Tap mobile app
Privacy Policy
Effective 8 September 2026
The short version
- The app has no sign-up and no accounts. We do not know who you are until you submit a request yourself.
- We use no analytics, no advertising and no trackers. The app contains no third-party advertising or analytics SDK of any kind.
- We do not collect your contacts, photos, files, calendar, microphone or camera — the app never even asks for them.
- Your coordinates never leave your phone: the city is determined on the device itself.
- We do not sell your data and do not share it for advertising.
1. Who is responsible for your data
The “Tap” app is a directory of local services. This page explains what data the app collects, why, where it is stored and how to have it deleted. For any question about your data, write to [email protected].
2. Data that stays on your device only
The following is stored inside the app on your phone and is never sent to our servers. It disappears if you uninstall the app or clear its data in your phone settings:
- Favourites — the providers you bookmarked. They never leave the phone, which is also why they do not follow you to another device.
- Your chosen language, country and city.
- Your “Bazaar” shopping cart and the display currency you picked.
- A flag recording that you have seen the welcome screen.
- The device identifier and the access keys to your own requests (see section 4).
- An image cache, so the catalogue does not reload every time.
3. Location
On first launch the app asks for location permission. It is used for exactly one purpose: to pre-fill your city so you do not have to pick it from a list by hand.
How it works technically:
- The app requests low-accuracy coordinates — city level, not street level.
- The list of cities and their coordinates is downloaded from our server to your phone.
- The nearest city is calculated on the device itself. Only the resulting city name is sent to the server, as an ordinary catalogue filter — exactly as if you had tapped the city yourself.
- Your coordinates are never transmitted to the server and are not stored anywhere.
You may decline the permission or revoke it in your phone settings — the app keeps working, you simply choose the city manually. There is no background location tracking: the location is requested only at the moment the city is being determined.
4. Device identifier
Because the app has no login, on first launch it generates a random device identifier — a string of 32 random characters. It is not an advertising ID, not an IMEI and not a phone number: it is generated randomly on your device and is tied neither to you nor to the hardware.
It exists so that:
- your support chat stays one continuous conversation instead of a pile of anonymous messages;
- the “My requests”, “My listings” and “My orders” screens show you your own records;
- views of a listing are not counted twice from the same device.
If you uninstall the app or clear its data, the identifier is gone. A new one is generated on next launch, and access to your previous requests from that device is lost.
5. Data you send us yourself
Everything else reaches us only when you fill in a form and tap “Send”. You can browse the whole catalogue without telling us anything about yourself.
| What you do | What we receive | Why |
|---|---|---|
| Send a request to a provider | Name, phone number, message text, the selected provider, device identifier | To connect you with the provider — without a name and phone number they cannot call you back |
| Report a provider | Reason, comment, contact phone number (optional), device identifier | To investigate and, if needed, remove the provider from the catalogue |
| Apply to become a partner | Business name, category, city, phone, WhatsApp, description, device identifier | To verify you and add your business to the catalogue |
| Submit a classified listing | Title, description, type, price, contact phone, country, city, device identifier | To review and publish the listing. The phone number is visible to other users — that is the point of publishing it |
| Order a top-up for family back home | Your contact phone, the number or account being topped up, a note, the chosen service and tariff | To carry out the top-up and confirm it to you |
| Place a “Bazaar” order | Your name and phone; the recipient’s name, phone, city, address and note; payment method, currency, order contents, device identifier | To assemble the order and deliver it to the recipient at the given address |
| Write to support chat | Message text, device identifier, selected country | To reply to you and keep the conversation history |
| Open a listing | Device identifier and the time of viewing | So the view counter is not inflated by the same phone. These records are deleted automatically after 48 hours |
Please note: the recipient’s address and phone number in a “Bazaar” order are another person’s data. By entering them you confirm that you are entitled to share them, since delivery is otherwise impossible.
The app never asks for an email address anywhere.
6. Who can see this data
- Our staff — the people who process requests and answer support, through a password-protected admin panel.
- The provider your request is addressed to. The request reaches our operator, who notifies the provider and passes on your name and phone number. From there you deal with each other directly, without us. That is the whole point of a request, and the form says so plainly: “Leave your contact details — the provider will get in touch with you.”
Nobody else. We do not sell data and do not pass it to advertisers, data brokers, or for training models. We may disclose data only upon a lawful request from a competent public authority.
If you contact a provider directly
Every provider card has “Call” and “WhatsApp” buttons. Tapping them takes you out of the app: you reach the provider yourself, bypassing the request form. In that case we receive nothing about you at all — no name, no number, not even the fact that you got in touch. The call and the chat happen outside the app, on your phone and in WhatsApp, under their rules.
7. Photos
Photos in the catalogue, listings and “Bazaar” are uploaded by us through the admin panel. The app does not request access to your camera or gallery and has no ability to send your photos anywhere — it only displays ours.
8. What we do not collect
- Surname, date of birth or identity-document details — other than the name you type into a request yourself.
- Email addresses and passwords — there is nowhere to enter them.
- Contacts, calls, SMS, photos, files, calendar, microphone, camera.
- Advertising identifiers (AAID, IDFA) or any trackers.
- App-usage data: which screens you open, what you tap, how long you stay. We run no analytics.
- Crash reports.
- Payment details: no card or account numbers pass through the app; payment is confirmed manually.
- Your contacts’ data or any information from other apps.
9. Where the data is stored
- The database holding requests, orders and support chats is on a rented server in Finland. The database port is closed to the outside world and is reachable only from the server itself.
- Catalogue photos are kept in Cloudflare R2 object storage and delivered through the Cloudflare content delivery network. When your app loads an image, Cloudflare, as our infrastructure provider, sees the IP address of that request. The storage itself contains no personal data — only pictures of goods, listings and organisations.
- The app’s requests to our API server go directly, bypassing the Cloudflare network.
All communication between the app and the server uses HTTPS (TLS encryption). The app never makes unencrypted connections.
10. Server logs
The web server keeps an ordinary technical log: IP address, date, time and the requested address. It is used for troubleshooting and abuse protection and is deleted automatically after 14 days. The IP address is also held in memory for rate limiting — to keep the forms free of spam — and is not retained there once the request has been handled.
Addresses for the support chat, “My orders” and “My listings” contain a secret access key. We deliberately strip that part of the address before writing to the log so that it never appears there.
11. How long we keep data
- Listing-view records — 48 hours, then deleted automatically.
- Technical server logs — 14 days.
- Requests, orders and support conversations — for as long as they are needed to run the service: to complete the job, resolve disputes and keep accounts. We delete them at your request — see section 13.
- Database backups — 14 daily and 8 weekly copies, overwritten in rotation. Data deleted at your request disappears from the backups as they are rotated.
12. External links
From the app you can place a call, open WhatsApp or Telegram, open a map or a government website. The moment you tap such a button you leave the app, and the rules of that service apply instead. We are not responsible for them and receive no data about you from them.
13. Your rights and how to delete your data
You can ask us to:
- tell you what data about you we hold;
- correct it if something is wrong;
- delete it.
The full instructions are on a separate page: data deletion. In short: write to [email protected], quoting the phone number you used in your request. We reply within 30 days.
Data that lives only on your phone (section 2) is deleted by you: uninstall the app or clear its data in your phone settings. There is no need to ask us — we do not have it.
14. Children
The app is intended for adults and is not directed at children under 13. We do not knowingly collect children’s data. If we learn that a child has sent us data, we will delete it — please report it to [email protected].
15. Changes to this policy
If we ever start collecting anything else, we will update this page and change the date at the top. Significant changes will also be shown inside the app.
16. Contact
For any question about your data: [email protected]