Legal

Privacy Policy

Last updated: April 6, 2026

Tapped ("we," "our," or "us") operates the Tapped smart tag management platform, accessible at app.tappedtags.com. This Privacy Policy explains how we collect, use, and protect information about you when you use our service.

Information We Collect

We collect information you provide directly and information generated through your use of the service:

• Account information: When you create an account — by email/password or via Google Sign-In — we collect your email address and, if provided by Google, your name and profile picture.
• Tag and configuration data: The actions, schedules, groups, and settings you configure for your smart tags and QR codes.
• Scan analytics: When your tags are scanned, we log data such as timestamp, approximate geographic region, device type, and operating system. We do not collect personally identifiable information about the people who scan your tags.
• Usage data: Standard web server logs including IP address, browser type, and pages visited within the dashboard.

How We Use Your Information

• To provide, operate, and maintain the Tapped platform.
• To authenticate your account and keep it secure.
• To deliver the correct scan experience to people who interact with your tags.
• To send you transactional emails (account confirmation, password reset, scan notifications you have opted into).
• To analyze usage patterns and improve the service.

Google Sign-In

If you choose to sign in with Google, we receive your Google account email address and basic profile information (name, profile photo) as provided by Google's OAuth service. We use this information solely to create and identify your Tapped account. We do not access your Google Drive, Gmail, contacts, or any other Google services.

Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We may share information in the following limited circumstances:

• Service providers: We use Supabase for authentication and database hosting. These providers process data on our behalf under strict data protection agreements.
• Legal requirements: We may disclose information if required by law or in response to valid legal process.
• Business transfers: In the event of a merger or acquisition, user information may be transferred as part of that transaction.

Data Retention

We retain your account data for as long as your account is active. Scan analytics are retained according to your subscription plan. You may request deletion of your account and associated data at any time by contacting us.

Security

We use industry-standard security practices including encrypted connections (HTTPS), secure authentication, and access controls to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Export your data in a portable format.

To exercise any of these rights, contact us at the address below.

Cookies

We use session cookies and local storage to keep you signed in and remember your preferences (such as dark mode). We do not use advertising or tracking cookies.

Children's Privacy

Tapped is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.