Legal

Privacy Policy

Last updated October 7, 2026

1. Who we are

AutoTap is made by ReTap Incorporated (“ReTap”, “we”, “us”), a company based in Ontario, Canada. This policy covers the AutoTap app, the AutoTap Setup installer, getautotap.com, and AutoTap Premium. We're responsible for the personal information we handle, and you can reach the person accountable for it at autotap022@gmail.com.

2. What we collect and why

Your account

You sign in with Apple or Google through our sign-in provider, WorkOS. We get an account ID, your email address, your name, and which provider you used. WorkOS also sees your IP address and browser details when you sign in, to keep sign-in secure. The app keeps your sign-in on your iPhone or iPad, in its secure Keychain.

In our own database we keep your account ID, when you joined and last used AutoTap, and a hash of your email address: a one-way code made from it. The hash lets us match a purchase made on our website to your account without storing the address itself.

Free time and usage

To run the free daily limit, we record when each run starts and stops, how much time it used, and any time you earn from ads (coming soon). We don't receive what you tap, where you tap, which apps you use, or your screenshots. Like any app talking to a server, AutoTap also sends basic technical details with each request, such as your IP address and iOS version.

Premium and payments

Payments are handled by Stripe. Stripe collects your email address, your payment details and billing information, and information that helps it prevent fraud. We never see your full card number.

From Stripe we keep your customer and subscription IDs (for Lifetime, the payment's IDs), your plan's status and renewal date, and a hash of the email you paid with. When you buy from the app, we give Stripe your AutoTap account ID so the purchase reaches the right account, and your account email is filled in as your receipt address.

If we give you Premium by hand, we keep the email address we gave it to, and a note about why.

Rewarded ads (coming soon)

We plan to let you watch an optional short ad for more free time. Ads aren't live yet. Before they are, we'll update this policy to say which ad provider shows them and what it collects. When they're live, we'll only record that you finished an ad.

Installing and renewing AutoTap with your Apple Account

AutoTap isn't on the App Store, so AutoTap Setup and the app's Renew feature sign the app with your own Apple Account. Here's what that involves:

• Your Apple Account email, password and two-factor codes go to Apple, never to us. Even Apple doesn't receive the password itself, only a cryptographic proof of it.
• AutoTap registers your device's name and identifier (UDID) on your Apple developer team, and creates a signing certificate and profiles there. Apple's signing service also receives device identifiers such as the ECID when AutoTap prepares Apple's developer tools on your device.
• To sign in to Apple the way Apple's own developer tools do, AutoTap gets device-verification data from “anisette” servers run by the SideStore and StikStore projects. They see your IP address and a random identifier, never your Apple Account email or password.
• On your computer, AutoTap Setup keeps a list of the Apple Account emails you've used. It saves your password only if you turn on “Remember my password”, which is off by default, and then only in your computer's own password store: the Keychain on a Mac, or Credential Manager on Windows. It's never saved in a file. Choose Forget beside a saved account to delete it.
• Setup step counts. AutoTap Setup and the app send anonymous counts of how far setup gets, such as “AutoTap installed” or which error stopped it. Each count is only the step’s name and whether it came from Setup on a Mac, Setup on Windows, or the iPhone app. Counts include no Apple Account, email, device identifier or name, and we keep only daily totals.
• On your iPhone or iPad, Renew keeps your Apple Account email and password in the device's Keychain if “Remember Password” is on (it is by default), so it can renew without asking you. They stay on that device only: they're never synced to iCloud or restored to another device. Turning the option off, or Sign Out in Renew, deletes them.
• While AutoTap Setup waits for a two-factor code on a Mac, it watches your clipboard for a copied code so it can fill it in. It doesn't keep or send anything it reads.

Your device and the connection to it

AutoTap Setup reads your device's name, model and iOS version, and pairs with it so it can install AutoTap. The pairing record it creates (a key to the developer connection) is kept only in memory on your computer, never saved there. On your device, AutoTap moves it into its own protected storage, which can't be opened while your device is locked and isn't included in backups. If you save a copy from AutoTap Setup, treat it like a password. To tap, AutoTap connects to your own device through the separate LocalDevVPN app. That traffic stays on your device.

Screenshots, setups and history

When you place spots, AutoTap takes a screenshot of the screen you choose and saves it with your setup on your device. Your run history (when, how long, how many taps) is stored on your device too. A screenshot leaves your device only if you share a setup, which includes a small preview picture.

Logs

AutoTap and AutoTap Setup keep a log of what they do, to help fix problems. It stays on your device and is sealed with encryption, so only AutoTap support can read it. It's sent to us only if you choose to, with Send Log to Support in AutoTap or by emailing us Setup's log file. It can include your device's name, model and iOS version, and the Apple Account email you saved or removed in Setup, never a password. Our servers keep short-lived technical logs that can include your IP address and account ID.

Our website

getautotap.com doesn't use analytics tools, and its pages don't set cookies themselves. We only count how many times the download buttons are clicked, and how many times someone on a phone sends themselves the link, as plain numbers per day, with nothing that identifies who did it. So that one person isn't counted again and again, your browser remembers the date it last counted you; that date stays on your device. If you ask us to email you the download link, your email address goes to our email provider, Resend, to send that one email. We don't keep it, and we won't email you again. The buttons in that email go through links.getautotap.com, so Resend can tell us whether they were clicked. It loads fonts from Google Fonts, which receives your IP address. When the pricing comes on screen or you open checkout, it loads Stripe so checkout is ready, and Stripe may set cookies to prevent fraud. Our host, Cloudflare, processes your IP address to deliver and protect the site.

Updates and downloads

The app and AutoTap Setup check GitHub for updates, and download AutoTap, its updates and Apple's developer tools from GitHub. The community setups in Explore are loaded from GitHub too. GitHub sees your IP address and browser or app details when that happens.

When you email us

We keep your messages and our replies so we can help you.

3. What we don't do

• We don't sell or rent your personal information.
• AutoTap doesn't use analytics, crash-reporting or ad-tracking services, and doesn't track you across other apps or websites. The stats and run history you see in the app are worked out and kept on your device, just for you, and aren't sent to us.
• We never receive your taps, your screenshots, other apps' content, your Apple Account password, or your card number.

4. Who we share it with

We share personal information only with the services that run AutoTap, and only for that purpose:

LocalDevVPN is a separate app you install yourself, with its own privacy policy. We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a sale or merger of our business, in which case this policy keeps applying to it.

5. Where it's stored

Our providers store and process information in Canada, the United States and other countries. Those countries' laws may let their authorities access it.

6. How long we keep it

• Account, usage and Premium records: while you have an account. When you ask us to delete your account, we delete them within 30 days.
• Payment and tax records: as long as the law requires, generally six years in Canada. Stripe keeps its own records under its own policy.
• Server logs: a short time.
• What's on your devices stays until you delete it. Sign out and delete the app to remove most of it. Some items in the Keychain can survive deleting the app, so use Sign Out first.

7. Your choices and rights

• See, correct or delete your information: email autotap022@gmail.com from the address you sign in with. We'll reply within 30 days. To delete your account, cancel Premium first so it doesn't renew.
• Ads: rewarded ads are coming soon, and watching one will always be optional.
• Withdraw consent: you can stop using a feature, sign out, or ask us to delete your account at any time.
• Complaints: tell us first and we'll try to fix it. In Canada you can also contact the Office of the Privacy Commissioner of Canada. If you're in the EU or UK, you have rights to access, correct, delete, restrict and port your data and to object to its use, and you can complain to your local data protection authority. There, we rely on our contract with you (to provide AutoTap), our legitimate interests (to keep it secure and working), and your consent (for ads, where required).

8. Children

AutoTap isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us personal information, email us and we'll delete it.

9. Security

We use encrypted connections, keep our database private behind access controls, and store email addresses as hashes where we can. No system is perfectly secure, though. Your devices' own security protects what AutoTap keeps on them, including your sign-in, your pairing record and any saved Apple Account password, so keep your computer and devices locked.

10. Changes to this policy

We'll update this policy when what we do changes, and change the date at the top. If a change is significant, we'll tell you on our website or in the app before it takes effect.

11. Contact

Questions or requests about your privacy: autotap022@gmail.com. ReTap Incorporated, Ontario, Canada.