Privacy Policy

1. Who we are

The Service is operated by Tapju. For any privacy questions you can reach us at support@tapju.ai.

2. Scope of this Policy

This Policy applies to personal data we process about visitors, registered users, and people who contact us. It does not apply to third-party websites (such as the e-commerce stores whose product pages we analyse), which have their own privacy policies. We encourage you to review those policies before interacting with those sites.

3. Information we collect

3.1 Information you provide

• Account information: when you sign in with Google, we receive your name, email address, Google/Firebase account identifier, and profile image when one is supplied by Google. We also create an internal profile and avatar identifier for your Tapju account.
• Product requests: the product links you paste and the search terms you enter so we can perform an analysis.
• Activity you create: saved favourites, price alerts you set, your analysis history, and any ratings or feedback you submit.
• Communications: messages you send us for support or enquiries.

3.2 Information collected automatically

• Device and connection data: IP address, browser or app user agent, operating-system version, device type, app version, Firebase SDK information, and language settings. Tapju hashes IP addresses in analytics records; our authentication, security, abuse-prevention, and infrastructure providers may process the source IP address for limited operational purposes.
• Usage and analytics data: pages viewed, features used, actions taken, referring URLs, and campaign parameters (UTM). This is tied to a session so we can understand and improve how the Service is used.
• Approximate location: derived from your IP address (typically country, region, and city) to provide relevant results and analytics. We do not collect precise GPS location.
• Device and notification identifiers: Firebase installation identifiers and, if you enable push notifications, an FCM or APNs device token together with basic device-platform information so we can deliver and troubleshoot price-drop and service alerts.

3.3 Information from third parties

When you sign in with Google, we receive basic profile information (name, email, and identifier) from Google in accordance with the permissions you grant. We also obtain publicly available product information (such as prices, titles, images, specifications, ratings, and review summaries) from third-party e-commerce websites in order to generate your analysis; this product data is not personal data about you.

3.4 Android mobile app and SDK data

The Tapju Android app uses Google Sign-In, Firebase Authentication, and Firebase Cloud Messaging. These SDKs transmit information off your device to provide their functions. The information may include:

• Personal information: your name, email address, profile image, and Google/Firebase user identifier when you sign in.
• App activity: product links and search terms you submit, product analyses you open, saved products, analysis history, price-alert settings, ratings, feedback, and interactions with Tapju features.
• App and device information: app version, operating-system version, device model, brand and form factor, Firebase Android App ID, Firebase SDK versions, and related user-agent information.
• Device or other identifiers: Firebase installation identifiers, authentication tokens, and an FCM/APNs push token when notifications are enabled.
• Connection and approximate location information: IP address and the country, region, or city inferred from it. Tapju does not request or collect precise GPS location.

Account identity and authentication data are required when you choose to use signed-in account features. Favourites, feedback, price alerts, and push notifications are optional. Denying notification permission does not prevent normal product analysis. Tapju does not collect contacts, SMS or call data, health data, payment-card details, or user photos, videos, or audio through the Android app.

4. How we use your information

• To provide, operate, and maintain the Service, including analysing products you submit.
• To create and manage your account and authenticate you.
• To power features such as favourites, analysis history, and price alerts.
• To send you transactional and notification messages (e.g. price-drop alerts, account and security notices) by email and/or push notification.
• To understand usage, measure performance, debug, and improve the Service.
• To detect, prevent, and address fraud, abuse, and security incidents.
• To comply with applicable laws and enforce our Terms of Use.

5. Automated processing and AI

Product scores, summaries, pros and cons, sentiment, and recommendations are generated using automated systems and artificial intelligence based on publicly available data. These outputs are informational, may contain inaccuracies or become outdated, and should not be relied upon as the sole basis for a purchase decision. We do not use your personal data to make decisions that produce legal or similarly significant effects about you.

6. Cookies and similar technologies

We use a small number of cookies and similar technologies that are necessary to keep you signed in (for example a session cookie), remember your preferences, and measure usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in or using certain features.

7. How we share your information

We do not sell your personal data. We share information only as described below:

• Service providers (processors): we use trusted third parties to run the Service, including cloud hosting and database providers, Google Sign-In and Firebase for authentication and messaging, email delivery providers, analytics providers, and AI, search, and data-retrieval providers. These providers may receive account identifiers, device/app metadata, notification tokens, product queries, or product content only as needed to provide the relevant service. They process data on our instructions and are bound by confidentiality and data-protection obligations.
• Affiliate partners: when you click a link to a partner store, that store and our affiliate network may receive standard click information (see “Affiliate links” below).
• Legal and safety: where required by law, regulation, legal process, or a governmental request, or to protect the rights, property, or safety of Tapju, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

8. Affiliate links

Tapju participates in affiliate programmes. Some links to e-commerce stores contain affiliate tracking parameters, which means we may earn a commission if you make a purchase after clicking them, at no additional cost to you. Affiliate participation does not influence the analysis, scores, or ordering we present.

9. Third-party websites and content

The Service references and links to third-party e-commerce websites. We are not responsible for the content, accuracy, availability, pricing, or privacy practices of those websites. Any transaction you make is solely between you and the relevant store.

10. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter only as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Aggregated or de-identified data that no longer identifies you may be retained for longer. You may request deletion of your account and associated data as described in “Your rights”.

Device notification tokens are retained while notifications are enabled and are removed when they become invalid, when you unregister the device, or when your account is deleted. Raw usage and diagnostic records are retained for a limited operational period before being deleted or aggregated. Product analysis content may be retained separately as a de-identified product record that is not linked to your account.

11. How we protect your information

We implement reasonable technical and organisational safeguards designed to protect your information, including encryption of sensitive configuration and API secrets, hashed IP addresses, access controls, and use of reputable infrastructure providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. International data transfers

We and our service providers may process and store information on servers located outside India. Where we transfer personal data across borders, we take steps to ensure it is protected consistently with this Policy and applicable law.

13. Your rights

Subject to applicable law, including the Digital Personal Data Protection Act, 2023, you have the right to:

• access the personal data we hold about you and request a summary of its processing;
• request correction or updating of inaccurate or incomplete data;
• request erasure of your personal data;
• withdraw consent where processing is based on consent;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance with us regarding our processing of your data.

To exercise these rights, email support@tapju.ai. We may need to verify your identity before acting on a request. You can also manage much of your data directly from your account settings or permanently delete your account through the app or the Tapju account-deletion page.

14. Children’s privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

15. Grievance redressal

In accordance with applicable Indian law, you may contact us for any complaints or concerns regarding your personal data by emailing support@tapju.ai. We aim to acknowledge and resolve grievances within the timelines required by law.

16. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

17. Contact us

If you have questions about this Policy or our data practices, contact us at support@tapju.ai.