Tapiko Privacy Policy
This policy describes the personal data processed by the Tapiko app
(identifier com.lextiks.tapiko) for iPhone and iPad.
1. Who is responsible for the data
The controller of personal data (in GDPR terms) is:
Artem Romanchenko, an individual, Ukraine.
"Bridges Community" is the name of the project under which the apps are published. There is no separate legal entity behind it: all rights and obligations under these documents rest with the individual named above.
Contact for any data question: bridges@bridges.net.ua.
2. The essentials in three sentences
Tapiko stores your library (collections, items, covers) and your habit tracker so that they are the same on all your devices; other people only see your name with an avatar and what you have shared with friends yourself. There are no ads, no advertising identifiers, no behavioral analytics and no third-party trackers, and your data is never sold. The main storage is located in the European Union.
3. What data is processed
3.1. Account and profile
Sign-in is only through Sign in with Apple. The app never sees or receives your Apple ID password.
| Data | Why | Legal basis |
|---|---|---|
| Internal account ID (UID) | to tell your library apart from others | performance of contract |
| Email address from Apple | sign-in and account communication; stored in Firebase Authentication and on your device, never in the profile other people see | performance of contract |
| Name (from your Apple ID or entered by you) | shown to friends and in shared challenges | performance of contract |
| Profile avatar, icon and color, if you chose them | your circle in friends' lists; the avatar is reduced to 300 points, the original is not kept | performance of contract |
| Account code - six letters and digits created by the app | lets another person find you and send a friend request | performance of contract |
| Your friends, friend requests and blocked people | to share habits and challenges only with people you added and to keep out people you blocked | performance of contract |
If you chose "Hide My Email" when signing in, the app only receives Apple's private relay address.
3.2. Your library and tracker
- collections: names, icons, colors, tile pictures and field settings;
- items: titles and everything you entered in their fields (ratings, statuses, dates, tags, notes, links, places and so on);
- item covers and photos in a "Gallery" field - the ones you picked or that autofill brought in (see 3.4), stored as reduced copies;
- tracker habits: name, goal, schedule, archive, and practice records - how many minutes or units on which day;
- challenges you joined and your progress in them;
- names and photos you assigned to friends for yourself: only you see them.
This content belongs to you. It is stored on the server so that it is the same on all your devices, and it is not shown to other people except as described in section 4.
3.3. Health and Photos (only if you turn them on)
Both sources are off by default and are turned on separately on each device in Settings → "Tracker settings".
- Apple Health. The app only reads daily totals: steps, floors climbed and stand hours. It never writes to Health. These numbers become practice records of the habit you linked to Health yourself and sync between your devices like the rest of the tracker.
- Photos. The app counts how many photos you took each day (screenshots excluded). Only capture dates are read; the photos themselves are never opened, copied or sent anywhere.
Health data is not used for advertising, marketing or profiling, is never sold and is not shared with third parties. Friends can see the daily totals only of a habit you shared with them yourself (section 4).
3.4. Autofill by title (only if you turn it on)
Searching films, series, games and books by title is off by default; when you create your first new item, the app asks whether to turn it on. When it is on, the title you type is sent:
| What we look up | Where | How |
|---|---|---|
| films and series | TMDB (The Movie Database) | through our server (Cloud Functions): TMDB does not see your IP address |
| games - PlayStation and Nintendo exclusives | IGDB (Twitch) | through our server |
| PC games | the Steam store (Valve) | directly from the device |
| books | Wikidata and Wikipedia (Wikimedia), Google Books, Open Library (Internet Archive) | directly from the device |
Services contacted directly see the device's IP address and the typed title, as with any web search; together with the chosen result they return a cover image that the app stores in the item. The app sends them no other data about you.
3.5. Reports and blocking
If you report a person, the app stores who reported, whom, the reason and the name of that profile at the time of the report. Only the developer sees a report: it arrives by email (through Google Cloud Monitoring) and in the database console. If you block someone, a "who blocked whom" record is kept so that this person cannot send you a request.
3.6. Technical data
| Data | Why |
|---|---|
| Creation and modification timestamps | syncing between devices |
| App authenticity check (Firebase App Check with Apple App Attest) | so that only genuine copies of Tapiko can use the server; contains no data about you |
| Settings on the device itself (language, haptics, first day of week, etc.) | convenience; they never leave the device |
| Crash reports, if you allowed sharing analytics with developers in iPhone settings | fixing bugs; collected by Apple, the app has no tools of its own for this |
3.7. What the app does NOT do
- It does not collect location (a "Place" field is just text you typed).
- It has no access to contacts, calls, messages or the microphone.
- It does not open the camera or the photo library on its own: only when you choose a cover or a photo, and it receives only the pictures you pick. Full photo library access is needed only for the photo count in section 3.3.
- It does not use the advertising identifier (IDFA), ad networks, Firebase Analytics, Crashlytics or any other analytics.
- It does not track you across other apps and websites.
- It does not sell data or pass it to data brokers.
4. What other people can see
- Profile. Your name, avatar, profile icon and color can be seen by another signed-in Tapiko user who knows your account code, has your invitation or takes part in a challenge with you. Nobody can find you by name, email or phone number, and there is no list of all users.
- Friends. A person becomes your friend when you accept their request or open their invitation. Friends see only the habits you shared on the habit screen ("Share" - with all friends or chosen ones): name, goal and daily totals for the last year. You can stop sharing at any time.
- Challenges. Challenge members see its name, goal and your daily progress in it since the challenge began.
- Your library (collections, items, covers, photos) is never shown to anyone. You can share an item only yourself - as a picture through the "Share" menu.
A blocked person cannot send you a request; to hide your profile from someone who already knows your code, delete your account.
5. Where the data is stored
The app runs on Google Firebase / Google Cloud:
| Service | What it does | Where |
|---|---|---|
| Firebase Authentication | sign-in with Apple | Google infrastructure |
| Cloud Firestore | library, tracker, profiles, friends, challenges | region europe-central2 (Warsaw, European Union) |
| Cloud Functions | TMDB / IGDB search, email about a new report | region europe-central2 (Warsaw, European Union) |
| Firebase App Check | app authenticity check | Google infrastructure |
| Cloud Logging and Monitoring | the service record of a report and the email to the developer; records are kept up to 30 days | Google infrastructure |
The main database is located in the European Union. Service operations (sign-in, app checks, logs) may be processed in Google's global infrastructure outside the EU. Google LLC and Google Ireland Limited act as processors under the EU Standard Contractual Clauses.
Data between the app and the server is always encrypted in transit (TLS).
6. How long data is kept
- Account, profile, library and tracker - for as long as your account exists.
- Daily database backups - up to 90 days, then overwritten.
- Reports - as long as needed to handle them and to recognize repeated abuse.
- Data on the device stays until you delete the account or the app.
7. Deleting your account and data
You delete your account in the app: Settings → "Delete account…". This removes your profile, code, friends, shared habits, challenge participation, challenges you created, the whole library with its pictures and the tracker - on the server and on the device. Details and the email option are on the Account and data deletion page.
8. A copy of your data
Settings → "Export data…" creates a ZIP archive with everything you entered: a CSV table for each collection, a full JSON copy (collections, items, habits with their history, friends) and all covers and photos. The archive is created on the device and goes nowhere until you share it yourself.
9. Your rights
Under the Law of Ukraine "On Personal Data Protection" and, for users in the EU, under the GDPR, you have the right:
- of access - to learn what data of yours is processed and get a copy (the fastest way is the export, section 8);
- to rectification of inaccurate data;
- to erasure ("the right to be forgotten");
- to restriction of processing;
- to data portability - to receive your data in a machine-readable format (JSON and CSV);
- to object to processing;
- to lodge a complaint with a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, your local data protection authority.
To exercise any right, write to bridges@bridges.net.ua. I will reply within 30 days.
10. Children
The app is not intended for anyone under 13, or, in countries where the age of consent for processing personal data is higher (in the EU, 13 to 16 depending on the country), for anyone under that age. Data of such users is not knowingly collected. If you are a parent and believe your child created an account without your consent, write to me and the account will be deleted.
11. Security
- Connections are encrypted (TLS).
- Each database document can be read and changed only by the people it concerns: this is enforced by access rules at the database level, not just by checks in the app.
- Only genuine copies of the app can use the server (App Check).
- Your Apple ID password is unknown to the app.
No system is perfectly secure. If you find a vulnerability, please write to bridges@bridges.net.ua.
12. Changes to this policy
The updated version is published on this page with a new date at the top. Material changes (new categories of data, new recipients) will be announced in the app.
13. Governing law
The law of Ukraine; for users in the European Union, the GDPR also applies.