Tapaint turns your photos into paint-by-numbers canvases that you fill in by tapping. It has no account, no sign-in and no server of ours. Your photos and paintings stay on your device. This page explains the little that does leave the device, and why.
The app works fully in Airplane Mode.
| Service | What it receives | Why |
|---|---|---|
| Google Firebase Crashlytics | Crash reports: stack traces, app version, device model, OS version, a random app-instance identifier. No photos, no paintings, no names. | To find and fix crashes. |
| Google Firebase Analytics | Anonymous usage events (for example "painting created", "painting finished", "paywall shown"), with counts such as number of areas, plus device model, OS version, country and language, and a random app-instance identifier. No photos, no paintings, no names, no advertising identifier. | To learn which features are used and decide what to build next. |
| Google AdMob | When you choose to watch a rewarded ad: the ad request, your IP address, device model and OS version, and the identifiers the ads SDK uses for frequency capping and fraud prevention. Tapaint requests non-personalised ads only and does not ask for tracking permission. In the EEA, UK and Switzerland you are asked for consent first; you can change your choice at any time in Settings → Ad privacy options. | Rewarded ads are the free tier's way to unlock sharing, auto-finish and printing. Tapaint Unlimited removes all ads. |
| Apple (App Store, StoreKit) | Purchase and restore of the one-time unlock, handled entirely by Apple. Tapaint receives only whether the unlock is owned. | To sell and honour Tapaint Unlimited. |
Google's handling of this data is described in the Google Privacy Policy and in Firebase's privacy documentation. We do not sell data, and we do not share it with anyone beyond the services above.
When you share a finished painting or a printable template, the image or PDF is handed to the iOS share sheet and goes wherever you send it. That is your action, and Tapaint keeps no copy.
Tapaint is made for everyone. It is a general-audience app, not a "children's app": it is offered to adults, and a child uses it on a parent's device and under a parent's App Store account. We do not knowingly collect personal information from children under 13; the only data that leaves the device is the anonymous analytics, crash and ad data described above, which contains nothing that identifies a person.
Because Tapaint keeps no account, the only data associated with you outside your device is the anonymous analytics and crash data described above, held by Google under a random app-instance identifier. If you want it deleted, email us from the app (Settings → Feedback → Email us) with the approximate date you installed the app and we will request deletion. Deleting the app ends all collection. Residents of the EEA, UK, Switzerland, California and other jurisdictions with privacy laws have the rights those laws provide; the same email address is the way to exercise them.
If this policy changes, the new version is published at this address with a new effective date. Material changes are noted in the app's release notes.