Tappling Privacy Policy

1 Information you provide

Account and profile information includes your email, chosen name, authentication identifiers, preferences, and information needed to establish age eligibility. Onboarding answers may describe your goals, interests, worries, desired companion style, and other circumstances you choose to share. We use these answers to personalize the experience. Do not provide another person's private information without permission.

Conversation and memory information includes your messages, AI responses, saved moments, photos or other material you submit through supported features, and summaries or preferences derived from interactions. We may retain personalization records separate from the visible transcript to maintain continuity across sessions. Bond progression and care or play events may also be stored. Derived memories can be inaccurate and remain personal information when linked to you.

Purchase and support information includes billing contact information, subscription status, payment transaction identifiers, correspondence, and information you provide when reporting problems. Payment processors or app stores collect payment credentials. We receive transaction and entitlement information needed to manage subscriptions and access.

2 Information from use and devices

We collect basic technical, usage, error, and security information needed to operate, secure, measure, and troubleshoot the Services, such as IP address, operating system, app version, device model, authentication and access logs, timestamps, feature events, and error diagnostics. IP addresses may reveal approximate location.

If you enable supported location, walk, travel, or weather features, we process information needed for that feature, such as authorized location, step counts or activity information, or a manually entered place. We request relevant permissions and explain the purpose in context. We process precise location for the enabled feature and then discard it; we do not retain a full precise-location history. A trip or place memory you choose to save may remain without the underlying precise-location history.

If you use supported photo or voice features, we process the photos or voice input you submit or authorize for that interaction. We request camera or microphone permissions when needed. Raw voice recordings are deleted after transcription, within 24 hours. Photos remain while you retain the associated content, subject to deletion requests and the retention practices below. Denying an optional permission limits its associated feature rather than authorizing unrelated collection.

When connected-device features become available, we may process companion and physical-device identifiers, activation and Bluetooth pairing records, ownership and replacement history, and supported touch, pickup, or motion events. We use this information to link your companion and device, respond to interactions, and troubleshoot connectivity. Bluetooth identifiers and proximity events are not the same as GPS location. Phone-based voice or photo features do not imply that a physical Tappling captures audio or video. Device activity does not establish a person's emotional state or health condition.

3 Other sources

We receive authentication information from the account services you use and transaction and entitlement information from payment processors and app stores. Providers acting for us may supply usage, error, or security information. We do not obtain private conversations from unrelated third-party services merely because you connect a Tappling device.

4 How we use information

We use information to create and authenticate accounts; provide AI responses and companion personalization; save and retrieve memories; support bond progression and care or play interactions; process subscriptions; provide support; prevent fraud and misuse; maintain safety and security; comply with law; and communicate service notices. When connected-device features become available, we also use relevant information to activate, link, and replace devices. We use minimized or aggregated operational data to assess reliability and feature performance.

We send promotional email only under applicable rules and honor unsubscribe requests. Transactional notices may still be sent. Push notifications can be managed through your phone settings. We do not use private chat or sensitive information to select ads, manipulate subscription purchases, or make eligibility decisions about employment, credit, insurance, housing, or healthcare. We do not make legally significant decisions based solely on automated companion profiling.

5 AI processing and human access

To generate responses, relevant messages, onboarding context, and selected memories or personalization records are transmitted to the AI provider serving the interaction. We minimize information sent where practical. Processing by an AI provider is a disclosure to that provider even if your chats are not public. Providers may process and retain information as needed to provide the service, subject to applicable contractual restrictions and legal obligations.

We do not use private conversations to train general-purpose AI models or allow contracted AI providers to do so. Any optional future program using identifiable content for model training requires a separate disclosure and affirmative permission where required; declining does not remove access to unrelated purchased features. Generating an answer from your context is distinct from training model weights.

Human access to private conversations is limited to authorized personnel and contracted providers when necessary for support, security, safety investigations, or legal obligations. Access is limited to the relevant purpose and authorized roles. We do not routinely sample private chats for product-quality review. Conversations are not continuously monitored by a human, are not professional-confidential communications, and are not end-to-end encrypted when our servers or AI providers process readable content.

6 Sensitive information

Your voluntary messages or onboarding answers may reveal health, mental-health, relationship, sexual-orientation, religious, ethnic, or other sensitive information. Activity and location features may also reveal sensitive facts. We use such information only for the specific service you request and limited safety, security, or legal purposes, subject to applicable consent and use restrictions. We do not infer sensitive traits for advertising or unrelated profiling. Do not submit highly sensitive information unless necessary for the interaction you choose.

Consumer-health privacy laws may provide additional protections for certain information, even though Tappling is not a healthcare provider. Where applicable, we provide additional notices and obtain required consent for covered collection or sharing, and honor applicable deletion rights. This Policy does not replace a separately required consumer health data policy.

7 Who receives information

Providers receive information needed for their functions, including cloud hosting and databases, authentication, AI inference, payments, customer support, communications, usage measurement, security, and diagnostics. We use AWS for backend services, including authentication and some analytics, and Google Analytics for usage measurement. Direct website billing uses Stripe when available; Apple and Google Play process subscriptions purchased through their stores. AI processing is handled by the provider selected for the relevant conversation service. Contracted processing is subject to purpose, confidentiality, security, retention, and use restrictions. Payment processors and app stores also process information under their own privacy notices for their independent functions.

We may disclose information when legally required, in response to valid legal process, or when reasonably necessary and lawful to protect people, investigate misuse, enforce agreements, or protect rights and security. We assess requests and limit disclosures where appropriate. We may disclose information in a genuine merger, acquisition, financing due-diligence process, or business transfer subject to safeguards and applicable law. A transfer does not authorize materially incompatible uses without required notice or consent.

If you deliberately export or share a memory, screenshot, or other content, the destination receives what you share and may retain it under its own practices. Private conversations and memories are not public by default. When connected-device features become available, transferring a physical device does not automatically disclose your account, conversations, or memories to its new owner. A companion's identity is separate from its physical-device identity, so an eligible replacement may preserve the companion's history.

8 Sale advertising sharing and tracking

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable California law. We do not sell consumer health data or use targeted advertising, advertising personalization, advertising pixels, or retargeting. Ordinary disclosures to contracted providers for restricted processing are different from advertising sharing.

We use Google Analytics and AWS analytics to measure usage and service performance. We do not send chat, memory, photo, voice, or precise-location content to analytics. Our site or app may use cookies or similar storage for authentication, security, preferences, and usage measurement. Browser cookie controls may affect functionality. Where consent is required for optional analytics or storage, we obtain it before use. You may contact support@tappling.com about analytics choices or applicable opt-out rights.

9 Retention

We retain information only as long as reasonably necessary for the disclosed purpose, subject to applicable law. Account records remain while your account is active and for necessary closure processing. Chats, saved memories, and derived personalization remain while you retain them, until you request deletion of that content or your account. Photos remain while you retain their associated content. Diagnostic and security logs remain while the account is active to support reliability, security, and investigations, subject to necessity and applicable legal limits. Purchase and tax records remain for periods required by applicable law.

We remove deleted personal content from active systems within 30 days of the relevant content or account deletion request, subject to limited lawful exceptions and any shorter mandatory deadline. Backup copies of deleted content expire within 90 days, or sooner where required by law. Account deletion includes associated chats, memories, derived personalization, photos, and diagnostic and security records, subject to those limits and exceptions.

Raw voice recordings are deleted after transcription, within 24 hours. Precise location is discarded after processing for the enabled feature; saved trip or place memories may remain without the underlying precise-location history. AI providers may have different retention periods, subject to applicable contractual restrictions and legal requirements.

Limited records may be retained for fraud prevention, resolving an active dispute, compliance, or another lawful exception, with restricted use. Backup copies are not used to restore deleted content to active personalization. If a backup is restored, we reapply deletion requests. Mandatory deletion deadlines and processor-deletion duties take precedence over an ordinary backup schedule. Properly deidentified aggregate information may be retained with safeguards against reidentification.

10 Your controls and deletion

You can initiate account and associated-data deletion through Me → Delete account, with confirmation. We may process the request manually, explain completion timing, and confirm when deletion is complete. The retention and deletion periods in Section 9 apply. You can also request account and associated-data deletion through https://tappling.com/delete-account without using the app.

Me → Privacy requests opens an email to support@tappling.com. Contact that address to request access or export, correction, individual chat or memory deletion, or a personalization reset. Requests may be handled manually. Relevant requests include derived summaries, inferences, and other personalization records as well as visible content.

Source conversations, saved memories, and derived personalization can be separate records. Deleting one does not necessarily remove the others unless they are included in your request. We explain the scope when handling deletion or reset requests. If you ask us to stop using information for personalization, we honor that request rather than silently regenerating deleted memories or inferences from retained chats.

Account deletion removes or deidentifies associated personal information subject to limited lawful retention. Deleting the app does not delete your account. When connected-device features become available, unlinking or resetting a physical device does not itself delete cloud account records. Store-managed subscriptions require separate cancellation through the store; we provide the relevant instructions. We address direct website billing as part of account deletion so it does not silently continue. Information you shared outside Tappling is controlled by its recipient.

You may revoke device permissions, disable notifications, and unsubscribe from promotional email. Revoking a permission stops future collection through that permission, but does not automatically erase information already lawfully collected. Where processing relies on consent, you may withdraw it through support@tappling.com, subject to lawful limited retention and the consequences for the specific feature.

11 Privacy rights

Depending on your residence and applicable law, you may have rights to confirm processing; access specific information or categories; obtain a portable copy; correct inaccuracies; delete information; opt out of sale, advertising sharing, targeted advertising, or certain profiling; limit certain sensitive-information uses; withdraw consent; and appeal a denied request. We do not discriminate unlawfully for exercising rights. We do not require waiver of mandatory privacy rights.

Submit requests through support@tappling.com. We verify identity only as appropriate to the request and may request account-based confirmation; do not send government identification unless a secure, justified process requires it. Authorized agents may submit requests where permitted, with appropriate authorization and verification. Opt-out requests are not conditioned on unnecessary identity verification. We respond within the deadlines required by applicable law and explain any permitted extension or denial. Appeal through support@tappling.com; where required we explain how to contact the relevant regulator after an unsuccessful appeal.

For California residents, information described in this Policy may fall within categories such as identifiers; customer-record information; commercial information; internet or electronic activity; geolocation when enabled; audio or visual information when supported and submitted; inferences; and sensitive personal information. Sources, purposes, recipient categories, and retention practices appear in Sections 1–9. Optional categories apply only when collected through an available feature; their inclusion here does not mean they were collected from every user or during a prior reporting period. We do not sell or share information for cross-context advertising, including information of individuals under 16. CCPA rights apply when Tappling meets the law's applicability criteria.

California residents may also request information about covered disclosures for third-party direct marketing under applicable law. We do not disclose personal information to third parties for their own direct marketing. Contact us with questions about such rights.

12 Children and age eligibility

The Services are intended only for adults age 18 or older who have also reached the age of legal majority where they live. A parent's account or permission does not authorize a minor to use the Services. We do not knowingly permit minor accounts or knowingly collect personal information from children under 13. If we learn that a minor is using the Services, we take appropriate steps to restrict access and handle the information according to applicable law. Contact support@tappling.com if you believe a child provided personal information.

We may request information needed to establish age eligibility where appropriate or required by law. Age-related information is used for that purpose and associated safety or legal obligations.

13 Security and processing locations

We use encryption in transit and at rest, restrict staff access to authorized personnel, and require multifactor authentication for administrative accounts. No system is perfectly secure. We investigate incidents and provide legally required notifications. Encryption in transit and at rest does not mean chats are end-to-end encrypted when Tappling or AI providers process readable content.

Tappling and its providers may process information in the United States and other countries where they operate. Processing locations vary by provider and service. Information may be processed outside your state or country subject to applicable law and required safeguards. Use of the Services is not itself blanket consent to an international transfer. Where required, we provide additional transfer, legal-basis, representative, or rights disclosures before covered processing.

14 Policy changes and contact

We update this Policy when our practices change and revise the effective date. For material changes, we provide additional notice as required, such as email or an in-app notice. We obtain new consent when legally required and do not treat continued use as consent to previously undisclosed optional sensitive processing. Contact Tappling at support@tappling.com with questions or requests.