Privacy Policy

Roostwall is operated by TAPTENNIS, LLC (Mississippi). This policy explains what we collect and how we use it. We do not sell your personal information.

What we collect

• Account details: your email address and sign-in information.
• Dashboard content: events, countdowns, family member names and initials, display settings, and the location you choose for weather.
• Connected calendars: if you connect Google Calendar, we read events from the calendars you pick (read-only) to show them on your wall. Calendar feed links you add are stored so we can refresh them.
• Basic usage: pages visited on our website, the referring site, campaign codes from links you followed, and when your wall display last checked in.

How we use it

Only to run Roostwall: show your dashboard, sync your calendars, fetch weather for your location, apply referral rewards, and understand overall usage so we can improve the product.

Google user data

Roostwall’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• What we access: read-only access to the Google Calendars you select (calendar.readonly), including event titles, times, locations and descriptions.
• How we use it: solely to display those events on your family’s Roostwall dashboard and wall display. We do not use Google user data for advertising, sell it, or use it to train AI or machine-learning models.
• Sharing: we do not transfer Google user data to third parties, except to our hosting providers as necessary to operate the Service, to comply with law, or with your consent. Humans do not read it unless you ask us for support, it is needed for security, or required by law.
• Storage: synced events are stored in our database so the wall can display them. Your Google access credentials are stored encrypted and are never shown to other users.

Data protection and security

• Encryption in transit: all traffic between your devices, our servers and Google is encrypted using HTTPS/TLS 1.2 or higher.
• Encryption at rest: our database and backups are encrypted at rest with AES-256. Google OAuth tokens receive an additional layer of application-level encryption (AES-GCM) before storage.
• Access controls: row-level security ensures each account can only access dashboards it owns or was invited to. Administrative access is limited to authorized personnel.
• Wall displays: each display uses a long, random private link that shows only that dashboard’s content and can be regenerated at any time.
• Incidents: if we learn of a breach affecting your data, we will notify you without undue delay as required by law.

Who we share with

Service providers that host the app and database, and the U.S. National Weather Service and Open-Meteo, which receive the location you chose (not your identity) to return weather. Members you invite to your dashboard can see its content. Anyone with your private display link can view that wall.

Cookies

We use browser storage to keep you signed in and to remember a referral code until you sign up. We do not use advertising cookies.

Retention and deletion

We keep your data while your account is active. Synced Google events are refreshed regularly and replaced as your calendar changes. If you disconnect Google in the app (Feeds), we immediately stop syncing and delete your stored Google credentials and synced Google events. You can also revoke access anytime at myaccount.google.com/permissions. Email ken@taptennis.app to delete your account; we delete account and dashboard data within 30 days.

Children

Accounts are for people 13 and older. Family members’ names or initials shown on a wall are added by the account holder.

Changes

We will post updates here with a new date.

Contact

TAPTENNIS, LLC — ken@taptennis.app