Privacy policy

TapID is a loyalty and pass management platform for businesses. This policy explains how we collect, use, and protect your data.

Information we collect

When you use TapID as a business owner or staff member, we collect:

• Business details: name, contact email, and address
• Staff details: email, display name, and role
• Member information: phone number (E.164 format), name, and optional email — only collected with consent
• Activity data: visit records, points earned and redeemed, and purchase amounts

How we use your data

We use the information to:

• Provide and improve the TapID service
• Process loyalty program transactions
• Send transactional messages (receipts, confirmations) if consent is given
• Perform analytics on your business performance
• Comply with legal obligations

Data storage and security

Your data is stored on Supabase servers in the EU region. We use industry-standard security measures including encryption in transit and at rest. All API communication is encrypted over HTTPS.

Apple Wallet and push notifications

Member passes are sent to Apple Wallet and stored on member devices. Apple's push notification service (APNs) is used to update passes when points change. Apple receives the push token associated with each device; TapID does not receive Apple device identifiers.

Third-party services

We use the following third-party services:

• Google Cloud Run: server hosting
• Supabase: database and authentication
• Apple Push Notification service (APNs): pass updates
• Optional: WhatsApp and SMS providers for messaging (with your consent only)

Member data and deletion

Members can request deletion of their personal data. When you request member deletion through the TapID dashboard (using the "delete member" function), we:

• Permanently erase the member's name, phone number, and email
• Zero their points balance
• Revoke any active passes
• Keep anonymized activity records for analytics purposes
• Retain transaction records as required by law

This process is the documented data deletion method. You can trigger it for any member at any time from the members section of your dashboard.

Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your personal data (subject to legal retention requirements)
• Opt out of marketing communications at any time

Contact us

If you have questions about this privacy policy or our data practices, contact us at:

support@tapid.cloud

Changes to this policy

We may update this policy from time to time. We will notify you of any material changes by updating the date at the top of this policy.