Your Family's Data,
Our Responsibility.

This Privacy Policy explains how TapTapTec ("we", "us", "our") collects, uses, and protects information in TapTapLearn ("the App"), an educational app of mini-games for children ages 2–14 that is set up, owned, and paid for by a parent or legal guardian.

1. Who We Are

TapTapLearn is made by TapTapTec ("we", "us").

• Legal entity name: TapTapTec
• Postal address: Sheikh Rashid Bin Saeed Al Maktoum Street, Liwara 1, Ajman, United Arab Emirates
• Email: Support@TapTapLearn.net

2. Who This Policy Covers

TapTapLearn is an educational app with more than 100 mini-games for children aged 2 to 14. It is set up and paid for by a parent or legal guardian.

• Parents create the account, create child profiles, manage settings and buy subscriptions.
• Children play games under a profile. A child never creates an account, never types an email address and never pays.
• Guest play. The app can be opened without an account to try a limited number of free plays. In guest mode nothing is saved to our servers except the anonymous gameplay events in section 5.1, which carry no child ID. The daily free-play count is kept on the device only.

3. Information We Collect from Parents

• Email address — two roles, kept separately: a sign-in email (used only if you sign in with email and a password or one-time code) and a contact email (where we send codes, account notices, reports and support replies; you can change it in Parent Zone and it is always kept). Removing the email sign-in does not delete your contact email. Kept in our Cloudflare database.
• Password (only if you set one) — to sign in. Stored only as a salted, slow hash (PBKDF2), never in readable form. Kept in our Cloudflare database.
• Google or Apple sign-in (only if you choose it) — to confirm the sign-in is genuine. We receive the email address the provider gives us (with Apple this may be a private relay address) and the provider's own stable user ID for you, which we store so the same Google or Apple login always opens the same account. Kept in our Cloudflare database. We do not receive your provider password or profile.
• Linked sign-in methods and unlink records — you can link or unlink Google, Apple and email-plus-password in Parent Zone. When you unlink one we keep a short record (which method, the provider's user ID for Google or Apple, your account's random ID, and the time) so that login can never silently attach itself to your account again; it can be linked to another account or used to create a new one. The method you are currently signed in with cannot be unlinked, and the last remaining method cannot be unlinked. Kept in our Cloudflare database.
• Parent Zone PIN (only if you set one) — to let you open Parent Zone with a PIN. Never stored in readable form. On our server it is stored as a salted, slow hash combined with a secret key that exists only on our server, and it is never sent back to the app. On your device it is stored as a separate salted, slow hash. Kept in our Cloudflare database and your device.
• Account settings — your Parent Zone gate choice (an arithmetic question, your account password, or a PIN), progress-report email choices, age-range email choice, number of child slots, whether onboarding is finished. Kept in our Cloudflare database.
• Referral code — a random code that belongs to your account (so you can invite other parents), and, if you enter another parent's code, which account it belonged to and when you entered it. If a referred parent later subscribes, a reward record links the two accounts' random IDs to the plan bought and the dates. Nothing about children. Kept in our Cloudflare database.
• Leaderboard family number (only if you turn the leaderboard on) — a random number, such as 4821, shown before your child's nickname so children with the same nickname can be told apart. It is not based on your email or account and does not show when you signed up. Kept in our Cloudflare database.
• Consent records (only if you turn the leaderboard on) — a record that you agreed to the leaderboard statement for a child: the exact statement and its version, the version of this policy, the date and time, your account and the child profile, and the date you turned it off again. So we can show what you agreed to, and ask again when the statement or this policy changes. Kept in our Cloudflare database.
• Subscription status — which plan is active, when it renews or ends, and which category or games a limited plan covers. We never see card details. Kept in our Cloudflare database, and RevenueCat (section 10).
• Voucher redemptions — which voucher code was redeemed and when, and what it granted (a plan, a category, extra slots, or a number of coins for one child). Kept in our Cloudflare database.
• Gifts you buy (only if you buy a gift) — the gift code and plan, the store's transaction ID and purchase date, your email address for the receipt, and, only if you enter them, the email address of the person you are giving it to and a short message. So we can send the code, let it be redeemed, and handle refunds. We do not ask for the other person's name or anything about their children. Kept in our Cloudflare database. Emails are sent through Resend (section 10).
• Support messages (only if you contact us in the app) — the subject and message you write, plus your contact email address, so we can reply. The app shows you a list of your own tickets (number, subject, status, dates) and each ticket's thread, read from Zoho Desk when you open it; no copy is kept on the device. There are no attachments. Kept in Zoho Desk (section 10). Only the Zoho contact reference is kept in our database.
• Copies kept on your device — so the app works offline: your sign-in token (encrypted); your subscription rows (product, plan scope, expiry, revoked or not); your redeemed vouchers (code, plan, duration, campaign tag, entitled games); your child profile list; each stored under your account's random ID and removed when you sign out. Also the last time the app reached our server, a copy of the app's public settings, which child was last active, a queue of changes made offline (progress, coins, a changed profile field) until they can be sent, queued gameplay events (encrypted), per-child progress and skill levels, and reminder settings (section 5.5). Kept on your device only.

4. Information We Keep About Each Child Profile

The parent enters or chooses all of this. A child cannot create a profile.

• Nickname (2 to 20 letters, numbers, spaces, hyphens or underscores) — to show on the child's screens, and on the weekly leaderboard only if you turn it on (section 7). Checked against a word filter by the app and again by our server. Please do not use your child's full real name. A child shown on the leaderboard must have a one-word nickname (letters and numbers only, no spaces), so a first and last name can never appear there.
• Leaderboard choice — whether you have turned the weekly leaderboard on for this child. Off unless you turn it on.
• Avatar — a picture chosen from a built-in set. It is not a photo.
• Age range (2 to 3, 4 to 5, 6 to 7, 8 to 9, 10 to 11 or 12 to 14) — to choose age-appropriate games and starting difficulty. It is a range, not a date of birth.
• Game progress — levels played, stars, skill levels used to adjust difficulty, streaks, achievements, coins, and items owned in the app. So progress is saved and shows on every device you sign in on, and so you can see it in Parent Zone.
• Profile settings — sound and music volume, theme, high contrast, text size, daily time limit, night mode, hints, favourites and recently played games, and which tips and prompts have already been shown. Also, for each child, the vibration (haptics) switch and the navigation-sounds switch (both on by default) and the reduce-motion switch.
• Learning Catalog progress — which Learning Catalog topics and entries the child has explored, a star for each different answer they got right, and a short activity log (the date, topic, how many new things were explored and the seconds spent) for the last 14 days. So you can see topics explored and time spent in Parent Zone and in the progress email.
• Progress report choice — per child: weekly, monthly or off (off unless you choose). Only while a report is on, we also keep a small daily roll-up (date, skill area, stars, plays, points) for 70 days, to draw the monthly chart and trends.
• "How to play" pages switched off — the list of games for which the child ticked "Don't show this again".

We do not collect a child's full name, date of birth, photo, video, voice recording, phone number, contacts, or precise or approximate location. The app has no camera, microphone, contacts or location access, and it does not ask for access to your photos or files.

5. Information Collected Automatically

5.1 Gameplay events

When a game is played, the app sends short events to our own server (Cloudflare Workers Analytics Engine): the event type (for example game started, level completed), the game, the skill area, the level, stars, time taken, number of mistakes, the object or menu item tapped (only a sample of taps), a random ID for the play session, the time, and the child profile's random ID. Events do not contain the nickname, the parent's email or any device identifier. Events waiting on the device to be sent (for example while offline) are stored encrypted, and are thrown away if they have been tampered with.

Before an event is stored, our server replaces the child profile's ID with a coded value made from that ID and a secret key held only on our server. The stored events never contain the profile ID itself. The same child always gets the same coded value, which lets us count how many different children play a game. Events from guest play are stored with no child ID and no coded value, and are counted only as one anonymous guest total. Because we hold the key, these events could still be connected to your account by us, so we treat them as connected.

We use them to understand which games work, fix problems and improve difficulty. We do not use them for advertising and we do not share them. Our staff look at these events only as totals across many children, such as how often each game is played and the typical time spent, and any total built from fewer than five plays is hidden. The one exception is a copy you ask for: your own child's events are included in the data download in section 14. These events cannot be deleted one child at a time; Cloudflare removes each event automatically three months after it is recorded.

5.2 Crash and error reports

If the app or our server hits an error, a report is sent to Sentry. It contains the error and where in the code it happened, the app version, device model and operating system, a short list (up to 100) of recent warnings and errors from the app, and app-not-responding detection. Screenshots and screen-layout captures are turned off. Reports may wait on the device until the connection returns. Sessions run inside the Unity Editor (developer testing) are not sent to the live project. The server's own errors are also sent (with about one request in ten sampled for speed). No user identity is attached. Before a report leaves the device or our server, account IDs, child profile IDs, email addresses and similar identifiers are removed from it, including from the address of a failed request. Reports cannot be linked back to your account or your child.

5.3 Security checks

To stop fake scores and voucher abuse, the app asks Google Play Integrity (Android) or Apple App Attest (iOS) to confirm requests come from a genuine copy of the app. On iOS we store a key for each app installation. This check does not include profile data.

5.4 Internet connection data

Like any online service, our servers see your IP address when the app connects. Cloudflare uses it briefly to deliver the request and to limit repeated requests, and keeps that request data for a short period, at most 7 days. We do not store IP addresses in our database.

5.5 Reminders on your device (local notifications)

Parent Zone has switches for reminders. All are off until you turn one on, and the app asks the phone for permission to show notifications only at that moment, never at launch. The reminders are scheduled on your own device; nothing is sent through our server or a push service, and we do not learn whether you received one.

• Subscription ending: one reminder at 9:00 local time, 3 days before a subscription that does not auto-renew ends.
• A child has not played for a week: one reminder at 18:00 local time, 7 days after the last play. The message contains the nickname of the child who played last and no progress data.
• New games: one reminder at 10:00 local time when we have published a "What's new" announcement in our public settings in the last 14 days and you have not already been shown it. The message is the same for everyone ("New games are ready to explore in TapTapLearn!") and contains no personal data.

Reminders are moved out of the night-mode hours (by default 8 pm to 7 am). The switches, the time of the last play and that nickname are stored on the device under your account ID and stay there until you remove the app; signing out or switching a reminder off cancels the scheduled reminder.

5.6 App update check

When the app starts it downloads our public settings, including the lowest and latest app versions we support for your platform, and compares them with the version installed. The request carries no sign-in, account or child information. If the app is too old it shows an "update" screen with a link to the store page; if we cannot be reached it lets you in.

5.7 Sharing your referral code

The Share button opens your phone's share sheet (or copies the text) with a short message that contains only your referral code and the app's store link. You choose the app and the person; we do not see who receives it and we receive nothing from the share sheet.

5.8 Account activity log (for security and support)

When this is switched on, our server keeps a short record of important things that happen on a parent account, so that we can spot someone breaking into an account, help a parent who has contacted support, and prevent fraud and abuse. A record is made when a parent signs in or signs up (and with which method: Google, Apple, email and password, or a one-time code), when a sign-in fails for an email address that belongs to an existing account, when a sign-in method is linked or unlinked, when a password or the Parent Zone PIN is changed or cleared, when account settings are changed, when a voucher is redeemed, when a data download is requested, when account deletion is requested and completed, when a subscription changes, and when a child profile is created, changed or deleted.

Each record holds only: your account's random ID, the child profile's random ID if the event is about a child, the name of the event, the time, a very rough type of device (iPhone or iPad app, Android app, web browser, or other), and a few technical details such as the name of the sign-in method, the voucher's ID, the subscription product, or the names of the settings or profile fields that changed. It never contains your password, PIN, sign-in code, security token, email address, IP address or name, never the new value of anything you changed, and it does not keep the device's identifying text. It does not record anything your child does in a game.

Only TapTapTec support staff can read it, in the staff admin dashboard, which needs a sign-in with a second step. The dashboard shows your account's email address next to the records, taken from your account record (the log itself does not hold it). Every time staff open or download these records is itself recorded. We use the log only for security, support and fraud prevention. We do not use it for advertising or marketing, we do not share it, and we do not sell it.

6. How We Use Information

• To run the app, save progress and sync it across your devices.
• To sign you in and keep your account secure.
• To process subscriptions and vouchers.
• To send the emails in section 8.
• To let you invite other parents and to grant the referral reward (section 3).
• To answer support requests.
• To fix bugs and understand which games work well.
• To prevent fraud and abuse, and to meet legal obligations.

Legal bases (EEA and UK). We use your data to provide the service you signed up for (contract), to keep the app secure and improve it (legitimate interests), to show a child on the weekly leaderboard and to send the optional weekly summary (your consent, which you can withdraw at any time in Parent Zone), and to meet legal duties such as tax records (legal obligation).

7. The Weekly Leaderboard

The leaderboard is off for every child unless you turn it on for that child in Parent Zone, in the child's settings ("Show on weekly leaderboard"). Before it turns on, the app shows you a short statement of what will be shown and to whom, and it turns on only after you tap "I Agree". We keep a record of that agreement (section 3). If the statement or this policy changes, the app asks you to agree again before your child can be added. Our server refuses scores from any child whose leaderboard is off or who has no recorded agreement.

When it is on and your child finishes a level with at least one star, the score is added to a weekly leaderboard for that game and an overall board. The top 50 on each board can be seen by other signed-in TapTapLearn users. An entry shows your family's random number and the nickname (for example "#4821 Mia"), a country field (which the app currently leaves blank) and the score. Only one-word nicknames are shown; our server never lists a nickname with a space, hyphen or underscore. There is no chat, messaging, friend list or public profile, and nobody can contact a child through the leaderboard.

Turning it off removes your child's entries from the boards straight away and marks your agreement as withdrawn. Deleting the child's profile or your account does the same.

8. Emails We Send

All emails go to the parent's address only, except a gift email (below). They are sent through Resend (section 10).

• Sign-in and verification codes. Needed to use the account.
• Age-range notice. If a child is playing at a level that suits a different age range, we email you so you can decide whether to change it. It includes the child's nickname and the game. Nothing changes automatically. On unless you turn it off in Parent Zone ("Age-range emails").
• Progress reports (optional). Off unless you turn them on in Parent Zone. You choose weekly, monthly or off for each child. A report includes each child's nickname, games played and top games; the monthly report adds stars per week, skill areas, trends and badges; both include the Learning Catalog topics explored and time spent. Every report has an unsubscribe link, and a hard bounce switches reports off.
• Referral reward. If a parent you referred subscribes and the reward is granted, we email you that a free week has been added.
• Gift emails. When you buy a gift, we email the gift code to you. If you enter another person's email address, we send them one email with the code and your message, and your email address only if you ask us to show it. We use their address only for that email.

We do not send marketing email. The reminders in section 5.5 are not email.

9. Parental Consent and the Parent Gate

Account first. A child profile can only be created from a signed-in parent account. A parent account is created by confirming a one-time code sent to the email address, or by signing in with Google or Apple. Our server only accepts child-profile requests that carry that parent's signed-in session, and only for that parent's own profiles. The information in section 4 is used only to run the app for your family.

Sensitive actions ask you to confirm again. Deleting your account, changing your contact email, signing out of all devices, unlinking a sign-in method and changing the Parent Zone gate each ask you to prove it is you, using the same method you signed in with (email session: password or emailed code; Google or Apple session: that provider's own sign-in). The confirmation lasts 5 minutes and is not stored.

Consent before anything is shown to others. The only feature that shows anything about a child to other users is the weekly leaderboard. It stays off until you, signed in and inside Parent Zone, read the leaderboard statement and tap "I Agree" for that child, and we store a record of that agreement. You can withdraw it at any time by turning the leaderboard off.

Parent Gate. Parent Zone, subscriptions, support and links that leave the app are behind a check. New accounts start with the adult arithmetic question; you can choose a PIN, or your account password (available only while an email-and-password sign-in is linked; if you unlink it, the app goes back to the arithmetic question). The arithmetic question is locked for 30 seconds after three wrong answers. A request to rate the app in the App Store or Google Play is shown only after an adult passes the arithmetic question. Repeated wrong PINs lock PIN entry for a period that grows with each lock, up to 24 hours.

10. Service Providers

These companies process data only to provide their service to us, under their own terms and privacy commitments. None of them may use your data for advertising. We do not share data with anyone else except where the law requires it.

• Cloudflare (Workers, D1, Analytics Engine, Pages) — runs our server and database. Receives everything in sections 3 and 4 (except support messages) and the gameplay events in 5.1. Pages hosts our staff admin dashboard; it holds no user data itself. Location: The D1 database runs in Eastern North America (Cloudflare reports region ENAM, no jurisdiction restriction set); Cloudflare's network itself is global. cloudflare.com/privacypolicy
• Sentry — crash and error reports (5.2), for finding and fixing bugs. Location: United States (the Sentry project is on the US ingest endpoint). sentry.io/privacy
• Resend — delivers email. Receives the parent email address and the content of the emails in section 8, including a child's nickname in the age-range notice and the progress reports, and the delivery and bounce events it reports back to us. Location: United States (Resend stores account data in the United States regardless of the sending region). resend.com/legal/privacy-policy
• Zoho Desk — our support inbox. Receives the parent email address and the support message (subject and text, no attachments); a ticket's thread when you open it in the app. Location: Australia (our Zoho account is in Zoho's Australian data centre). zoho.com/privacy
• RevenueCat — checks and manages subscriptions. A purchase requires a signed-in parent account. RevenueCat receives your account's random ID (so a purchase is linked to your account), the store receipt, the product bought, and device and store details its software collects. No email and no child data. Location: United States (RevenueCat stores customer data on AWS in the USA). revenuecat.com/privacy
• Apple App Store and Google Play — payments, purchase records, app delivery, and the App Attest and Play Integrity checks (5.3), under their own terms. We never see card details. apple.com/legal/privacy and policies.google.com/privacy
• Google Sign-In and Sign in with Apple (only if you use them) — receive your sign-in request; we receive back your email address and a sign-in token. policies.google.com/privacy and apple.com/legal/privacy

Voices, music and sound effects in the app are made in advance and packaged inside the app. No voice or AI service receives any data from the app while it runs.

11. No Ads, No Tracking, No Selling

• TapTapLearn shows no ads and contains no advertising software.
• The app does not use the Google Advertising ID or Apple's IDFA, and removes the Android advertising-ID permission.
• We do not track you or your child across other companies' apps or websites.
• We do not sell or rent personal information, or share it for targeted advertising.

12. How Long We Keep Data

• Parent account, settings, subscription status — until you delete your account.
• Child profile and progress — until you delete that profile or your account.
• Leaderboard entries — until you turn the leaderboard off for that child, or delete the profile or your account. Past weekly boards are kept for the current week and the 4 weeks before it, then deleted automatically.
• Leaderboard consent records — until you delete the child profile (removed with it, including after the 30-day period below) or your account.
• A removed child profile — removed from the app and the leaderboard straight away. Kept for 30 days in case it was removed by mistake, then permanently deleted with its progress and skill data.
• Sign-in codes — expire after 10 minutes; removed by a daily clean-up.
• Failed sign-in counters (keyed by email) — removed after one day without new attempts.
• Unlink records (section 3) — until you delete your account, then removed.
• Referral code and referral reward records — your code and any code you entered are removed with your account. Reward records (keeping two account IDs, the plan and the dates) are also deleted when your account is deleted; after deletion the IDs match nobody.
• Progress-report daily roll-up — 70 days, then removed by the daily clean-up; removed at once with the profile or account.
• Learning Catalog progress — part of the child profile: kept until you delete the profile or your account. The activity log keeps 14 days.
• Copies on your device (section 3) — the subscription, voucher and profile-list copies are cleared when you sign out. Everything else on the device (settings, reminder switches, progress copies) stays until you remove the app.
• Failed PIN counters — cleared on the next correct PIN or a new PIN; removed after 30 days, or when you delete your account.
• Offline-sync receipts (to stop a saved change being applied twice) — 30 days.
• Voucher redemption records — kept after account deletion to prevent voucher abuse and for tax and accounting records. After deletion they are linked only to an ID that no longer matches any person. Kept for 7 years from the redemption, then deleted.
• Gift codes and gift orders — the code, the plan, the store's transaction ID and the purchase and redemption dates are kept so the code works for its full 5 years from purchase, and then as sale and tax records until 7 years after the purchase, when the code and the order are deleted. Your email address, the other person's email address and the gift message are deleted when you delete your account; the code keeps working for the person you gave it to, and the order is no longer linked to you. Orders that were never paid are deleted after 30 days.
• Gameplay events (Analytics Engine) — three months after each event is recorded, then removed automatically by Cloudflare.
• A data download you request — saved only on your device. We do not keep a copy of the file.
• Crash and error reports (Sentry) — 30 days.
• Email delivery records (Resend) — 30 days on every Resend plan.
• Support tickets (Zoho Desk) — kept for 12 months, then deleted; a ticket that holds purchase or refund evidence, or a child-safety report, is kept for 24 months instead. They are deleted sooner if you delete your account or ask us to delete them.
• Purchase record (RevenueCat) — until you delete your account, when we ask RevenueCat to delete it.
• Staff admin log — a record of admin actions. It holds your account's random ID, never your email address. Kept for 12 months, then deleted.
• Account activity log (section 5.8) — kept for 12 months, then deleted automatically. Deleted when you delete your account, except for one record that says an account was deleted, which holds only the account's random ID (it matches nobody) and the time.

13. Deleting Data

Delete one child profile: Parent Zone → Manage Kids → remove the profile. The profile disappears from the app and from the leaderboard straight away. We keep its data for 30 days in case it was removed by mistake (email us to restore it), then permanently delete the profile, its progress, its skill data and its leaderboard consent records.

Delete your whole account: Parent Zone → Delete Account. You confirm it is you with your sign-in method (section 9), you type DELETE to confirm, and the account is deleted straight away: every child profile, all progress, leaderboard entries, leaderboard consent records, subscription status, linked sign-in methods and unlink records, your referral code, referral reward records, the progress-report roll-up, pending sign-in codes, failed sign-in and PIN counters, your account activity log and your parent account record. Any email address of yours in our staff admin log is removed at the same time. We then ask RevenueCat to delete your purchase record and Zoho Desk to delete your support tickets and contact record (Zoho moves them to its recycle bin, which it empties on its own schedule 60 days). If a provider cannot be reached, we retry every day and finish by hand if needed. If our connection to a provider is not set up at that moment, the request is kept in the same queue, we are alerted, and it runs as soon as the connection is in place; it is never skipped. The same steps are on our account deletion page. You can also email Support@TapTapLearn.net from your account email with the subject "Delete my TapTapLearn account". We complete email requests within 30 days of confirming it is you.

What account deletion does not remove on its own: your purchase history with Apple or Google, which stays with them; gameplay events, crash reports and email delivery records, which expire on the schedule in section 12; voucher redemption records (section 12); a single record that an account was deleted, with no email address or name (section 12); gift codes you bought, which keep working for the person you gave them to, without your email address, the other person's email address or your message (section 12); and a data download you saved on your device (section 14). Delete the file yourself.

Deleting your account does not cancel a subscription. Cancel it in your Apple or Google account settings.

14. Your Rights

All parents, everywhere. You can see your children's progress in Parent Zone, change a nickname, avatar or age range, stop further collection by deleting a profile or your account, and ask us to correct or delete your data. We answer within 30 days.

Get a copy of your child's data. In Parent Zone, open your child's settings and choose "Download my child's data". The app saves a file (JSON, a common machine-readable format) on your device with what we hold about that child: the profile, progress and skill data, leaderboard setting and entries, leaderboard consent records, the gameplay events stored under the child's coded value, and your account's settings, subscription status and support ticket details, your account's activity log (section 5.8), the most recent 5,000 entries, and the progress-report roll-up. The child's profile in the file includes the Learning Catalog progress and the haptics, sound and motion switches. It never includes passwords, PIN hashes or security keys. Only your signed-in account can download your own children's data. You can also email Support@TapTapLearn.net from your account email to ask for a copy.

Children in the United States (COPPA). A parent can review the information we hold about their child, have it deleted, and refuse further collection or use at any time by deleting the profile or contacting us. A parent can also withdraw leaderboard consent without deleting anything by turning the leaderboard off. We do not make a child's play depend on giving more information than the game needs.

EEA, UK, and Switzerland (GDPR and UK GDPR). You can access, correct, delete, restrict, or object to use of your data, receive a copy in a common format, and withdraw consent (for example to the leaderboard or the weekly summary). You can also complain to your local data protection authority.

US states with privacy laws (for example California, Virginia, Colorado). You can ask what we collect and ask us to delete it. We do not sell or share personal information for targeted advertising, so there is nothing to opt out of.

Other countries (for example the UAE, Brazil, Canada). Contact us and we will respond as your local law requires.

15. Security

We keep a written information security programme with a named person responsible for it, a yearly risk review, checks on our service providers and an incident response plan.

• All connections between the app and our server are encrypted (HTTPS).
• Every request for account or child data must carry a signed session token. Our server checks it against the account on every request and only returns that parent's own data. "Sign out of all devices" cancels every existing session.
• Passwords and PINs are stored only as salted, slow hashes, and sign-in codes only as keyed hashes. PIN hashes on our server also use a secret key that is not stored in the database.
• Repeated sign-in and PIN attempts are limited and temporarily locked.
• Sign-in tokens saved on your device are encrypted. Gameplay events waiting on the device are encrypted and checked for tampering.
• Only a small number of staff accounts can open the admin dashboard, sign-in there needs a second step (an authenticator code) which the server requires for every admin, and admin actions are logged. Staff access to the account activity log (section 5.8) is limited to support administrators, and every time it is opened is recorded. Admins can also register a passkey or a separately verified backup email as backup second steps.
• Sensitive account actions need a fresh confirmation (section 9), and an unlinked sign-in method cannot re-attach by matching an email address.

No system is perfectly secure, which is one reason we keep what we collect small.

16. International Transfers

Our providers may process data outside your country, including in the United States and Australia. Where the law requires it, we rely on the provider's standard contractual clauses or equivalent safeguards.

17. Changes to This Policy

If we change this policy we will update the date at the top. If a change affects children's data or adds a new provider, we will tell parents in the app before it takes effect and, where the law requires, ask for consent again. A leaderboard agreement given under an earlier version of this policy is asked for again before a child can be added to the leaderboard.

18. Contact Us

• Email: Support@TapTapLearn.net
• Developer: TapTapTec
• Postal address: Sheikh Rashid Bin Saeed Al Maktoum Street, Liwara 1, Ajman, United Arab Emirates