TAPPI Business app — privacy

The app collects only what it needs to sign you in and provision your chips:

• Account email — to authenticate you (the same login as the TAPPI dashboard).
• Account & organisation identifiers — your user ID and the business(es) you belong to, to authorise what you can do.
• NFC chip data — a chip's short code, hardware UID, and originality signature, captured when you encode or scan a chip you control.

The app does not collect location, contacts, photos, health, financial, or advertising data, and contains no third-party analytics, ads, or trackers.

This data is used solely to operate the app: to sign you in, to confirm you're allowed to manage a given business's devices, and to record which physical chip maps to which of your venues. It is not used for advertising or cross-app tracking, and is never sold.

Data is sent only to TAPPI's own backend (hosted on Supabase, under thetappi.com) to provide the service. We don't share it with third parties for their own purposes.

The app requests NFC access to read and write your tap chips. Your session token is stored in the device's secure keystore (iOS Keychain / Android Keystore), in encrypted form. No other sensitive device permissions are requested.

Account and device data persists for as long as your TAPPI account is active. To access, correct or delete your data, use the TAPPI dashboard or write to hello@thetappi.com. Closing your account starts a 30-day grace period in which you can export everything and reopen; after that the data is deleted, subject to the retention terms in the main privacy policy.

Questions about app privacy: hello@thetappi.com. To report a security issue in the app, see our security page.