Privacy Policy

Last Updated: April 21, 2026  |  Effective Date: April 16, 2026

Introduction

This Privacy Policy describes how kohuyn ("we", "us", "our") collects, uses, and protects your information when you use TapListen ("the App"). We are committed to protecting your privacy and complying with applicable data protection laws including GDPR (EU), CCPA (California), and COPPA (US).

By using the App, you agree to the collection and use of information as described in this policy.

Information We Collect

1. Account Information

When you sign in, we collect:

• Email address (via Apple or Google Sign-In)
• Display name and profile avatar (from your sign-in provider)
• Unique user identifier (Firebase Auth UID)
• Authentication provider (Apple, Google, or Anonymous)

If you use Anonymous sign-in, no personal identity information is collected.

2. Usage Data

We collect reading and listening statistics to provide features like progress tracking:

• Daily listening and reading time
• Word counts and session duration
• Chapter and paragraph progress
• Last read timestamps

3. Crash Reports

We use Firebase Crashlytics to collect anonymous crash data including:

• Device model and OS version
• App version and crash stack traces
• Time of crash occurrence

Crash reports do not contain personal information, document content, or API keys.

4. Analytics Data

We use Firebase Analytics to understand how users interact with the App and improve user experience. We collect anonymous events including:

• App open and session duration
• Feature usage (e.g., document imports, paywall views, subscription events)
• Screen views and navigation patterns

Analytics events are linked to your anonymous Firebase user ID and do not contain document content or personal identifiers beyond what's already disclosed above.

5. Subscription Data

Subscription purchases are processed by Apple App Store through RevenueCat. We receive:

• Subscription status (active, expired, in trial)
• Product identifier, purchase date, and renewal date
• Free trial eligibility status (to prevent multiple trials per Apple ID)
• We do not receive your payment details (credit card, billing address)

6. URL Import Data

When you import a web article via URL, the URL is sent to our servers to fetch and extract the article's readable text content. The extracted text is returned to your device and stored locally. We do not permanently store the URL or extracted content on our servers beyond the extraction session required to deliver the result.

7. Translation Data

When you use Translate Mode, selected text is sent to our servers and forwarded to third-party translation services (Google Cloud Translation and/or Microsoft Azure Translator) for processing. The text is processed in real-time and is not stored on our servers or by the translation providers beyond the session required to generate the translation.

Information We Do NOT Collect

• Your documents: PDF, EPUB, Markdown, and TXT files are stored locally on your device only and are never uploaded to our servers in full. Only text snippets required for premium TTS, translation, or URL article extraction are transmitted to processing servers in real-time and are not retained.
• Location data: We do not request or access your location.
• Camera or microphone: We do not access your camera or microphone.
• Contacts or photos: We do not access your contacts or photo library.
• Browsing history: We do not track your browsing activity.
• Advertising identifiers: We do not collect IDFA or use ad tracking.

How We Use Your Information

Purpose	Data Used
Provide sign-in and account management	Account information
Track reading/listening progress	Usage data
Process subscriptions	Subscription status
Improve user experience	Analytics data
Improve app stability	Crash reports
Deliver TTS audio	Text content (processed in-memory, not stored on server)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

Service	Purpose	Privacy Policy
Firebase Authentication	User sign-in	Firebase Privacy
Firebase Crashlytics	Crash reporting	Firebase Privacy
Firebase Analytics	Usage analytics	Firebase Privacy
Firebase Remote Config	Feature flags	Firebase Privacy
RevenueCat	Subscription management	RevenueCat Privacy
Microsoft Azure Cognitive Services	Premium text-to-speech and translation	Microsoft Privacy Statement
Google Cloud Translation	Translation service	Google Cloud Privacy Notice
Apple Sign-In	Authentication	Apple Privacy
Google Sign-In	Authentication	Google Privacy

Note on TTS Processing: When using premium TTS, text content from your documents is sent to our TTS routing server and forwarded to Microsoft Azure Cognitive Services for audio generation. This text is processed in real-time and is not stored on our servers or by Microsoft beyond the processing session required to generate the audio response. When using Apple offline voices, all processing happens on your device and no text is transmitted to any server.

Note on Translation Processing: When using Translate Mode, selected text is sent to our servers and forwarded to Google Cloud Translation or Microsoft Azure Translator depending on language and availability. Text is processed in real-time and is not retained by any party beyond the translation session.

Note on URL Import: When importing a web article, the URL is sent to our servers which fetch the page and extract readable text. The URL and fetched content are processed in real-time and are not retained on our servers beyond the extraction session.

Children's Privacy

TapListen is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected personal information from a child under 13, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at taplisten.work@gmail.com.

Data Storage and Security

• Local data (documents, reading progress): Stored on your device using encrypted local storage (SwiftData). Never transmitted to external servers.
• Account data (profile, usage stats): Stored on our secure backend servers with HTTPS encryption in transit.
• Authentication tokens: Stored securely in iOS Keychain.
• We implement industry-standard security measures to protect your data, but no method of transmission or storage is 100% secure.

Data Retention

• Account data: Retained while your account is active. Deleted upon account deletion request.
• Usage statistics: Retained while your account is active.
• Crash reports: Retained for up to 90 days.
• Local documents: Remain on your device until you delete them. We have no access to these files.

Your Rights

For All Users

• Access: Request a copy of your personal data.
• Deletion: Request deletion of your account and associated data.
• Correction: Update your profile information through the App.

For EU/EEA Users (GDPR)

In addition to the above, you have the right to:

• Data portability: Receive your data in a structured, machine-readable format.
• Restrict processing: Request limitation of how we use your data.
• Object: Object to certain data processing activities.
• Withdraw consent: Withdraw consent at any time without affecting prior processing.
• Lodge a complaint: File a complaint with your local data protection authority.

Legal basis for processing: Contractual necessity (providing the service), legitimate interests (improving the App), and consent (where applicable).

For California Users (CCPA)

You have the right to:

• Know what personal information we collect and how it is used.
• Delete your personal information.
• Non-discrimination: We will not discriminate against you for exercising your rights.
• Opt-out of sale: We do not sell your personal information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy in the App
• Updating the "Last Updated" date at the top

Your continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: taplisten.work@gmail.com

This privacy policy is provided in English. In case of discrepancies with translated versions, the English version prevails.