Privacy Policy
Effective date: February 28, 2026
1. Introduction
Tapski ("we," "our," or "us") is a habit-tracking iOS application that lets you log habit completions by tapping NFC tags with your iPhone. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.
By using Tapski you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Profile information — display name, username (screen name), and an avatar image you select during onboarding. No real name, email address, phone number, or other personal identifiers are required.
- Habit data — habit names, emoji labels, frequency targets (daily or weekly), and the dates and timestamps of each habit completion.
2.2 Information Collected Automatically
- Anonymous authentication token — we use Supabase anonymous sign-in to create a session. No personal credentials (email, password, social login) are collected.
- Device timezone — used to calculate your daily habit score correctly relative to your local time.
2.3 Information We Do NOT Collect
- Email address, phone number, or real-world identity
- Location data (GPS, Wi-Fi, or Bluetooth-based)
- Contacts, photos, or other device content
- Advertising identifiers (IDFA)
- Analytics or usage-tracking telemetry
- Health or fitness data
3. How We Use Your Information
We use the information we collect solely to:
- Create and maintain your anonymous account so your habits sync across sessions.
- Display your habits, completion history, and habit score inside the app.
- Show your publicly chosen username, avatar, and score on the optional in-app global leaderboard.
- Process NFC tag taps to record habit completions instantly.
We do not use your data for advertising, profiling, or any purpose unrelated to the core functionality of the app.
4. NFC Usage
Tapski uses NFC (Near Field Communication) exclusively to read and write habit-tag identifiers. When you tap an NFC tag:
- The app reads or writes a small text payload containing a habit ID.
- No personal information is stored on the NFC tag itself.
- NFC access is only activated when you explicitly initiate a read/write action within the app.
5. Data Storage & Security
- Local storage — Habits and completions are stored on-device using AsyncStorage so the app works offline.
- Cloud storage — Data is synced to Supabase (hosted on AWS) for backup, leaderboard functionality, and cross-session persistence. All communication with Supabase uses HTTPS/TLS encryption in transit.
- Row-Level Security (RLS) — Supabase RLS policies ensure each user can only access their own data.
6. Third-Party Services
Tapski integrates with the following third-party services:
- Supabase (Privacy Policy) — authentication, database, and real-time sync.
- DiceBear Avatars (Privacy Policy) — generates randomised avatar images during onboarding. Only a random seed string is sent; no personal data is transmitted.
We do not integrate any advertising networks, analytics SDKs, or other tracking services.
7. Data Sharing
We do not sell, rent, or share your personal information with third parties, except:
- Leaderboard — Your chosen username, avatar, and habit score are visible to other Tapski users on the in-app global leaderboard. No other data is shared publicly.
- Legal requirements — We may disclose information if required to do so by law or in good-faith belief that such action is necessary to comply with a legal obligation.
8. Data Retention & Deletion
We retain your data for as long as your account exists. You may delete your account at any time from the Settings screen inside the app. When you delete your account:
- All cloud-stored data (profile, habits, completions, scores) is permanently and irreversibly deleted from our servers.
- All locally stored data on your device is also cleared.
- This action cannot be undone.
9. Children's Privacy
Tapski is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@tapski.app and we will promptly delete it.
10. Your Rights
Depending on your jurisdiction you may have the right to:
- Access the personal data we hold about you.
- Request correction or deletion of your data (account deletion is available in-app).
- Object to or restrict certain processing of your data.
- Data portability where applicable.
To exercise any of these rights, please contact us at support@tapski.app.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: