Privacy Policy
Your privacy matters to us. Learn how we protect your data and respect your privacy while using TapFlow.
Last updated: September 2025 | Contact: [email protected]
Service Details
Company/Legal Entity
"ALGORIUM" Igor Radovanovic s.p. Brod
Address
Majke Jugovica 44, Brod, Bosnia and Herzegovina
Contact
Primary Hosting
US-East (Supabase; AWS SES)
Analytics
Umami (cookieless)
Minimum Age
16+ in EEA/UK; 13+ elsewhere
1.1 Who we are (Controller)
TapFlow (the "App") and tapflow.app (the "Website," including the blog subdomain) are operated by "ALGORIUM" Igor Radovanovic s.p. Brod ("we", "us", "our"), located at Majke Jugovica 44, Brod, Bosnia and Herzegovina. For GDPR purposes, we are the data controller for personal data processed via the App and Website.
1.2 What we do
TapFlow is a training/timer app for Brazilian Jiu-Jitsu practitioners and coaches. The Website is a simple one-page site that directs visitors to the app stores and hosts a blog on a subdomain.
1.3 The personal information we collect
We aim to collect the minimum data needed to provide our service. The App collects only what you provide:
- Name
- Email address
- Birth date
- Sex
- BJJ belt rank
- Country of origin
The App may also allow you to submit user-generated content (UGC) such as drill names and descriptions. You choose what to submit. We do not use advertising SDKs and we do not sell personal data.
Notes:
- If you sign in with Apple/Google, those providers may share your name and email (and/or a private relay email). They act as independent controllers of their services.
- App store purchases are handled by Apple/Google; we don't receive payment card data.
1.4 What we do not collect
- No behavioral advertising identifiers and no cross-app tracking.
- No third-party advertising cookies on the Website. The Website uses cookieless analytics.
1.5 Sources of data
- Directly from you: when you create an account, edit your profile, submit UGC, or contact support.
- App stores: we receive purchase status signals as needed to unlock features.
1.6 Purposes and legal bases (GDPR)
We process your personal data for the following purposes and legal bases:
Provide and maintain the App
(create your account, sync your data): Performance of a contract.
Customer support and service communications
Legitimate interests to operate and improve the service.
Transactional emails and optional product updates
Legitimate interests for service notices; Consent where required for marketing. Marketing emails will always include an unsubscribe link.
Website analytics (cookieless, aggregated via Umami)
Legitimate interests in understanding product usage and performance without tracking individuals.
Legal compliance and security
(fraud prevention, enforcing terms): Legal obligation and Legitimate interests.