Privacy Policy

Last updated: 10 October 2026

1. Introduction

Tapcard is a digital loyalty platform for businesses. A business uses Tapcard to design a loyalty card, let its customers join and keep that card in Apple Wallet or Google Wallet, record stamps, points and rewards at the counter, and send updates to its members’ cards.

This policy explains what personal information Tapcard handles, why, who else takes part in providing the service, how long information is kept and what choices you have. It covers the Tapcard website — including the business dashboard and the public pages where customers join a card — and the Tapcard Till app for iPhone and Android.

It describes the service as it works today. When that changes, we update this policy.

2. Who Tapcard is for

The Tapcard dashboard and the Tapcard Till app are for businesses and the people they authorise to work for them, such as owners, managers and counter staff. The Till app is a work tool for existing Tapcard accounts: nobody can create an account in it.

The join pages are for a business’s own customers who choose to sign up to that business’s loyalty card.

Tapcard is not designed for children, and is not directed to them.

3. Roles and responsibilities

Two groups of people use Tapcard, and responsibility for their information is divided between Tapcard and the business:

Business accounts. When you create a Tapcard account for your business, or are invited to join one, Tapcard is responsible for your account information and uses it to provide and protect the service.
Loyalty members. When a customer joins a business’s card, that business decides what its programme asks for, who it accepts, what it records and what it sends to its members. Tapcard stores and processes members’ information on the business’s behalf so that the programme works, and uses it only to run, protect and support the service.

Each business sees only its own members. Joining one business’s card does not make you visible to any other business on Tapcard.

A business is responsible for how it uses its members’ information within its programme — for example, for the messages it decides to send them.

4. Information we collect

Business owners and staff

Account details: your name, your email address and an account identifier created with your account.
Sign-in details. On the website, you can create an account or sign in with an email address and password, with a one-time code sent to your email, or with your Google or Apple account. The current Tapcard Till app offers only the email address and password or the one-time email code, and only for existing accounts. Passwords are handled by our authentication provider; Tapcard does not store them in readable form.
If you choose Google or Apple on the website, that provider confirms who you are and shares with us your account identifier at that provider and your email address. Google also shares your name and profile picture. Apple may share your name, and if you choose to hide your email address, Apple gives us a private relay address that forwards to you. Our authentication provider stores these details with your account.
A phone number, if you give one when you sign up or add one to your profile.
Your role in each business you belong to — for example owner, manager or staff — and the email addresses of colleagues you invite.
The business details you enter: business name, logo, industry, country, currency, language, the contact details it shows to customers, card designs, rewards and programme settings.
Records of activity in the service, such as which account recorded a stamp, points or a reward, and the messages and offers you write, with their audience and timing.
If you arrived through a partner’s referral link, the code of the partner who referred your business.

Members of a loyalty programme

What you give when you join a card: your name, email address and phone number, and your date of birth if the business asks for it and you choose to give it.
Your membership number and the code shown on your card.
Your activity with that business: stamps, points, rewards earned and redeemed, visits, when you joined and last used the card, and a history of each change, with its time and the staff account that made it.
Corrections to your name made by the business’s staff.
Which wallet your card was added to, when we know it, and the messages delivered to your card.
If you ask to retrieve your card, a six-digit code is emailed to you. We keep only one-way hashes of that code, of the address it was sent to and of the network (IP) address the request came from, so none of them can be read back.

Information processed automatically

Wallet device details. When a card is added to Apple Wallet, the phone sends Tapcard an identifier for its wallet and a push token, so that the card can be updated later. Google Wallet updates are sent to the card Tapcard created in your Google Wallet.
App updates. The Tapcard Till app checks for updates with our update provider, sending the app version, the platform and a random identifier for that installation. It contains no personal details and is not linked to your account.
Technical logs. As with most websites, our hosting provider records technical details of each request, such as its time, the address requested, the browser or app that made it and the network (IP) address. We use these logs to keep the service running and secure.
Cookies and similar browser storage, described in Advertising, analytics and cookies.

We do not detect your location. A business’s country is the one its owner selects in the business settings.

5. How we use information

To create accounts, sign people in — with a password, a one-time email code or, on the website, a Google or Apple account — and keep accounts secure.
To send security notices, for example when the email address or phone number on an account changes.
To run each business’s loyalty programme: finding a member at the counter, recording stamps, points and rewards, and redeeming rewards.
To issue loyalty cards and keep them up to date in Apple Wallet and Google Wallet.
To deliver the messages a business chooses to send to its members’ cards.
To email the codes that let members join or retrieve a card.
To keep each business’s information separate, to prevent misuse such as repeated code requests, and to investigate problems.
To provide support and operate the platform. Tapcard’s administrators can see a directory of business accounts — such as business name, owner email address, country and activity totals — in order to support businesses and keep the service working.
To maintain and improve the reliability of the service.

We do not sell personal information, and we do not use it for advertising.

6. Apple Wallet and Google Wallet

A loyalty card lives in the member’s wallet, so some information has to reach that wallet.

Apple Wallet

Tapcard creates and signs the card, and the member’s iPhone downloads it from Tapcard. The card shows what the business chooses to display, which can include the member’s name, membership number, card code and balance.
When the balance or the card changes, Tapcard sends Apple’s push notification service a signal addressed to the phone’s push token. The signal carries no card details: the phone then downloads the updated card directly from Tapcard.
Tapcard uses Apple’s developer services to obtain the certificates that sign cards. These requests describe the type of card, not its members.
Once a card is in Apple Wallet, it is kept on the device, and Apple’s own terms and privacy policy govern how Apple Wallet handles it.

Google Wallet

To create and update a card in Google Wallet, Tapcard sends Google the card design and the business’s name and logo, together with the member’s name (if given), membership number, card code, balance and the business’s current message for the card.
Google keeps the card with the member’s Google account, and Google’s own terms and privacy policy apply to it.

Removing a card

Removing a card from a wallet removes it from that wallet; it does not cancel the membership with the business. When a card is removed from Apple Wallet, the phone tells Tapcard and we delete that device’s registration.
If a membership is deleted, its card stops receiving updates. A copy already in a wallet stays there until it is removed from the wallet.

7. The Tapcard Till app, camera and code scanning

Tapcard Till is the app a business’s staff use at the counter to find members and record stamps, points and rewards.

Signing in. Staff sign in with an existing Tapcard account, using their password or a one-time code sent by email. The current version of the app does not offer sign-in with Google or Apple. The app cannot create accounts. The session is stored on the phone so the app stays signed in; signing out removes it.
Camera. The app uses the camera only to read the code on a member’s card. The image is read on the phone itself, and no photo or video is stored or sent. Only the code that was read is used, to find the member.
What the app sends. Sign-in details, look-ups by membership number or card code, the stamps, points and rewards recorded, corrections to a member’s name, and the text of offers staff choose to send.
What the app does not do. It does not use the microphone, collect location, read contacts or the photo library, show advertising, or include analytics or crash-reporting tools.
App updates. The app checks for updates with a random installation identifier, as described in Information we collect.

The app shows members’ details only to signed-in staff of the business they belong to.

8. Notifications and messages

Messages on cards. A business can send its members messages that appear on their wallet cards, such as an offer or a reminder about a reward. These messages come from the business and concern its own programme; Tapcard delivers them. Tapcard does not send advertising, of its own or for anyone else.

Card updates. When a balance changes, the card updates itself. Depending on the phone’s settings, the wallet may show an update or a message as a notification. Members can turn off notifications for a card in their wallet’s settings, or remove the card.

Emails. Tapcard sends email only where the service needs it: sign-in codes, account confirmation and password reset emails, security notices about account changes, and the codes members use to join or retrieve a card. We do not send marketing newsletters.

9. Service providers

Tapcard relies on these providers to run the service. Each receives only the information its part of the service needs:

Supabase — hosts Tapcard’s database, user accounts and sign-in, stored images such as logos and card artwork, and scheduled background tasks. Sign-in emails, such as one-time codes and password resets, are sent through Supabase’s authentication service.
Vercel — hosts the Tapcard website and the server functions behind it, including the technical logs described above.
Brevo — sends the emails Tapcard sends directly, such as card retrieval codes and account security notices.
Apple — delivers card-update signals to Apple Wallet through its push notification service, provides the developer services used to sign cards and, when you choose it on the website, confirms your identity as you sign in with your Apple account.
Google — creates and updates cards in Google Wallet through its Wallet service and, when you choose it on the website, confirms your identity as you sign in with your Google account.
Expo — builds the Tapcard Till app and delivers its updates.

The Till app is distributed through app stores, which apply their own terms and privacy policies to downloading it.

Logos and card artwork are stored as images that anyone with their address can open, because Apple Wallet, Google Wallet and the join pages need to display them. Do not put personal information in these images.

We may also disclose information where the law requires it. Apart from that, we do not share personal information with third parties, and we never sell it.

10. Advertising, analytics and cookies

Tapcard shows no third-party advertising, does not track people across other companies’ apps or websites, and does not sell or rent personal information. Neither the website nor the Till app contains advertising, analytics or crash-reporting tools.

The website uses only the cookies and browser storage it needs to work:

a language cookie that remembers whether you read the site in Arabic or English, kept for one year;
sign-in cookies that keep you signed in to the dashboard while you are signed in;
a referral cookie, set only when you arrive through a partner’s link so that the partner can be credited, kept for 30 days;
storage in your own browser for a few conveniences, such as a card design you try out before signing up.

None of these is used for advertising.

11. Data retention

We keep information for as long as the service needs it, and remove it when it is no longer needed or when deletion is requested, as described in the next section.

Business accounts and business information are kept while the account and the business exist on Tapcard.
Members’ information and loyalty history are kept while the business’s programme exists on Tapcard, unless the membership is deleted sooner.
Sign-in codes can be used once and expire. Card retrieval codes expire after 10 minutes; the hashed records of code requests are kept with the business’s information so that repeated requests can be limited.
Apple Wallet device registrations are kept until the card is removed from the device, or the device stops accepting updates.
The internal queue used to deliver card updates is cleared automatically.
Technical logs are kept by our hosting provider for a limited period under its standard settings.

After information is deleted, copies may remain for a limited time in providers’ logs or backups, where these exist, until they are overwritten. Some records may have to be kept longer where the law requires it.

12. Deleting information and accounts

Deleting a business

The owner of a business can delete it from Settings on the Tapcard website. Deletion is immediate and cannot be undone: it permanently removes the business, its cards, its members and their loyalty history, and its messages. It does not delete the owner’s own sign-in account.

Deleting your Tapcard account

The current version of the Tapcard Till app does not include an in-app option to delete an account. To delete your Tapcard account, contact us as described in Contact, from the email address on the account. We confirm the request, close the account and delete it within 60 days. If you are the only owner of a business, that business and its members’ information are deleted with your account. If you are a member of staff, only your access is removed, and the business continues.

If you sign in with Google or Apple, you can also remove Tapcard’s access from the security settings of your Google or Apple account.

Deleting a loyalty membership

A business cannot yet remove a single member from its dashboard, so requests to delete a membership are handled by Tapcard. You can ask the business that issued your card, or contact us directly with the business’s name and the email address or phone number you joined with. Once we have confirmed the request, we delete the membership and its loyalty history within 60 days.

Removing your card from your wallet does not delete your membership.

13. Security

We use reasonable technical and organisational measures to protect information. For example:

information travels to and from Tapcard over encrypted (HTTPS) connections;
database access rules keep each business’s information separate from every other business’s;
passwords are handled by our authentication provider and are never stored by Tapcard in readable form;
sign-in codes work once and expire, and card retrieval codes are stored only as one-way hashes;
the credentials that sign Wallet cards are stored encrypted, and access to platform administration is limited to authorised Tapcard administrators.

No system is completely secure, and we cannot guarantee the security of information. Keep your password and sign-in codes private, and contact us if you think your account has been misused.

14. International processing

Tapcard’s service providers run their infrastructure in several countries. Your information may therefore be stored or processed in a country other than the one you live in, where data protection rules may differ from yours. Our providers process information only to provide their services to Tapcard.

15. Your rights and choices

You can ask us to:

tell you what personal information we hold about you, and give you a copy of it;
correct information that is inaccurate or incomplete;
delete your information, as described in Deleting information and accounts.

Business users can view and update most of their account and business information themselves in the dashboard. Members can also contact the business that issued their card, which manages its own programme.

We may need to confirm your identity before acting on a request, and in some cases we may need to keep certain information, for example where the law requires it. Depending on where you live, you may have further rights under local law, including the right to complain to a data protection authority.

16. Children

Tapcard is a service for businesses, and the Tapcard Till app is a work tool for businesses and their staff. Neither is directed to children.

Loyalty cards are offered by businesses to their own customers. If you believe a child’s information has been added to a programme without appropriate permission, contact the business or us, and we will delete it.

17. Changes to this policy

We update this policy when the way Tapcard handles information changes. The latest version is always published on this page, with the date it was last updated. If a change is significant, we will make that clear here.

18. Contact

For questions about this policy, or to make a privacy request — including access, correction or deletion — contact Tapcard through our Support page.