Last updated: 19 March 2026. This policy explains what personal data TapAndTalk collects, why, and how it is used and protected.
TapAndTalk is operated by Polly, an individual based in the United Kingdom. TapAndTalk is a personal, non-commercial project. For any privacy-related queries, please contact us at polly@tapandtalk.co.uk.
For the purposes of UK data protection law, Polly is the data controller for personal data collected through this website.
When you create an account, we collect:
When you use the app, we also store:
We do not collect payment information, location data, or any data about children directly.
Your data is used solely to provide the TapAndTalk service:
We do not use your data for marketing, advertising, profiling or any purpose other than operating the service. We do not sell or share your data with third parties.
We process your personal data on the basis of contract — specifically, to fulfil the service you have registered for. Without your email address and password, we cannot provide you with a secure, saved account.
We retain your account data for as long as your account is active. If your account has had no activity for 24 months, we may delete it along with all associated boards and recordings. You will not be notified before this happens.
You can request deletion of your account at any time — see Your rights below.
TapAndTalk is hosted by Kualo, a UK-based web hosting provider. Your data is stored on servers within the United Kingdom. Audio recordings are stored as files on the same server.
TapAndTalk does not use tracking cookies or advertising cookies. When you log in, a secure authentication token is stored in your browser's localStorage. This is essential for keeping you logged in and is not used for tracking or analytics. It is automatically cleared when you sign out.
TapAndTalk accounts are intended for adults only — teachers, therapists, parents and carers. Children should not register for their own accounts. No data about children is collected by this service. If you believe a child has registered an account, please contact us and we will delete it promptly.
Under UK GDPR, you have the right to:
To exercise any of these rights, please email polly@tapandtalk.co.uk from the address associated with your account. We will respond within 30 days.
We take reasonable steps to protect your data. Passwords are hashed using bcrypt and are never stored in readable form. The site is served over HTTPS. However, no system is completely secure, and we cannot guarantee absolute security.
If you have concerns about how we handle your data, please contact us in the first instance. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.
We may update this policy from time to time. The date at the top of this page will reflect the most recent update. Continued use of TapAndTalk after changes are posted constitutes acceptance of the revised policy.