Privacy Policy
The Tapping Solution, LLC · Effective November 14, 2025
This Privacy Policy covers The Tapping Solution App on iOS and Android and the Web App. Our Terms of Use are a separate document. Previous versions of both are available here.
1) What we collect
- Account and contact info you provide (e.g., email).
- App usage events (non‑health).
- Health data: Mindfulness only, via Health Connect (Android) and HealthKit (iOS), if you grant permission.
- Device data (e.g., IP, OS) for security and functionality.
2) Sources
- You (in‑app inputs).
- Your device frameworks: Health Connect and Apple Health (only if you grant access).
- Our app telemetry (non‑health).
3) Why we process data
- Provide and improve features; personalize in‑app experience.
- Show your mindfulness history and streaks; write completed sessions back to your device’s health store.
- Support, security, and fraud prevention.
- Compliance with legal obligations.
4) What we do not do
- We do not use Health Connect/HealthKit data for advertising, marketing, or profiling.
- We do not sell Health Connect/HealthKit data.
- We do not share Health Connect/HealthKit data with ad tech or data brokers.
5) Retention
- Health Connect/HealthKit data: processed on‑device; no server copies today.
- If optional server sync is introduced later and you opt in: we retain synced mindfulness history until you delete it or your account; after account deletion we will delete within 30 days.
6) Your choices
- You can use the app without connecting to Health Connect/HealthKit.
- Revoke Health Connect access anytime in the Health Connect app or Android settings.
- Revoke HealthKit access anytime in Apple Health > Privacy > Apps > The Tapping Solution App.
- Delete Health Connect records in Health Connect; delete HealthKit records in Apple Health.
- If optional server sync is enabled later, you will be able to download and delete synced copies from in‑app settings or by contacting contact@thetappingsolution.com.
Analytics and tracking for the Web App may involve cookie-based data, which does not include or reveal any Health Connect or HealthKit information.
7) Ads, analytics, and tracking
- Health Connect/HealthKit data is isolated from advertising and third‑party trackers, is not used for ads or profiling, and is not shared with ad tech.
- If we use analytics (e.g., Amplitude, Firebase), we exclude Health Connect/HealthKit payloads and event parameters that would reveal mindfulness activity.
8) Children
The App, including the Web App, is intended for adults. We do not knowingly collect personal information from children under 13.
Android Health Connect (Mindfulness only)
Data and purpose
- Accessed data: Mindfulness session (MindfulnessRecord), read and write.
-
Purposes:
- Read: show your mindfulness history and streaks in the app.
- Write: record a completed session to Health Connect when you finish an in‑app session.
Processing limits
- Not used for ads, marketing, or profiling.
- Not sold.
- Not shared with ad tech or data brokers.
User controls
- Grant/revoke in the Health Connect app: Health Connect > App permissions > The Tapping Solution App.
- Delete records in Health Connect: Health Connect > Data & access > Mindfulness > Manage data.
- If access is denied or revoked, the app still works; history and write‑backs with Health Connect are disabled. You can still see in‑app session completions.
Data handling and retention
- Processed on device. We do not send Health Connect mindfulness data to our servers today.
- If we later add optional server sync, it will be opt‑in; you will be able to delete synced copies in‑app or by emailing contact@thetappingsolution.com. We will delete synced copies within 30 days after account deletion or opt‑out.
Reviewer note (Google Play)
Health apps declaration: We declare the single health data type “Mindfulness session (read/write)” with purposes limited to in‑app history/streaks and writing completed sessions back. See Google’s Health apps declaration and Data safety program requirements.
Apple HealthKit (Mindful Minutes only)
Data and purpose
- Accessed data: Mindfulness (HKCategoryTypeIdentifierMindfulSession), read and write.
-
Purposes:
- Read: show your mindfulness history and streaks in the app.
- Write: record a completed session to Apple Health when you finish an in‑app session.
Apple commitments
- We do not use HealthKit data for advertising, marketing, or other use‑based data mining.
- We do not share HealthKit data with third parties without your explicit, informed consent.
- We do not write inaccurate HealthKit data.
- We do not store personal HealthKit data in iCloud.
Consent and control
- Access is opt‑in via the system Health authorization sheet.
- Revoke any time in Apple Health > Profile > Privacy > Apps > The Tapping Solution App.
- Delete records in the Health app: Browse > Mindfulness > Show All Data > Edit.
Deletion and retention
- Processed on device; we do not copy HealthKit mindfulness data to our servers today.
- If optional server sync is introduced and you opt in, you can delete synced copies in‑app or by contacting contact@thetappingsolution.com; we will delete within 30 days after account deletion or opt‑out.
Reviewer note (App Store)
HealthKit scope is limited to Mindful Minutes read/write for user‑visible features (history/streaks; write‑backs). HealthKit data is never used for advertising or shared without explicit consent and is not stored in iCloud.
Consumer Health Data (CHD) Notice (WA/NV/CT)
Categories collected
Mindfulness activity (mindfulness session start/end/duration), when you connect Health Connect or HealthKit.
Sources
You and your device frameworks (Health Connect; Apple Health).
Purposes
- Provide in‑app features (history/streaks) and write completed sessions back to your device health store.
- Non‑health analytics may be used to improve app performance, excluding Health Connect/HealthKit payloads.
Disclosures
- No sale; no sharing for cross‑context behavioral advertising.
- We may use processors (e.g., cloud hosting, analytics) bound by contract to process non‑health data on our behalf. We do not send Health Connect/HealthKit data to these processors today.
Security
See Security & Incident Response.
Retention
No server copies today. If optional sync is added and you opt in, retention lasts until you delete or request deletion; we delete within 30 days after account deletion or opt‑out.
Your rights (where applicable)
Access, delete, and appeal. Contact contact@thetappingsolution.com. We may request information to verify your identity.
Consent
We obtain opt‑in consent through the platform authorization sheet (Health Connect/HealthKit). We will obtain additional consent if required by law before new uses. We do not geofence health facilities.
Security & Incident Response
- Administrative, technical, and organizational controls including least‑privilege access, encryption in transit, secure key management, and vendor due diligence.
- If we become aware of a security incident affecting your personal information, we will notify you and regulators as required by law using in‑app notices and/or email.
International Transfers & Your Rights
- If personal data is transferred internationally, we rely on the EU‑US Data Privacy Framework (DPF), UK Extension, Swiss‑US DPF, or Standard Contractual Clauses (SCCs), as applicable.
- Depending on your location, you may have rights to access, correct, delete, or object to processing. Contact contact@thetappingsolution.com.
Data Map (appendix)
| Category | Source | Purpose | Sharing | Retention | Deletion path |
|---|---|---|---|---|---|
| Account & contact (email) | You | Account, support | Service providers (email/helpdesk) | While account active and to meet legal obligations | Email contact@thetappingsolution.com |
| Subscription status | App store | Access control | App stores/processors | While subscription active | Via Apple/Google account |
| App usage (non‑health) | App telemetry | Improve app; diagnostics | Analytics processors (no health payloads) | Varies by tool settings | Email contact@thetappingsolution.com |
| Push token | Device | Notifications | Push provider | While enabled | Disable in settings; email contact@thetappingsolution.com |
| Mindfulness activity (Health Connect) | Health Connect | History/streaks; write‑backs | None (no ad tech; no sale) | On‑device only | Revoke/delete in Health Connect |
| Mindfulness activity (HealthKit) | Apple Health | History/streaks; write‑backs | None (no ad tech; no sale) | On‑device only | Revoke/delete in Apple Health |
| Optional synced mindfulness (future, opt‑in) | App (if you opt in) | Backup/sync across devices | Cloud processor (no ad tech) | Until you delete; 30 days after account deletion/opt‑out | In‑app delete or contact@thetappingsolution.com |
Cookies Policy
We use cookies and similar technologies on our website and Web App to support functionality, security, and performance. Cookies also help us understand usage patterns and improve the user experience.
We use our own Consent Management Platform to display cookie banners, record consent, and manage opt-ins or opt-outs for non-essential cookies in compliance with GDPR, CCPA, and similar laws. The cookie settings panel always reflects the most current information about the cookies we use.
Types of cookies:
- Functional cookies: Necessary for the App to operate and cannot be disabled.
- Optional cookies: May include analytics or marketing-related cookies, and can be opted out of through the cookie banner or the Privacy / Cookie Management settings.
- Google Analytics cookies: Used to understand aggregate usage trends and may send limited data to Google. You can opt out through the cookie banner or browser settings.
You can manage or withdraw consent at any time via the “Privacy/Cookie Settings” link on our Web App. Disabling optional cookies may affect certain non-essential features.
Contact
Questions or requests:
contact@thetappingsolution.com
The Tapping Solution, LLC