TuneTap Privacy Policy
This policy explains what the game TuneTap: Beat Tiles & Piano ("TuneTap", "the app") does with information. The game is made by Zaheer Ahmad, an individual developer ("I", "me", "my"). There is no company behind it. You can reach me at zaheer.ahmad590@gmail.com.
1. The short version
- TuneTap does not ask for your name, email address, phone number, location, photos or contacts. There is no account to create.
- The nickname on the leaderboard comes from lists of words or from suggestions. Please never use your real name.
- TuneTap does not use the Android advertising ID. Ads in TuneTap are never personalised.
- You can delete your data at any time, on the phone and on my servers (see section 9).
- Leaderboard data on my servers is deleted automatically about two months after the week or month it belongs to has ended.
2. Children
TuneTap has three profiles: Little player (ages 4 to 7), Big kid (ages 8 to 12) and Grown-up (13 and over). The first screen simply asks who is playing; I do not check anyone's age. Because children use the game, every profile is treated with children in mind:
- Ads: every ad request is marked as child-directed and non-personalised, with the content rating limited to G (suitable for all audiences). No advertising ID is read, and ads are not used to follow anyone across apps.
- No ads during play: no ad is shown while a song is playing.
- Grown-up check: actions meant for adults are behind a short grown-up question. This covers choosing the Grown-up profile, sharing, the Parents page and links that leave the app.
- Usage statistics: none are collected on the Little player profile, ever. See section 3 for the other profiles.
- I do not knowingly collect personal information from children. If you believe a child has given me personal information, write to me and I will delete it.
3. What is collected, and why
| What | Why | Where it is kept | For how long |
|---|---|---|---|
| Nickname, profile (Little player, Big kid or Grown-up), best scores, coins, settings, song progress | To play the game | On your device only | Until you delete the data in the app or uninstall it |
| An anonymous ID created by Firebase Authentication. It has no login and is not linked to your name or email | So the app can send scores to the leaderboard | Google Firebase | Until you ask for deletion (see section 9), otherwise removed with the leaderboard data |
| Leaderboard entries: nickname, profile, weekly and monthly points, number of rounds, time of the last score | To show leaderboards | Google Cloud Firestore (region me-central1, Doha, Qatar) | Deleted automatically about two months after the week or month ends; sooner if you delete it |
| Crash reports and basic device details (phone model, Android version, app version) | To find and fix crashes | Firebase Crashlytics | Kept by Google for 90 days |
| Anonymous usage statistics (which screens and buttons are used) | To improve the game | Firebase Analytics | For the period set in Firebase, at most 14 months |
| Ad delivery data | To show ads, which pay for the game | Google AdMob | Handled by Google (see section 5) |
Usage statistics and crash reports, by profile
- Little player: never measured, and no crash reports are sent.
- Big kid and Grown-up, outside the European Economic Area (EEA) and the United Kingdom: anonymous usage statistics and crash reports are collected. They contain no name, no email, no precise location and no advertising ID.
- In the EEA and the UK: usage statistics and crash reports are collected only for a Grown-up profile whose user agreed in Google's consent form. Children's profiles are not measured there, even if a grown-up has said yes. In these regions the Parents page has a "Privacy choices" row where the answer can be changed at any time.
What is not collected
I do not collect your name, email address, phone number, precise or approximate location, contacts, photos, camera images or microphone recordings. I do not sell personal information and I do not build profiles of people.
If you add a song of your own, it stays on your device. It is never uploaded.
Practice players on the leaderboard
So that a new player does not meet an empty leaderboard, TuneTap adds "practice players" to the lists it shows. They are made up by the app. They are not real people, no real person's data is used for them, and they are never stored on my servers. Your own score and rank are always real.
Sharing a score
If a grown-up shares a score card, the app creates a picture and opens the Android share sheet. What happens next depends on the app you choose to share with. TuneTap itself does not post anything anywhere.
4. How long data is kept
- Old data is not kept. Leaderboard data (nickname, points, rounds and the related entries) is deleted automatically about two months after the week or month it belongs to has ended. The database does this by itself, not by hand. The records used to check scores and daily limits are deleted on the same schedule.
- Sooner on request. You can delete everything earlier from the app (see section 9).
- On your phone, data stays until you delete it or uninstall the app.
- Crash reports are kept by Google Firebase for 90 days.
5. Ads
TuneTap shows ads through Google AdMob. They appear on all three profiles, in these forms:
- a banner on the song list, the leaderboard, the score screen or the win screen (all profiles);
- a video you choose to watch to earn coins, double your coins or unlock a song for a while (all profiles, with a daily limit);
- an occasional full-screen ad when you leave the score or win screen (Big kid and Grown-up only, never Little player).
Ads are never shown while a song is playing, at the first launch screens, in the grown-up check or on the Parents page. Every ad request is child-directed, non-personalised and capped at rating G. Google's own privacy policy is at policies.google.com/privacy.
6. Services TuneTap uses
- Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Remote Config, Crashlytics, Analytics and App Check). firebase.google.com/support/privacy
- Google AdMob and Google Play services for ads and consent. policies.google.com/privacy
- Google Play Integrity (through App Check), to check that the app talking to my servers is the genuine TuneTap.
These providers process information for me as described in this policy. Google may process data in countries other than yours and uses recognised safeguards when it does.
7. Legal grounds (EEA and UK)
Where the law of the EEA or the UK applies: providing the game and the leaderboards is my legitimate interest in giving you the service you asked for. Crash reports are my legitimate interest in keeping the app working. Usage statistics and any ad-related storage on your device rely on your consent, which you can withdraw at any time under Parents > Privacy choices.
8. Your rights
Depending on where you live (for example under the GDPR, the UK GDPR, the California CCPA/CPRA or the US COPPA), you may have the right to ask what I hold about you, to have it corrected or deleted, to limit or object to its use, to withdraw consent, and to complain to your data protection authority. A parent or guardian can make these requests for a child. Because TuneTap holds no name or email, I may ask you for the nickname, the profile and the approximate dates you played, so that I can find the right entries. I will answer within 30 days.
9. Deleting your data
- In the app: open the Parents page (it asks a grown-up question first) and choose "Delete this device's data". This removes your nickname, coins, scores and settings from the phone and asks my server to delete your leaderboard entries and your anonymous ID.
- By email: write to zaheer.ahmad590@gmail.com with the subject "Delete TuneTap data". The steps are on the page "Delete your TuneTap data".
- Automatically: leaderboard data is removed by itself about two months after its week or month ends.
10. Security
Information is encrypted while it travels between the app and the servers. Scores are written to the leaderboard only through a server function that checks them, and the app cannot write to the database directly. No system is perfectly secure, but I work to keep this one safe.
11. Changes to this policy
If the policy changes, the new version will be posted on this page with a new date. For a significant change I will also show a notice in the app.
12. Contact
TuneTap is made by Zaheer Ahmad, an individual developer. For anything about privacy, the game or your data, write to zaheer.ahmad590@gmail.com.