Privacy Policy

Effective date: 25 October 2026

This Privacy Policy explains what information Tapes (operated by Alexandre Galambas, an individual operating from Portugal, "we," "us") collects when you use the Tapes app (the "Service"), how we use it, and the choices you have. It should be read together with our Terms of Service.

1. Information we collect

1.1 Account information

When you sign in with Sign in with Apple or Google Sign-In, we receive a stable identifier for your account, the identity provider used, and — where the provider shares it — your display name. We store your chosen @handle, display name, identity provider, the age range signal described below, and the date/version of your Terms acceptance.

Where your sign-in provider shares an email address, Firebase Authentication may also hold that address for your account. Your public Tapes profile does not include an email address.

1.2 Age signal

On iOS, right after you sign in, we request your device's Declared Age Range (a range, not your exact birthdate) to confirm you meet our 13+ minimum age. If a definitive under-13 signal is returned, we block account creation, sign you out, and delete the partial account — we do not retain data from a blocked signup beyond what's needed to enforce that block. If no signal is available (older iOS, Android, or you decline to share it), we record the age range as "undeclared" and let you proceed; we do not require you to submit a birthdate.

1.3 Content you create

Your short Vlogs, which you can post at your own pace (video clips, titles, and any music selection), your Thumbnail, and your Reaction selfie are stored so we can show them to you and, where you choose to post publicly or to approved followers, to that audience.

1.4 Your face in the Reaction feature

The Reaction feature lets you add a cut-out selfie to your Vlog's Thumbnail. On iOS, the background is removed using Apple's on-device Vision framework — this segmentation happens entirely on your device; your photo or camera feed is never sent to our servers or any third party for this processing, and we never receive or store the raw image, video frame, or segmentation mask used to produce it. The only thing that leaves your device is the final composited image (your selfie with the background removed, outlined, and layered onto your Thumbnail) — which is stored the same way as any other photo or video you post, because it is a photo of you that you chose to share, not a biometric identifier we use to identify you.

1.5 Social and engagement information

We store who you follow and who follows you, your streak count, comments and likes you make, notifications, and reports you submit (reports are stored without revealing your identity to the account you reported).

1.6 Device and diagnostic information

Distributed mobile builds use Firebase Crashlytics to diagnose crashes and important technical failures. Reports include app version and build, operating system and device information, code stack traces, technical operation names, and an installation identifier generated by the SDK. We do not associate these reports with your Tapes account. Our Dart error reporter removes exception messages, file paths and personal content. Native crash reports may include system-generated diagnostic details.

We do not attach videos, photos, audio, titles, comments, emails, authentication tokens or passwords to these reports. This integration does not enable Google Analytics, session replay or screenshots.

2. How we use your information

We do not sell your personal information, and we do not use your Reaction selfie or any biometric processing to identify or track you outside the Service.

3. Who we share information with

We use Firebase (a Google Cloud product) to run Tapes' backend:

We also share information with Apple and Google as needed to operate Sign in with Apple / Google Sign-In. We do not share your personal information with other third parties for their own marketing purposes. We may disclose information if required by law, to protect the rights and safety of Tapes or its users, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

4. Data retention

We retain your account and content for as long as your account exists. If you delete your account, we delete your profile, Vlogs, media, social-graph records, and notifications as described on our Account & Data Deletion page.

When a Vlog or account is permanently deleted, Tapes does not keep a recoverable media backup in its app-media storage. The seven-day recovery feature for deleted or replaced media is disabled. Media deleted before this change keeps the recovery period that applied when it was deleted.

After permanent deletion finishes, we keep a private confirmation containing only your Tapes account ID and when deletion finished. This helps your devices verify deletion and remove that account's saved local data. It contains no Vlogs, media, email, handle, or sign-in tokens. We keep it for 90 days, then remove it at the next daily cleanup, normally within a further 24 hours. A service outage or failed cleanup can delay removal; retrying a completed deletion does not restart the 90 days.

Ordinary sign-out and the deletion grace window keep local Drafts and recovery files. After permanent deletion, a device removes those files only when it can confirm that account's deletion. If it is offline, its sign-in session has expired, or confirmation is unavailable, unconfirmed local files stay on that device. Another account's saved data is kept separate.

Crashlytics retains crash stack traces and associated installation identifiers for 90 days before Google starts removing them from live and backup systems, according to its service retention policy. These diagnostics are separate from your account and media.

5. Your rights and choices

Depending on where you live (for example under the EU/UK GDPR or U.S. state privacy laws like the CCPA/CPRA), you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Tapes provides in-app account deletion (see Account & Data Deletion); to exercise any other privacy right, email us at galambastwins@gmail.com and we will handle your request manually. You can change your account's privacy setting (public or private) at any time in Settings.

6. Children's privacy

Tapes is not directed at children under 13, and we block account creation when we receive a definitive signal that a user is under 13 (see Section 1.2). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact us at galambastwins@gmail.com so we can investigate and, if appropriate, delete the account.

7. Security

We use industry-standard measures — including Firebase's authentication and access-control rules — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will update the effective date above and, for material changes, provide notice in the App.

9. Contact us

Questions about this Privacy Policy or your data? Contact us at galambastwins@gmail.com or visit our Support page.