Tapxact app icon

Tapxact

Tap. Stop. Score.

Privacy Policy

Last updated: 4 April 2025

This privacy policy explains how Sloth Panda Labs ("we", "us", "our") collects, uses, and protects information when you use the Tapxact mobile application ("the App"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The data controller for Tapxact is:

Sloth Panda Labs
Email: privacy@slothpandalabs.com

If you have any questions about this policy or how we handle your data, please contact us at the address above.

2. What Data We Collect

Solo play (no account required): Tapxact does not require you to create an account to play solo modes or the Daily Challenge. When you play, anonymous gameplay statistics — such as scores, timing accuracy, and streaks — are logged via Firebase Analytics (see Section 4). These events do not contain your name, email address, or any directly identifying information.

Group Challenge (Google Sign-In required): To participate in Group Challenges, you sign in with a Google account. We collect and store the following information provided by Google:

  • Display name
  • Email address
  • Profile photo URL
  • A unique user identifier (Google UID)

This information is stored in our Firebase database and is visible to other players in the same group during a challenge session.

Gameplay data in Group Challenges: Scores, timing accuracy, and round results for each Group Challenge session are stored in our Firebase database and shared with other members of your group.

3. Legal Basis for Processing

We process personal data on the following legal bases under UK GDPR:

  • Legitimate interests (Article 6(1)(f)): Analytics and crash reporting help us improve the App's performance and stability. We have assessed that our interest in maintaining a functional and improving product does not override your rights and freedoms, particularly because the data collected is aggregated, pseudonymous, and you have the right to opt out.
  • Contract performance (Article 6(1)(b)): When you use Group Challenge features, we process your Google account data to provide the multiplayer service you have requested.
  • Legitimate interests (Article 6(1)(f)): Non-personalised advertising enables us to offer the App free of charge.

4. Analytics — Firebase Analytics & Crashlytics

We use Firebase Analytics and Firebase Crashlytics, services provided by Google LLC ("Google"), to understand how the App is used and to diagnose technical issues.

Firebase Analytics logs events such as:

  • Game mode selections, round starts, and round completions
  • Scores, timing accuracy, and session statistics
  • Screen views and settings changes
  • Achievement unlocks and challenge completions

Firebase Crashlytics collects crash reports that include:

  • Device model and manufacturer
  • Operating system version
  • App version
  • Stack traces and error logs at the time of a crash

If you use the Group Challenge feature and are signed in, your Google UID may be associated with crash reports to help us diagnose user-specific issues.

Google processes analytics and crash data under its own privacy policy, available at policies.google.com/privacy. Google may transfer this data to countries outside the UK; such transfers are covered by appropriate safeguards (Standard Contractual Clauses).

5. Advertising — Google AdMob

The App displays advertisements provided by Google AdMob, a service of Google LLC. We have configured AdMob to serve non-personalised ads only — we do not use your personal data or browsing history to target advertisements at you.

Even with non-personalised ads, AdMob may collect certain technical information for the following purposes:

  • Fraud prevention and security
  • Frequency capping (limiting how often you see the same ad)
  • Aggregated ad reporting

This may include device identifiers (such as the Android Advertising ID), IP address, and basic device information. Google processes this data under its own privacy policy.

6. Data Retention

  • Firebase Analytics: Event data is retained for 14 months by default, in line with Google's standard retention policy.
  • Firebase Crashlytics: Crash reports are retained for 90 days.
  • Group Challenge data: Group documents — including member scores and profile information — are stored in our Firebase database and are deleted when the group session expires or is deleted by the creator.

7. Data Sharing

We do not sell your personal data. We share data only with the following third-party service providers, who process it on our behalf or under their own policies:

  • Google LLC — Firebase (authentication, database, analytics, crashlytics), Google Sign-In, AdMob

We do not share your data with any other third parties unless required to do so by law.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate data.
  • Right to erasure: You can ask us to delete your personal data where there is no compelling reason for its continued processing.
  • Right to restriction: You can ask us to restrict how we process your data in certain circumstances.
  • Right to data portability: You can request your data in a structured, commonly used, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests.

To exercise any of these rights, please contact us at privacy@slothpandalabs.com. We will respond within one month.

9. Supervisory Authority

If you believe we have not handled your data in accordance with UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority:

10. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.