sign-in codes, receipts and notices about important changes, and to answer you when you contact us. We only send marketing emails if you opt in, and you can unsubscribe at any time.
• To understand how Tappy is used overall, so we can improve it.

We don’t sell or rent personal information. We don’t share it for advertising, and we don’t use your content to train AI models.

4. Who we share it with

We share personal information only with the providers that help us run Tappy, and only what each one needs:

• Anthropic (the Claude AI models) receives your descriptions, reference images and screen code to design and review screens. Under its commercial terms, Anthropic doesn’t train its models on this data.
• Cloudflare hosts Tappy and stores accounts and work. It also renders screens in a browser, sends sign-in emails and keeps request logs.
• Google and GitHub, if you choose to sign in with them.
• Stripe processes payments.

We may also disclose information if the law requires it, or to protect the rights, safety or property of our users, the public or us. If Casefmme LLC is involved in a merger, acquisition or sale of assets, your information may move with the business. If it does, we’ll tell you beforehand.

5. Services loaded inside designs

Generated screens load fonts, styles, icons and placeholder images from public services: Google Fonts, the Tailwind CSS CDN, jsDelivr, Unsplash, picsum.photos and i.pravatar.cc. Exported code can include the same links. When you, or someone viewing your share link, opens a screen, the browser contacts these services. They see the IP address and browser details, as with any web request. We send them no account information.

6. Cookies and local storage

We use one cookie, which keeps you signed in for up to 30 days. It’s needed for Tappy to work. We don’t use analytics, advertising or tracking cookies. Your browser’s local storage keeps a copy of your apps and preferences on your device. Clearing this site’s data in your browser removes it.

7. How long we keep it

• We keep your account and work while your account is open. When you delete an app, it’s removed from our storage.
• Share links and their comments stay up until you ask us to take them down, or until your account is deleted.
• When you ask us to delete your account, we delete it and your work within 30 days. We keep payment records for as long as tax and accounting law requires.
• Sign-in codes expire after 10 minutes, and sign-in sessions after 30 days.
• Deleted data can stay in backups for up to 30 days. Request logs are kept for as long as Cloudflare’s policies allow.

8. Your choices and rights

You can ask us to access, correct, export or delete your personal information, or to stop using it for a particular purpose. Email hello@usetappy.app from your account’s email address, so we know the request comes from you. We’ll reply within 30 days. You can also export your designs from Tappy at any time.

Depending on where you live, you may have extra legal rights. These include rights under the GDPR in the EU and UK, and under privacy laws in California and other US states. We honour these requests wherever we reasonably can, wherever you live, and we won’t treat you differently for making one. If you’re in the EU or UK, you can also complain to your local data-protection authority.

For people in the EU and UK, we use personal information on these legal bases:

• to provide the service you signed up for;
• for our legitimate interests in keeping Tappy secure and improving it;
• to meet legal duties, such as keeping tax records;
• with your consent, where we ask for it.

9. Where your data is processed

We’re based in the United States, and our providers process data in the US and other countries. When data moves from the EU, UK or Switzerland, we rely on the safeguards in our providers’ data-processing terms, such as Standard Contractual Clauses.

10. Security

Tappy runs over HTTPS. Access to accounts and work is checked on every request, and our providers keep their own security programmes. No system is perfectly secure, though. If a breach affects your personal information, we’ll tell you as the law requires.

11. Children

Tappy isn’t meant for children, and you must be 18 or over to use it. If you think a child has given us personal information, email hello@usetappy.app and we’ll delete it.

12. Changes to this policy

When we change this policy, we’ll update the date at the top. If a change is significant, we’ll also tell you by email or in Tappy before it takes effect.

13. Contact

Casefmme LLC, Ohio, USA. Email hello@usetappy.app.