PRIVACY POLICY


Tap For Tales


Last updated: 6 August 2026


This Privacy Policy explains how Tap For Tales ("we", "us", "our") collects,

uses, stores, shares and protects information when you use our mobile

application and related services (the "Services").


Tap For Tales helps you discover nearby points of interest ("POIs"), retrieve

information about places, and generate AI-powered travel stories and audio

guides for places you choose.



1. SCOPE OF THIS POLICY


This Policy applies to the Tap For Tales mobile applications for Android and

iOS, to any website or landing page that links to this Policy, and to support

interactions with us.


Our Terms of Use govern your use of the app. This Policy forms part of them.



2. WHO WE ARE


Tap For Tales is the controller of the personal data described in this Policy.


  Tap For Tales

  18 Kunjvan Colony, Kesar Bagh Road

  Indore, Madhya Pradesh 452009

  India

  tap4tales@gmail.com


For complaints about privacy or about content in the app, see section 17.



3. INFORMATION WE COLLECT


A. Information you provide directly


  - name

  - email address

  - account display name

  - support messages, feedback, content reports and other communications you

    send us


B. Information received through sign-in providers


If you sign in with Google or Apple, we receive limited account information from

that provider: typically your name, email address and an account identifier.

Apple allows you to hide your real email address, and if you choose that, we

only receive the relay address Apple gives us.


We never receive your Google or Apple password.


C. Location information


With your permission, we access your device location, including precise

location, in order to:


  - find and show POIs near you

  - provide location-based content

  - generate stories and audio guides relevant to where you are


Your location is used while you are using those features. Please also read

section 6, because two of the services the app contacts to find places and draw

maps necessarily receive location information from your device.


If you deny or withdraw location permission, the app still works: you can search

for a place by name instead. You can change or withdraw this permission at any

time in your device settings.


D. Device, app and usage information


We collect automatically:


  - device type, model, operating system and app version

  - device identifiers and technical diagnostics

  - IP address and basic connection information

  - app logs, crash reports and performance data

  - which features you use, and how the app performs, so we can operate, secure

    and improve it


E. Purchase and subscription information


Purchases are processed by the Apple App Store or Google Play. We use RevenueCat

to manage purchases, entitlements and receipt validation, and we receive the

purchase status and entitlements associated with your account.


We never see or store your card number. We do not process payments ourselves.


F. Notifications


Tap For Tales does not send push notifications and does not collect a push

notification token.


While a city pack is downloading, Android shows a progress notification created

on your own device by the app. That notification is local to your phone and no

information about it is sent to us.


G. Sensitive personal information


We do not require or request sensitive personal information - such as health,

biometric, religious, political or financial detail - to use Tap For Tales.


Precise location is treated as sensitive in some countries. We collect it only

with your permission and only for the purposes in section 3C.


H. We do not


  - show advertising in the app

  - sell your personal information

  - use your personal information for third-party advertising or for

    cross-context behavioural advertising

  - make decisions about you by automated means that have a legal or similarly

    significant effect



4. HOW WE USE INFORMATION


  - to create, authenticate and manage your account

  - to show POIs near you and provide location-based features

  - to generate the travel stories and audio guides you ask for

  - to deliver, maintain, troubleshoot and improve the Services

  - to process and manage purchases, credits and entitlements

  - to respond to support requests, feedback and content reports

  - to send service and administrative messages by email

  - to monitor security, prevent abuse, fraud and misuse of credits

  - to analyse crashes, performance and usage trends

  - to comply with legal obligations and enforce our Terms of Use



5. LEGAL BASES FOR PROCESSING


Where the law requires us to have a legal basis, we rely on one or more of:


  - performance of a contract - to provide the Services you have asked for,

    including your account, purchases and generated stories

  - legitimate interests - to secure, maintain, improve, analyse and support the

    Services, and to prevent abuse

  - consent - where required, including for location access and any permission

    you choose to grant. You may withdraw consent at any time

  - consent of a parent or lawful guardian - where the user is a child, see

    section 11

  - legal obligation - where processing is necessary to comply with law


India. We process personal data in accordance with the Digital Personal Data

Protection Act, 2023. Where we rely on your consent, you may withdraw it at any

time by contacting us, or by changing the relevant permission in your device

settings. Withdrawing consent does not affect processing already carried out. If

you are not satisfied with how we have handled your personal data, please

contact our Grievance Officer under section 17, and you may then complain to the

Data Protection Board of India.


UK and EU. If you are in the UK or the EU, you may also complain to your local

supervisory authority.



6. THIRD-PARTY SERVICES AND SHARING


We share information with service providers who help us run the Services, and

your device contacts some services directly. Both are listed here, because both

matter to you.


6.1 Services that run our app


  - Google Firebase and Google Cloud - Authentication, Firestore database, Cloud

    Storage for story audio and images, Cloud Functions, Crashlytics crash

    reporting, and Google Analytics for Firebase

  - Google (Gemini) - generation of story text, and narration for some voices

  - Inworld AI - narration for other voices

  - RevenueCat - purchase, credit entitlement and subscription management

  - Apple App Store and Google Play - payment processing and app distribution


6.2 Services your device contacts directly while you use the app


When your device contacts these, they receive your IP address, and the specific

information noted:


  - Photon, operated by Komoot (Germany) - our place search. When you type in

    the search box, your search text is sent to Photon. IF YOU HAVE GRANTED

    LOCATION PERMISSION, YOUR CURRENT LATITUDE AND LONGITUDE ARE SENT WITH IT,

    so that results near you appear first.

  - Nominatim, operated by the OpenStreetMap Foundation (United Kingdom) - our

    fallback place search, used when Photon returns nothing. It receives your

    search text.

  - CARTO - map images for the dark map style. It receives which map squares you

    are viewing, which indicates the area you are looking at.

  - OpenStreetMap tile servers - map images for the standard map style, on the

    same basis as CARTO.

  - Wikidata and Wikimedia Commons - photographs of places. They receive which

    place you are viewing.

  - Google Fonts - the typefaces the app uses.

  - Apple App Store and Google Play - purchases, and checking whether an app

    update is available.

  - Apple Maps or Google Maps - only if you tap "Directions" or "Reviews", which

    opens that app or website. We do not send anything to them unless you do.


Map and place data comes from OpenStreetMap contributors and our map providers,

under their own licences. Their attribution is shown in the app.


6.3 Other disclosures


We may disclose information if required by law, regulation, legal process or a

lawful government request; to establish, exercise or defend legal claims; to

protect our rights, our users, our systems or the Services; or in connection

with a merger, acquisition, financing or sale of assets, in which case we will

require the recipient to honour this Policy.


We do not sell your personal information, and we do not use it for third-party

advertising.



7. AI-BASED FEATURES


Tap For Tales generates travel stories and audio guides for places you select.

To do that, we send to our AI providers only what is needed to produce the

output you asked for: the place and its details, the language and voice you

chose, and the story request itself.


We do not send your name, your email address or your account identifier to the

AI providers.


The generated story text and audio are stored by us so that the app works

offline, so that you do not pay twice for the same story, and so that other

users who visit the same place can be shown it. See section 12 of our Terms of

Use.


Content sent for generation is used to produce the requested output, and to

troubleshoot problems, maintain quality and prevent abuse. We use paid Google

service plans, under which the content we send is not used to train Google's

models.


Please understand that AI-generated stories may be inaccurate. They are

entertainment, not a reference source. Our Terms of Use explain this in full.



8. INTERNATIONAL TRANSFERS


We are based in India. Our service providers operate in other countries,

including the United States, and your information may be stored or processed

there and in other jurisdictions where they operate.


Where the law requires it, we rely on appropriate safeguards for these

transfers, such as the European Commission's standard contractual clauses or an

equivalent mechanism offered by the provider.



9. DATA RETENTION


We keep personal information only as long as reasonably necessary to provide the

Services, to fulfil the purposes in this Policy, to comply with legal

obligations, to resolve disputes and to enforce our agreements.


Account information is kept until you delete your account. See section 14.


Location is used to provide location-based features and is not kept longer than

necessary for that purpose, except where retention is needed for security, fraud

prevention, diagnostics or legal compliance.


Information stored on your own device. So that the app works without a signal,

it stores on your phone: story text, story audio, place images, and the map

areas you have viewed. This is a cache, not a backup - the app removes older

items automatically to save space, and everything is removed if you clear the

app's data, uninstall the app, or delete your account.



10. DATA SECURITY


We use reasonable technical and organisational measures to protect your

information. Data is encrypted in transit. Access to story audio files is granted

through short-lived links that expire, rather than by making the files public.


No method of transmission or storage is completely secure, and we cannot

guarantee absolute security.



11. CHILDREN'S PRIVACY


Tap For Tales is made for a general audience, and the stories are intended to be

suitable for all ages. Having an account is different, because the app needs

personal information to work - in particular your location, which is how it

finds places near you.


Minimum age. You must be at least 13 years old to create an account. We do not

knowingly create accounts for, or collect personal information from, anyone

under 13.


Users aged 13 to 17. If you are under 18, you may use Tap For Tales only with

the permission of a parent or guardian, who must agree to our Terms of Use on

your behalf. Under India's Digital Personal Data Protection Act, 2023, anyone

under 18 is treated as a child, and we are required to obtain verifiable consent

from a parent or lawful guardian before processing their personal data. Where

that applies, we will seek that consent.


No tracking or profiling of children. We do not use the personal data of a user

we know to be under 18 for behavioural tracking, profiling or targeted

advertising. Tap For Tales shows no advertising at all.


Location. Location is collected only while you are using the app to find places

nearby, and only after you grant permission on your device. A parent can switch

that permission off for the app at any time in device settings.


Purchases. Credits and city packs are bought through the Apple App Store or

Google Play, never directly from us. We encourage parents and guardians to use

the parental controls and purchase approval those stores provide.


If we discover a child's account. If we learn that we hold personal information

about a child under 13, or about a child aged 13 to 17 without the required

parental consent, we will delete that information and close the account.


Parents and guardians. If you believe your child has created an account or given

us personal information, contact us at tap4tales@gmail.com. You may ask us to

confirm what we hold about your child, correct it, delete it, or withdraw your

consent. We may need to verify your identity and your relationship to the child

first.



12. YOUR PRIVACY RIGHTS


Depending on where you live, you may have the right to:


  - access the personal information we hold about you

  - correct information that is inaccurate or incomplete

  - request deletion of your information

  - restrict or object to certain processing

  - withdraw consent, where processing is based on consent

  - request a portable copy of your information

  - not be discriminated against for exercising these rights


A parent or lawful guardian may exercise these rights on behalf of a child. We

may ask for proof of identity and of the relationship before we act.


We will consider and respond to requests in accordance with applicable law.



13. HOW TO ACCESS, CORRECT OR DELETE YOUR DATA


You can delete your account yourself in the app, at any time: open your profile

or account panel and choose Delete account.


You can also email tap4tales@gmail.com to ask for access to, correction of, or

deletion of your personal information. Please write from the address you signed

in with. We may need to verify your identity before acting, and we will respond

within the time the law allows.



14. WHAT HAPPENS WHEN YOU DELETE YOUR ACCOUNT


Deletion is permanent and cannot be undone. We remove:


  - your sign-in account

  - your user profile, including your credit balance

  - your credit and purchase ledger, and any held credit reservations

  - your unlocked stories and owned city packs

  - your story generation history

  - content reports and feedback you submitted

  - the content the app had stored on your device


Two things are not removed, and you should know this before you delete:


  - Stories already published in the shared library remain available to other

    users. They are shared catalogue content about public places, not personal

    to your account.

  - Purchase records held by Apple, Google and RevenueCat are kept for as long

    as tax and accounting law requires. Those are held by them, not by us, and

    we cannot delete them on request.


Unspent credits are lost when you delete your account and are not automatically

refunded. If you want to ask about a refund, contact us before deleting.


Crash diagnostics already collected may persist for the provider's retention

period.



15. DO NOT TRACK


We do not track you across other apps or websites, and we do not permit others

to do so through our app. We do not currently respond to browser or device "Do

Not Track" signals, as no legally recognised standard requires it.



16. CHANGES TO THIS POLICY


We may update this Policy from time to time. When we do, we will change the

"Last updated" date above. If a change materially affects your rights or how we

use your information, we will tell you in the app or by email before it takes

effect.



17. GRIEVANCE OFFICER AND COMPLAINTS


In line with India's Digital Personal Data Protection Act, 2023, the Information

Technology Act, 2000 and the Information Technology (Intermediary Guidelines and

Digital Media Ethics Code) Rules, 2021, the following officer handles complaints

about your personal data and about content in the app:


  Grievance Officer: [GRIEVANCE OFFICER NAME]

  Tap For Tales

  18 Kunjvan Colony, Kesar Bagh Road

  Indore, Madhya Pradesh 452009

  India

  tap4tales@gmail.com


Please put "Grievance" in the subject line and tell us who you are, what the

complaint is about, and where in the app to find it.


We will acknowledge your complaint within 24 hours and resolve it within 15 days

of receiving it. Where content must be removed on an expedited basis under

applicable law, we will act as quickly as the law requires.



18. CONTACT US


For any question, concern or privacy request:


  Tap For Tales

  18 Kunjvan Colony, Kesar Bagh Road

  Indore, Madhya Pradesh 452009

  India


  Email: tap4tales@gmail.com