01About this policy
TapToFix, also displayed as OneTapFix, provides AI-assisted grammar correction, translation, rewriting, and other text-transformation features. In this Privacy Policy, “TapToFix,” “we,” “us,” and “our” refer to the provider of these services at taptofix.ai.
This policy explains how we collect, use, disclose, protect, and retain personal information when you visit our website, use our desktop application or account services, purchase a subscription, or contact us. Together, these are the “Services.” We are responsible for our handling of personal information described in this policy.
For privacy questions or requests concerning your personal information, contact [email protected]. This policy provides information about our practices; it is not a request for blanket consent to all processing. Where separate consent is required, we request it for the relevant activity.
02Information we process
The information involved depends on the features you use and the information you choose to provide.
| Category | What it includes |
|---|---|
| Account information | Basic identity information provided through Google sign-in, such as your name, email address, profile picture where available, and Google account identifier; account identifiers and authentication or session information used by TapToFix. |
| Text and generated results | Text you select or submit for a writing action, associated instructions and settings, and the result generated for you. We refer to these collectively as “User Content.” User Content may contain personal information about you or someone else. |
| Preferences and usage | Language and shortcut settings, subscription status, usage allowances, request counts, and information needed to apply your settings and operate the features you use. |
| Billing information | When you purchase a subscription, information needed to administer that purchase, such as billing contact details, plan, payment status, transaction references, and subscription history. Payment information submitted to a checkout provider is also subject to that provider’s privacy notice. |
| Support messages | Your contact details, questions, feedback, and any attachments or text examples you choose to send us. |
| Technical information | Information generated when you connect to the Services, which may include IP address, browser or operating-system details, app version, timestamps, error information, and authentication or security events. |
We do not need passwords, full payment-card details, identification documents, or sensitive personal information in the text you submit for correction or translation. Do not submit another person’s confidential or personal information unless you are authorized to do so.
03How we use information
We use information to authenticate you and maintain your account; perform the writing actions you request; apply preferences and usage limits; administer subscriptions; respond to support requests; communicate about your account or the Services; diagnose technical problems; prevent fraud and misuse; protect users and the Services; and meet applicable legal obligations.
Where data protection law requires a legal basis, we rely on performance of our contract with you for requested services and account administration; legitimate interests for proportionate security, abuse prevention, and operational reliability, subject to your rights and interests; legal obligations for required records and lawful requests; and consent where required for an optional activity.
Information needed for sign-in, payment, or a writing request is necessary to provide that particular feature. Declining optional information does not prevent you from using unrelated features.
04Google sign-in and Google user data
What we receive and why
When you choose Sign in with Google, we receive the basic account information you authorize Google to share, including your email address and account identifier, and your name and profile picture where provided. We use it to create or identify your TapToFix account, authenticate you, display account information, associate your plan and usage with your account, and provide account-related support.
We do not receive your Google password. Google sign-in does not, by itself, give TapToFix access to your Gmail messages, Google Drive files, Google Contacts, or calendars. Text you separately select and submit from another application is handled as User Content under Section 5, not as permission to read the rest of that application or your Google account.
Use, sharing, and protection
Google account information is processed by our account, authentication, and infrastructure providers as needed to operate the Services. Relevant information may also be handled for support, security, or legal purposes as described in Section 6. It is retained under Section 8 and protected under Section 10.
We do not sell Google user data or use it for targeted advertising, advertising audience creation, creditworthiness assessments, or lending decisions. We do not use information obtained through Google APIs, including Google Workspace API data, to develop, improve, or train generalized or non-personalized AI or machine-learning models. These restrictions also apply to providers handling that information on our behalf.
Our use and transfer of information obtained through Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements where applicable. Before requesting additional Google data or using it for a new purpose, we will provide the required disclosures and obtain the required authorization.
Disconnecting Google
You can review and remove TapToFix’s connection in your Google Account connections settings. Removing the connection does not itself delete your TapToFix account or information already held by us. To request deletion, follow Section 9.
Google’s own handling of information is explained in the Google Privacy Policy.
05Desktop access and AI text processing
Text you choose to process
When you activate a correction, translation, rewriting, or related action, the application processes the text selected or supplied for that action. Depending on your operating system and the application involved, this can involve keyboard shortcuts, clipboard interaction, or operating-system permissions needed to obtain the text and return the result. Granting a permission for a writing action does not authorize unrelated uses of your content.
You control which writing actions you activate. You can stop using the application or revoke its operating-system permissions through your device settings; doing so may prevent the affected features from working.
Processing outside your device
Providing an AI-generated result can involve sending the relevant User Content, instructions, and necessary request information to third-party AI processing services. Do not assume that a writing request stays entirely on your device. Only submit content that you are permitted to send for this processing.
Storage and provider practices
We do not store the text submitted for writing transformations on our own servers. Processing a request is separate from retaining a stored copy. Account information, usage records, and support communications are different categories of information and are handled under the retention rules below.
AI providers’ retention, security review, and use of request data depend on the provider and the terms and configuration applicable to the service. Provider rules can also differ on whether submitted content is used for service or model improvement. Our statement about storage on TapToFix’s servers is not a blanket guarantee of zero retention or exclusion from model improvement by every third-party provider. The restrictions on Google API data in Section 4 continue to apply.
You may contact [email protected] for information about the providers and processing arrangements relevant to your use of the Services. Do not submit sensitive or confidential material unless you have established that these arrangements are appropriate for it.
Text or screenshots you separately send to support become part of your support communication. The no-content-storage statement for ordinary writing requests does not mean that messages you send to support are immediately deleted.
The Services produce writing suggestions for you to review. They are not intended to make decisions about you that have legal or similarly significant effects.
08How long we keep information
We retain personal information only for as long as it is needed for the purpose for which it was collected, including any applicable legal, accounting, security, or dispute-resolution requirements. Retention depends on the type of information and the reason it is held.
| Information | Retention criteria |
|---|---|
| Account and Google profile | While needed to maintain your account and provide the Services, and until a valid deletion request is completed, subject to limited legal or security exceptions. |
| Authentication and sessions | While needed to authenticate you or maintain an authorized session. Expired, revoked, or no-longer-needed credentials are removed or invalidated as appropriate. |
| Writing inputs and outputs | Not stored on TapToFix’s own servers. Third-party AI processing and any separate support submissions are addressed in Section 5. |
| Usage and technical records | While needed to calculate allowances, investigate errors or misuse, maintain security, and resolve related operational issues. |
| Support messages | While needed to resolve the request, provide related follow-up, and address associated disputes or legal obligations. |
| Billing records | For the period required by applicable tax and accounting requirements, and where necessary to resolve payment disputes or legal claims. |
When information is no longer needed and no applicable retention exception remains, we delete it or irreversibly anonymize it. Residual backup copies may remain until the relevant deletion or overwrite cycle is completed. Information retained only in backups is protected and is not used for ordinary operations.
Where a legal obligation or specific claim requires information to be preserved after account closure, we restrict its continued use to that purpose. We explain applicable retention exceptions when responding to a deletion request.
09Account deletion and privacy requests
Request deletion of your account or data
Email [email protected] with the subject “TapToFix privacy request.” Identify the email address associated with your account and explain whether you are requesting account deletion, deletion of particular information, or another privacy action.
Where possible, send the request from the email address associated with your account. If you no longer have access to that address, explain this so that we can consider another verification method. Do not send your password, payment-card details, or identity documents unless we specifically request information necessary to verify your identity.
We take reasonable steps to verify requests before disclosing or deleting personal information. We respond without undue delay and within the deadlines required by applicable law. Where an extension or exception applies, we explain the reason and any further steps available to you.
Following a valid account-deletion request, we close the account, delete or anonymize information that is no longer required, and arrange appropriate deletion by providers processing that information on our behalf. Limited retention exceptions are described in Section 8.
Uninstalling the application or disconnecting Google does not, by itself, delete your TapToFix account or cancel a paid subscription. For subscription cancellation, follow the billing instructions associated with your purchase or contact us for assistance.
10How we protect information
We use technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These include encryption for information transmitted through the Services, protection of stored account and authentication information, and access restrictions appropriate to the information involved.
Access to personal information is limited to authorized people and providers with a legitimate need for an approved purpose. No transmission or storage system is completely secure. Where a security incident requires notification under applicable law, we provide the required notifications.
11International processing
The Services and the providers supporting them may process information in countries other than the country where you live. Those countries may have different data protection laws.
Where applicable law requires safeguards for an international transfer, the transfer must use a legally permitted mechanism and the required protections. Depending on the transfer, this may involve an adequacy decision, approved contractual safeguards, or another lawful mechanism. You can contact us for information about the processing locations and safeguards applicable to your information.
12Your rights and choices
Depending on your location and the law that applies, you may have the right to access your personal information, obtain a copy, correct inaccurate information, request deletion, restrict processing, or receive certain information in a portable format.
Where processing relies on legitimate interests, you may have the right to object. Where processing relies on consent, you may withdraw it without affecting the lawfulness of processing before withdrawal. You may object to direct marketing at any time.
To exercise a right, use the contact and verification process in Section 9. Rights are subject to applicable legal conditions and exceptions. We will explain any reason we cannot fully comply. Where applicable law provides a right to appeal our decision, you can request a review by replying to our response.
You may also complain to the relevant data protection authority, including the authority in your country of residence or work where applicable. You do not need to contact us first to exercise that right. We will not unlawfully discriminate against you for exercising your privacy rights.
13Children’s privacy
The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13 in breach of applicable law. Where a higher minimum age or parental authorization is required for a particular user, those requirements also apply.
If you believe a child has provided personal information without the authorization required by law, contact [email protected] so that we can investigate and take appropriate action, including deletion where required.
14Changes to this policy
We may update this policy to reflect changes to the Services, our practices, or applicable requirements. The updated policy will be published on this page with a revised “Last updated” date.
For material changes, we provide an appropriate additional notice. Before using Google user data in a new way or for a previously undisclosed purpose, we provide updated disclosures and obtain the authorization required by Google’s policies. Where applicable law requires consent for other changes, we obtain it before the new processing begins.
15Contact us
For questions about this policy, information about our data handling, or a request concerning your personal information, contact:
TapToFix Privacy Team[email protected]
taptofix.ai