This Privacy Policy describes how the Tiki-Tapa: Tap Soccer 2026 mobile
application (the "App") collects, uses, and shares information when you play.
By using the App, you agree to the practices described here.
We try to collect as little as we can — there's no email/password signup, no advertising profile we
build, and no personal data sold to third parties. This document explains exactly what we do collect,
why, and your choices.
1. What we collect
1.1 Account identifiers (required to play)
- Anonymous user ID issued by Firebase Authentication the first time you launch.
This is a random string with no tie to your real identity unless you sign in with Apple (see below).
- Sign in with Apple identifier (optional, only if you link your account). Apple
gives us a pseudonymous user identifier; we never receive your real Apple email unless you choose
to share it. We use this only to recover your profile after a reinstall.
1.2 Profile information (you set this yourself)
- Username (lowercase handle), display name, favorite team. You can change or clear these at any
time in the Account screen.
1.3 Gameplay data
- Match results: scores, opponents, formations, timestamps, country picks, tournament progress.
- Multiplayer ephemeral data: room code, real-time positions and actions during an active
head-to-head match. This is cleared after the match ends.
- Friends: a list of other users you've added.
1.4 Device identifier for advertising (only with your consent)
- If you tap Allow on Apple's App Tracking Transparency prompt, we share Apple's
IDFA (a per-device advertising ID, resettable from iOS Settings) with Google AdMob so ads shown
to you are more relevant.
- If you tap Ask App Not to Track, we don't share the IDFA. You still see
ads — they're just less targeted.
1.5 In-app purchases
- Purchases (Remove Ads, Pro Pass, individual or bundled team kits) are processed entirely by
Apple's StoreKit. We see a receipt that tells us which product you bought; we never
see your credit card or Apple Pay details.
1.6 Crash and diagnostic data
- We do not currently run a third-party crash reporter. If you opt into iOS-level analytics
sharing in Settings, Apple sends us anonymized crash reports through Xcode Organizer; we use
these only to fix bugs.
We do not collect: real name, email address (unless you choose to share via
Sign in with Apple), phone number, precise location, contacts, photos, microphone, camera,
health data, or financial details.
2. Why we collect it
| Data | Purpose |
|---|
| Anonymous user ID | Save your match history and profile across launches |
| Sign in with Apple ID | Restore your account after reinstall or on a new device |
| Profile (username etc.) | Display you to opponents in multiplayer; show on leaderboards |
| Match results | Show your record, power the Match of the Day, drive tournament progression, populate global leaderboards |
| Multiplayer real-time state | Sync the active match between players (deleted when the match ends) |
| Friends list | Let you invite specific people to a match |
| IDFA (consented only) | Show more relevant ads via Google AdMob |
| IAP receipts | Unlock the content you bought; restore purchases on a new device |
3. Who we share it with
We do not sell your personal information. We share limited data with the following service providers,
and only to operate the App:
- Google Firebase (Authentication, Realtime Database). Stores your profile,
friends list, match history, and multiplayer room state.
Google's privacy policy.
- Google AdMob (advertising). Receives the IDFA only if you allowed tracking;
otherwise receives no identifier. Used to show banner, interstitial, and rewarded ads.
AdMob & data.
- Google User Messaging Platform (consent management for GDPR users). Records
your ad-consent choices.
- Apple (Sign in with Apple, App Store, StoreKit, App Tracking Transparency).
Processes authentication and purchases; you interact with Apple directly.
Apple's privacy policy.
Other multiplayer users see your username, display name, country pick, and live match actions
while you are in a match together. They never see your account identifiers.
We may disclose data if compelled by law (subpoena, court order, etc.), but we'll push back where appropriate.
4. How long we keep it
- Active profile + match history: kept as long as your account exists.
- Multiplayer room state: deleted automatically minutes after the match ends.
- IAP receipts: kept for the life of your account so we can restore purchases.
- Account deletion: if you delete your account from the Account screen, your
profile, friends list, and match history are permanently removed within 30 days. Anonymous
identifiers tied only to non-personal aggregates may persist in backups for a short additional period.
5. Your choices and rights
- Stop ad tracking: iOS Settings → Privacy & Security → Tracking → toggle off
for Tiki-Tapa.
- Change or clear profile data: Account screen inside the App.
- Restore purchases: Shop → Restore Purchases.
- Delete your account: Account screen → Delete Account. This is permanent.
- Access or export your data: email us at the address above; we'll respond
within 30 days.
- EU/UK users have the rights under GDPR (access, rectification, erasure,
restriction, portability, objection); California users have rights under CCPA
(know, delete, opt out of sale — we do not sell). Exercise any of these by emailing us.
6. Children's privacy
Tiki-Tapa is intended for users 13 and older. We do not knowingly collect personal
information from children under 13. If you believe we have, contact us and we will delete it.
7. Security
We use industry-standard transport encryption (HTTPS / TLS) for all data in transit and rely on
Google Firebase's at-rest encryption for stored data. No system is perfectly secure; if we become
aware of a breach affecting your data, we'll notify you and the relevant authorities as required
by law.
8. International transfers
Your data is processed on Google Cloud infrastructure, which may be located in the United States
or other regions. By using the App you consent to the transfer of your data to these locations.
9. Changes to this policy
We may update this policy from time to time. When we make material changes, we'll update the
"Effective date" above and, where appropriate, notify you in-app on next launch.
10. Contact us
Privacy questions, data requests, or anything else:
contact@streetcatcreative.org