Privacy policy
Applies to the Tappaloo app for Android (phones, tablets and Android TV), play.tappaloo.com and tappaloo.com. Last updated 24 October 2026.
In short: Tappaloo is made for children aged 3 to 12. We do not ask for, collect or sell any personal information. There is no sign-in, no chat and no way for children to share anything. A child's first name and avatar stay on the device. The only outside service in the app is Google's AdMob, which shows rare, non-personalised, child-safe ads in Big Tappaloo only.
Who we are
Tappaloo is made by Tappaloo Studios, based in India ("we", "us"). You can reach us at privacy@tappaloo.com for anything about privacy, and at support@tappaloo.com for everything else.
Information that stays on the device
The app and play.tappaloo.com save these things only in the device's own storage. They are never sent to us or to anyone else:
- player profiles: a first name (or nickname) typed by a grown-up and a chosen animal avatar;
- stars, levels reached and personal bests;
- settings such as language, sound and music;
- the parent PIN or grown-ups gate setting.
You can delete a player in the grown-ups area. Uninstalling the app, or clearing the app's or website's data, deletes everything. On Android, the system's own backup may copy app data to the family's Google account if backup is turned on in the device settings; that backup is controlled by Google and the device owner, not by us.
Information the app sends to our server
When the app is online it may register with our server so that purchases can be checked and only the genuine Tappaloo app can use our services. The server stores only:
| What | Why |
|---|---|
| A random install number created by the app (not linked to the person, the Google account or the device's advertising ID) | To tell installs apart and keep purchases working |
| Device type (phone, tablet or TV), app version, Android version and chosen language | To fix problems and plan which devices and languages to support |
| A one-way scrambled copy (hash) of a Google Play purchase token, the product bought and its state | To confirm what the family has bought |
Each registration includes a Google Play Integrity check, which asks Google to confirm the request comes from the real Tappaloo app installed from Google Play. It does not give us any account or personal details.
We never store names, email addresses, Google account IDs, advertising IDs, phone numbers, precise or approximate location, contacts, photos, voice recordings or any text typed by a child. Our server and website receive the device's internet (IP) address with each request because that is how the internet works. We do not store IP addresses in our database and do not keep visit logs. The server may hold an address in memory for a short time to limit abuse.
Our server runs on Oracle Cloud. Because an install record is not linked to any person, we usually cannot find it from an email; uninstalling the app or clearing its data stops it being used. If you want us to look for and delete a record, email privacy@tappaloo.com.
Advertising (Big Tappaloo only)
- Little Tappaloo (ages 3 to 6) never shows ads.
- In Big Tappaloo (ages 7 to 12), the app may show a short ad between games: at most one every two finished games, at least three minutes apart, and never in a child's first session. There are no banner ads.
- Ads come from Google AdMob, a Google Play Families self-certified ads SDK. Every ad request is marked as directed to children and under the age of consent, limited to content rated G, and non-personalised. The app removes Android's advertising ID permission, so AdMob cannot read it.
- To deliver ads and prevent fraud, Google's SDK may process limited device information such as an app-set ID, the IP address (from which a general area can be guessed), app interactions with the ad and diagnostics. Google handles this under its own policies: How Google uses information from apps that use its services.
- A one-time "Remove ads" or "Full unlock" purchase turns ads off. The Tappaloo website, the Android TV app and the iPhone and iPad app (when available) show no ads.
Purchases
Purchases are handled entirely by Google Play using the family's Google account. We never see card or bank details, names or email addresses. All purchase screens sit behind a grown-ups gate.
Spoken instructions
The games speak using recorded voices or the voice built into the device. On some browsers, the website can only use an online voice for a language (for example Hindi in Chrome); the browser's maker then turns the game's prompt into speech on its servers. A child's name is never sent this way.
The websites
tappaloo.com and play.tappaloo.com use no cookies, no analytics, no tracking and no ads. They load nothing from other websites. The game website keeps a copy of its own files in the browser so it works offline.
Permissions
The Android app asks only for internet access. It does not use the camera, microphone, location, contacts, photos or files.
Children
Because we do not collect personal information, we do not need, and do not ask for, any information from children or parents. Links to anything outside the games are behind a grown-ups gate. We follow Google Play's Families policy and aim to meet India's Digital Personal Data Protection Act, the US Children's Online Privacy Protection Act (COPPA), the EU and UK GDPR and the UK Age Appropriate Design Code.
Sharing and selling
We do not sell, rent or share information with anyone. The only data that leaves the device to a third party is what Google's AdMob and Google Play services process, described above. We may disclose information if the law requires it, but we hold almost none.
Your rights
Wherever you live, you can ask us what we hold about your install, ask us to correct or delete it, or complain. Email privacy@tappaloo.com and we will reply within 30 days. You may also contact your local data protection authority.
Changes to this policy
If we change what the app collects, we will update this page and the date at the top before the change reaches the app. Any change that would collect personal information from children would first need verifiable parental consent, and we would say so clearly in the app.
Contact
Tappaloo Studios, India
Privacy: privacy@tappaloo.com
Support: support@tappaloo.com