Privacy Policy
Effective Date: April 1, 2025
Last Updated: May 22, 2026
This Privacy Policy explains how TapCanvas, operated by TradingFlow Inc. (“we,” “us,” or “our”), collects, uses, and protects information when you use our application and related services (the “Service”).
1. Information We Collect
1.1 Account and Profile Information
We collect limited personal information necessary to create and maintain your account, including:
•
Display name or username
•
Profile image (if provided)
•
Contact information used for authentication (such as an email address or phone number)
This information is considered public profile information within the Service and may be visible to other users in groups you join.
1.2 User-Generated Content
We collect and process content that you and other group members create through the Service, including:
•
Chat messages
•
Messages sent to or generated by AI models
•
Content associated with AI-generated interactive user interfaces (such as shared views, inputs, or outputs)
User-generated content is associated with your account only within the context of the Service.
2. How We Store and Protect Data
2.1 Encryption at Rest
User-generated content is stored on managed cloud infrastructure that provides encryption at rest, access controls, and other provider security measures.
•
Our infrastructure providers may apply encryption at rest to stored data
•
TapCanvas does not currently apply application-level or end-to-end encryption to user-generated content
•
TapCanvas systems and infrastructure providers may access user-generated content as needed to operate, secure, and support the Service
2.2 Server Access and Processing
Because TapCanvas does not currently provide zero-access encryption, content may be processed in readable form by our systems when needed to operate the Service.
•
We may process content to deliver messages, enable collaborative functionality, provide AI features, maintain reliability, and investigate security or support issues
•
We use access controls and operational safeguards to limit access to user-generated content
3. How We Use Information
We use the information we collect solely to:
•
Provide and operate the Service
•
Enable group communication, AI participation, and collaborative features
•
Maintain account functionality and security
•
Improve reliability, stability, and performance of the Service
We do not use personal data or user-generated content for advertising purposes.
4. Analytics and Tracking
We may use limited analytics to understand how the Service is used and to improve functionality. However:
•
We do not use analytics that rely on personally identifiable information (PII)
•
We do not track users across apps or websites owned by other companies
•
We do not use advertising identifiers
•
We do not create user profiles for advertising or marketing purposes
TapCanvas does not engage in tracking as defined by Apple’s App Tracking Transparency framework.
5. Data Sharing
We do not sell or rent personal information or user-generated content.
•
We share limited data with service providers who help us operate, host, secure, and support the Service
•
Infrastructure providers may process or access user-generated content as needed to provide the Service
We may disclose information only if required to do so by law or in response to a valid legal request.
6. Payment and Subscription Information
If you purchase a subscription or credits, the transaction is processed by the Apple App Store or Google Play. We do not receive or store your full payment card details.
•
We use RevenueCat, Inc. as our subscription management provider to validate purchases and manage entitlements. RevenueCat processes a pseudonymous app user identifier, purchase and transaction metadata, and subscription status on our behalf
•
We store your subscription tier, entitlement and billing-period status, and aggregate storage and usage counters in order to operate paid features and enforce plan limits
•
We do not use payment or subscription information for advertising
7. Data Retention
We retain information only for as long as necessary to provide the Service or as required by law. You may request deletion of your account, which will result in the removal of associated data in accordance with our retention policies.
8. Children’s Privacy
TapCanvas is not intended for use by children under the age of 13 (or the minimum age required by law in your jurisdiction). We do not knowingly collect personal information from children.
9. Your Rights
Depending on your location, you may have the right to:
•
Access your personal information
•
Correct inaccurate information
•
Request deletion of your account and associated data
You can exercise these rights by contacting us using the information below.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other appropriate means.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
TradingFlow Inc.
Email: privacy@tapcanvas.com