TapMore making.Clear about what goes where.
Some work stays on your Mac. Connected services need data to work. This policy covers Tap browser (called Tap in the Mac app), including optional Google connections in supported releases. Calendar and Gmail verification is pending; Google may show an unverified-app warning and apply access limits.
Who operates Tap
Tap browser (Tap) is independently operated by Alan Xie. For support, privacy questions or account-related data requests, contact support@tapbrowser.com.
Google policy and account controls
Read the Google API Services User Data Policy and manage access in your Google connections. Google connections are optional; the details below explain their data use.
Local projects and notes
Your projects, saved page cards, notes and to-dos are stored locally on your Mac. You can use these features without a Tap account. Local storage is not a promise of encrypted backups or automatic cloud sync.
Agent activity
When you enable a supported connection, Tap can read local agent activity records or receive hook events. Those sources may include task context and local project information. Tap uses them to show activity on the glass. Setup and approvals depend on the connected agent. Tap does not include a local AI model or built-in AI conversation service in this version.
Accounts and messages
Signing in enables Tap friends and messaging. Account details, friend requests and message content are sent to Tap’s account and messaging service to deliver those features. Tap contacts are not a copy of your macOS address book. Do not treat messaging as local-only or assume end-to-end encryption.
Google sign-in and your Tap account
Google sign-in provides your Google account identifier, verified email address and profile name. Tap sends a Google identity token to its account service, hosted on Cloudflare, to verify your identity and create or securely link your Tap account. The service stores the account association and relevant identity details for Tap friends and messaging. This is Tap messaging, not Google Chat. Signing out does not delete your Tap account or friendships.
Optional Google Calendar access
When you choose Connect for Google Calendar, Tap reads events from your primary calendar to show the next seven days and reminders about ten minutes before timed meetings. The app processes event data locally, including cancellation and declined-invitation status, and displays event titles, times, locations and event or meeting links. It does not create, edit or delete events. The integration does not send calendar event contents to Tap’s account service, analytics provider or connected agents.
Optional Gmail access
When you choose Connect for Gmail, Tap uses read-only metadata access to preview up to twenty unread inbox messages. It displays sender and subject headers, timestamps and identifiers needed to open the conversation in Gmail. Tap does not request email bodies or attachments and cannot send, delete, label or mark messages read through this integration. Clearing a Tap notification does not mark the source email read. Email previews are not sent to Tap’s account service, analytics provider or connected agents.
Where Google data is stored
Google Calendar and Gmail requests go directly from the Mac app to Google. Event and email preview data are held in app memory for display. Google login credentials are encrypted locally with Electron safeStorage backed by macOS Keychain. Local notification-seen markers contain account/item identifiers and timestamps, not message or event contents; they are pruned when new items are marked seen, using a thirty-day window and a maximum of 500 entries. These markers are not currently removed by sign-out. Tap account identity data is stored separately by the online account service.
Disconnect, revoke and delete
Each Google service can be skipped or disconnected in Tap Settings. Disconnect stops that service’s local syncing and clears its active preview data; it does not revoke an individual Google permission. Use Google permissions in Settings to manage or revoke access in your Google account. Sign out removes local Google and Tap session credentials, clears active Google preview data and attempts to revoke the Google grant. If revocation fails, for example while offline, use Google permissions to complete it. Signing out does not delete local projects, chat history or your online Tap account. In Tap 4.2.8 and later, Settings → Google account → Delete Tap account asks you to confirm your Google identity again, then removes your active online account, Google identity association, friendships, sessions, avatar and pending personal inbox. It also removes the current local chat history and Google notification markers on this Mac. Copies already delivered to other people or queued for their delivery may remain. Local projects and notes are kept. Infrastructure backups or operational records may persist according to provider retention; we do not promise instant erasure of all historical copies. Contact support@tapbrowser.com for other account-related data requests. Deleting Tap data does not delete your Google account, events or emails.
Google API data and Limited Use
Tap uses Google API data for the account, agenda and email-preview features described here. It is not sold, used for advertising or credit decisions, or used to train generalized AI models. Tap’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Human access is limited to circumstances permitted by that policy, such as specific user consent, security investigation or legal obligations.
Websites, search and translation
Opening websites or searching Google connects to the selected third-party service. Translation may send selected text to a translation service. Those services process requests under their own policies. Checking for app updates also makes network requests.
Product analytics
Product analytics are enabled by default and sent to Amplitude using stable random user and installation IDs. These are not your Tap account identity. Amplitude uses the connection IP address to estimate country, region and city; this is not precise device location. Events also include app and operating system versions. Allowlisted events describe feature usage and outcomes. They exclude search text, URLs, project names, note content, message text and file paths. You can turn product analytics off in Tap Settings. Optional diagnostics are off by default. Local event history and pending events are limited to seven days and 1,000 entries per store. Clearing local history does not delete events already received by the analytics service.
System permissions
Global text-selection tools require macOS Accessibility permission. Agent connections may require access to local records or approval of hooks in the agent app. macOS may also ask for Keychain access when storing or reading account credentials. Calendar and Gmail access is optional and authorized separately through Google. Local projects, notes, to-dos, search and agent activity do not require those Google permissions. Tap does not import your Google Contacts or macOS address book.
Website media
The product walkthrough and preview use demonstration data. Video files are served with this website rather than an embedded third-party video player. Download buttons lead to the Tap release hosted on GitHub.
Questions and requests
Email support@tapbrowser.com with privacy questions or account-related data requests. Last updated September 29, 2026. Google integration availability depends on the installed version and Google verification status.