How Tap In handles data

• Account identity, authentication details, and profile settings
• Group, task, habit, leaderboard, comment, caption, and post content
• Proof media, including photos, video, audio, and related metadata
• HealthKit-derived proof snapshots and Screen Time compliance events
• Precise location verification data when a location task requires it
• Notification tokens, device identifiers, preferences, and delivery state
• Stripe customer, payment method, payout, hold, wallet, fee, and settlement records
• Product interaction, performance, diagnostics, fraud-prevention, and support data

We use data for app functionality, task verification, group accountability, payment and payout processing, abuse prevention, security, customer support, product analytics, and performance diagnostics. Screen Time and HealthKit data are used only for user-selected accountability tasks and are not sold, used for tracking, or used to monetize Apple API access. Financial stakes and platform fees are accountability product mechanics, not payment for Screen Time APIs or other Apple-provided capabilities.

Tap In uses service providers including Firebase/Google for authentication, database, storage, messaging, analytics, performance, and app infrastructure; Stripe for payment and payout processing; and AI verification providers for proof review. These providers process data to operate Tap In, not to sell it.

Squad members may see activity, results, posts, comments, and proof details needed for accountability. Public challenges and posts can be visible more broadly. Private proof media is not shown unless the product flow or user choice shares it.

Public leaderboards use trophy counts and trophy streaks only. Account-level payment methods, wallet balances, payout records, settlement details, and realized financial gains or losses are private financial records and are not included in public profiles or public leaderboards. Tap In and authorized service providers process those records as needed to operate payments, payouts, security, support, and legal compliance.

Account deletion is a soft delete. Tap In deactivates the profile and anonymizes personal identifiers where practical. Posts, habits, proof records, stake records, transaction history, group membership history, dispute and audit records, abuse-prevention logs, and settlement records may be retained without the user's direct identity when needed for financial integrity, dispute handling, legal compliance, fraud prevention, or service security. Financial transaction records may be retained for longer periods when required by law or payment-network obligations.

Users can request access, correction, deletion review, or retention objection through the support channel, subject to legal, financial-record, security, and fraud-prevention requirements.