tapless.Download APK

Privacy policy

What Tapless sees, sends and keeps

Tapless is an assistant that uses your phone for you, so it needs more access than most apps. This page explains, in plain words, what it collects, why, where it goes and how to delete it. If anything here is unclear, write to us.

Last updated 9 November 2026

The short version

  • What you say to Tapless is sent to our servers and to AI providers so it can be understood. That is how the assistant works.
  • Your contacts and face signatures stay on your phone. Photos stay on your phone too, unless you switch on Photo backup.
  • Nothing is paid, booked or sent to another person without your yes.
  • We don't sell your data and we don't show ads.
  • You can download, clear or delete your data yourself, in the app (Persona → Privacy & account) or on the web dashboard.

Who we are

Tapless is run by , ("we", "us"). We are the Data Fiduciary for the personal data described here under India's Digital Personal Data Protection Act, 2023.

What we collect, and why

AccountPhone number (for the login code), your name and date of birth, optional email, your assistant's name, voice and personality settings.To log you in, confirm you are 18 or older, greet you by name and set up your assistant. Your date of birth is stored separately and never sent to AI providers.
Your requestsWhat you say or type to Tapless, as text, and its replies. Voice is turned into text; we don't keep the audio.To understand and carry out your requests, and to show them in your Activity tab.
Screen content during a taskWhile Tapless is doing a task you asked for, the text on the screen of the app it is using, and sometimes a screenshot when the screen can't be read as text.To find the right button or field. Only during a task you started.
Messages and notificationsWith Message radar (notification access) on: the sender and text of incoming messages from apps you allow, such as WhatsApp.To read messages out, tell you what matters and draft replies. Promotions are never read out.
What it learns about youPeople, places, preferences and rules you tell it ("my mummy is Sunita"), and the writing style of messages you send yourself.So you don't have to repeat yourself and replies sound like you. You can view and delete these on the web dashboard.
Calls (early access)If you forward calls to Tapless: the caller's number, a transcript of the call and its outcome. At the start of every call, callers are told they are speaking to an AI assistant and that the call is transcribed.To answer calls you can't take and ask you what to say.
WhatsApp on the web (optional)If you link WhatsApp by QR code on the dashboard: a linked-device session and the messages it receives.So the assistant keeps working when your phone is off.
Backed-up photos (optional)Only if you switch on Photo backup: the photos you allow (all, or only selected ones), stored on our media host under your account.So the assistant can find and work with your photos. Off by default; delete any time.
Beta training data (on by default in the beta, can be switched off)While "Help Tapless learn" is on: screenshots of the screens Tapless works on during your tasks and of the screens you go through when you show it how to do something, plus the steps taken, what you asked and whether it worked. Stored on our media host (ImageKit) and reviewed by our team.To find and fix what goes wrong during the beta, and to teach Tapless tasks it can't do yet. Switch it off in the app under My Tapless, where you can also delete what was sent. Screens that apps mark as secure (banking, passwords) are captured blank by Android.
Tasks you teachWhen you show Tapless how to do something: the taps and text you typed in that app (never passwords).So it can do the task for you next time. After our team reviews a taught task, it may be offered to all Tapless users without anything that identifies you.
Device and app dataPhone model, Android version, app version, crash and error logs, which features you use.To fix bugs and decide what to build next (the roadmap follows usage).

What stays on your phone

  • Contacts: used on the phone to work out who "Mummy" or "Rohan" is. Only the name and number needed for a task you asked for are used.
  • Photos: read on the phone when you ask to share one; the photo goes straight to the app you're sharing with. If you switch on Photo backup (off by default), photos you allow are uploaded to our media host (ImageKit) under your own account so the assistant can work with them; during the beta our team may review backed-up photos to improve Tapless; you choose all photos or only selected ones, and you can turn it off and delete them any time.
  • Eyes (face recognition, off by default): the camera image is processed on the phone and face signatures are stored only on the phone. They are never uploaded.
  • The wake word ("Hey Tapless" or your assistant's name) is detected offline. Nothing is sent until you have said it or tapped the orb.

Permissions (the app calls them powers)

Magic handsAccessibility serviceReads the screen and taps and types in other apps, only to carry out what you asked. It doesn't run in the background on its own and never enters passwords or PINs for you.
Big earsMicrophoneListens for the wake word on the phone, and to your request after it.
Always nearbyDisplay over other appsShows the floating orb on top of other apps.
Message radarNotification accessReads incoming notifications from apps you allow, and replies through them.
Knows your peopleContactsFinds the person you mean. Stays on the phone.
Photo fetchPhotos and mediaShares a photo or screenshot you asked for. Stays on the phone.

Before Android opens the settings for Magic hands or Message radar, the app explains on its own screen what that power reads and where it goes, and nothing is switched on unless you agree. Every power can be switched off in the app or in Android settings. Tapless keeps working with fewer powers; it just can't do the things that need them.

AI providers and other services we use

To understand requests and speak replies, the text of your request (and, when needed, a screenshot of the current screen) is sent to AI model providers such as OpenAI and Google, and Indian speech providers for Hindi and Hinglish speech. Photos, screenshots and other media are stored with ImageKit. Calls use a telephony provider (Plivo). Our servers are hosted by cloud providers.

These companies process data on our behalf, under contracts that limit use to providing the service. We choose providers whose terms say API data is not used to train their models. Some of them process data outside India; we only transfer data to countries not restricted by the Government of India.

Who else sees your data

  • The people you ask Tapless to message or call see what you asked it to send or say.
  • The apps Tapless uses for you (Uber, Swiggy and others) receive what you would have typed yourself, under their own privacy policies.
  • Service providers listed above, only to run Tapless.
  • Authorities, when Indian law requires it.
  • A buyer or successor if the business is sold, under this same policy.

We don't sell personal data, share it for advertising, or let anyone else use it for their own purposes.

Improving Tapless

We look at failed tasks to fix the apps and flows where Tapless gets stuck. We don't use your messages or requests to train AI models. If we start training our own models on records of app actions (which screen, which tap, whether it worked), we'll ask first with a switch that is off by default, and remove names, numbers and message text.

How long we keep it

  • Requests, replies and task logs: 90 days, then deleted.
  • Call transcripts: 90 days.
  • Things you told it to remember and your settings: until you delete them or your account.
  • After you delete your account, everything is erased within 30 days; backups roll off within a further 30 days. We keep only what the law requires, such as records of payments.

Your rights

You can ask to see a summary of your data, correct it, delete it, or withdraw consent for any feature. Most you can do yourself: in the app under Persona → Privacy & account, or on the web dashboard under Privacy & account, you can download all your data as a file, clear your activity history and delete your account. Memories and rules can be edited or deleted one by one on the dashboard (Teach), and powers can be switched off in the app. Withdrawing consent stops future processing; it doesn't undo what was already done.

For anything else, write to . We reply within 7 days and act within 30. If you're unhappy with our answer, contact our Grievance Officer (below), and after that you may complain to the Data Protection Board of India. You can also nominate someone to exercise these rights for you if you die or can't act.

Security

Data travels over encrypted connections (HTTPS/TLS) and is encrypted at rest on our servers. Access is limited to the few people who need it to run the service. Login uses a one-time code sent to your phone. If a breach affects your data we will tell you and the Data Protection Board as the law requires.

Children

Tapless is for people 18 and over. We ask for your date of birth when you sign up; if it shows you are under 18, the account and everything entered are deleted straight away. If you think a child is using Tapless, write to us and we'll delete the account.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and the app will ask you to read and agree to the new version before you continue. We keep a record of which version you agreed to and when. The date at the top shows the last update.

Grievance Officer

, , . Email: . We acknowledge complaints within 24 hours and resolve them within 15 days.