Privacy Policy

Last Updated: March 26, 2026 | Effective Date: March 26, 2026

Introduction

This Privacy Policy describes how kohuyn ("we", "us", "our") collects, uses, and protects your information when you use TapListen ("the App"). We are committed to protecting your privacy and complying with applicable data protection laws including GDPR (EU), CCPA (California), and COPPA (US).

By using the App, you agree to the collection and use of information as described in this policy.

Information We Collect

1. Account Information

When you sign in, we collect:

Email address (via Apple or Google Sign-In)
Display name and profile avatar (from your sign-in provider)
Unique user identifier (Firebase Auth UID)
Authentication provider (Apple, Google, or Anonymous)

If you use Anonymous sign-in, no personal identity information is collected.

2. Usage Data

We collect reading and listening statistics to provide features like progress tracking:

Daily listening and reading time
Word counts and session duration
Chapter and paragraph progress
Last read timestamps

3. Crash Reports

We use Firebase Crashlytics to collect anonymous crash data including:

Device model and OS version
App version and crash stack traces
Time of crash occurrence

Crash reports do not contain personal information, document content, or API keys.

4. Subscription Data

Subscription purchases are processed by Apple App Store through RevenueCat. We receive:

Subscription status (active/expired)
Product identifier and purchase date
We do not receive your payment details (credit card, billing address)

Information We Do NOT Collect

Your documents: PDF and TXT files are stored locally on your device only and are never uploaded to our servers.
Location data: We do not request or access your location.
Camera or microphone: We do not access your camera or microphone.
Contacts or photos: We do not access your contacts or photo library.
Browsing history: We do not track your browsing activity.
Advertising identifiers: We do not collect IDFA or use ad tracking.

How We Use Your Information

Purpose	Data Used
Provide sign-in and account management	Account information
Track reading/listening progress	Usage data
Process subscriptions	Subscription status
Improve app stability	Crash reports
Deliver TTS audio	Text content (processed in-memory, not stored on server)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

Service	Purpose	Privacy Policy
Firebase Authentication	User sign-in	Firebase Privacy
Firebase Crashlytics	Crash reporting	Firebase Privacy
Firebase Remote Config	Feature flags	Firebase Privacy
RevenueCat	Subscription management	RevenueCat Privacy
ElevenLabs	Premium text-to-speech	ElevenLabs Privacy
Apple Sign-In	Authentication	Apple Privacy
Google Sign-In	Authentication	Google Privacy

Note on TTS Processing: When using premium TTS, text content from your documents is sent to our TTS routing server and forwarded to ElevenLabs for audio generation. This text is processed in real-time and is not stored on our servers or by ElevenLabs beyond the processing session.

Children's Privacy

TapListen is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at huypq.dev@gmail.com.

Data Storage and Security

Local data (documents, reading progress): Stored on your device using encrypted local storage (SwiftData). Never transmitted to external servers.
Account data (profile, usage stats): Stored on our secure backend servers with HTTPS encryption in transit.
Authentication tokens: Stored securely in iOS Keychain.
We implement industry-standard security measures to protect your data, but no method of transmission or storage is 100% secure.

Data Retention

Account data: Retained while your account is active. Deleted upon account deletion request.
Usage statistics: Retained while your account is active.
Crash reports: Retained for up to 90 days.
Local documents: Remain on your device until you delete them. We have no access to these files.

Your Rights

For All Users

Access: Request a copy of your personal data.
Deletion: Request deletion of your account and associated data.
Correction: Update your profile information through the App.

For EU/EEA Users (GDPR)

In addition to the above, you have the right to:

Data portability: Receive your data in a structured, machine-readable format.
Restrict processing: Request limitation of how we use your data.
Object: Object to certain data processing activities.
Withdraw consent: Withdraw consent at any time without affecting prior processing.
Lodge a complaint: File a complaint with your local data protection authority.

Legal basis for processing: Contractual necessity (providing the service), legitimate interests (improving the App), and consent (where applicable).

For California Users (CCPA)

You have the right to:

Know what personal information we collect and how it is used.
Delete your personal information.
Non-discrimination: We will not discriminate against you for exercising your rights.
Opt-out of sale: We do not sell your personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the updated policy in the App
Updating the "Last Updated" date at the top

Your continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: huypq.dev@gmail.com