Privacy Policy

Effective date: August 13, 2026

1. Introduction

Tapski ("we," "our," or "us") is a habit-tracking iOS application that lets you log habit completions by tapping NFC tags with your iPhone. You can also order a physical Tapski starter kit from inside the app. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

By using Tapski you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Profile information — display name, username (screen name), and an avatar you select during onboarding.
  • Apple Sign In — if you sign in with Apple, we receive the identifier Apple provides for your account. Apple may also share your name and email address (or a Hide My Email relay address) if you choose to provide them.
  • Habit data — habit names, emoji labels, frequency targets (daily or weekly), and the dates and timestamps of each habit completion.
  • Shipping and purchase details — when you order a starter kit, we collect recipient name, shipping address, email address, and order contents so we can charge you, ship tags, and send order emails. We currently ship within the United States only.

2.2 Information Collected Automatically

  • Account identifiers — we create and store an account tied to your device session and, if you use Apple Sign In, to your Apple identity.
  • Device timezone — used to calculate your daily habit score correctly relative to your local time.
  • Push notification token — if you allow notifications, we store a device token so we can send reminders, nudges, and similar in-app alerts.
  • Product analytics and diagnostics — we collect app usage events, device and app version information, and crash or error reports so we can operate, debug, and improve Tapski.

2.3 Payment Information

Payments for the starter kit are processed by Stripe. Tapski does not store your full card number. Stripe may collect payment-method details, billing information, and transaction records as described in Stripe's privacy policy. If you pay with Apple Pay, Apple also processes that payment according to Apple's terms.

2.4 Information We Do NOT Collect

  • Precise location data (GPS, Wi-Fi, or Bluetooth-based)
  • Contacts or the contents of your photo library
  • Advertising identifiers (IDFA) for ads
  • Health or fitness data from HealthKit

3. How We Use Your Information

We use the information we collect to:

  • Create and maintain your account so your habits sync across sessions.
  • Display your habits, completion history, and habit score inside the app.
  • Show your publicly chosen username, avatar, and score on the optional in-app global leaderboard, and support friends and nudges.
  • Process NFC tag taps to record habit completions.
  • Process starter-kit payments, fulfill and ship orders, and send order and shipping emails.
  • Send push notifications you have enabled.
  • Understand how the app is used, fix bugs, and improve the product.
  • Comply with law, prevent fraud, and protect the service.

We do not sell your personal information, and we do not use your data for third-party advertising.

4. NFC Usage

Tapski uses NFC (Near Field Communication) exclusively to read and write habit-tag identifiers. When you tap an NFC tag:

  • The app reads or writes a small text payload containing a habit ID.
  • No personal information is stored on the NFC tag itself.
  • NFC access is only activated when you explicitly initiate a read/write action within the app.

5. Data Storage & Security

  • Local storage — Habits and completions are stored on-device so the app can work offline.
  • Cloud storage — Account, habit, social, and order data is stored with Supabase (hosted on AWS). All communication with our servers uses HTTPS/TLS encryption in transit.
  • Row-Level Security (RLS) — Where applicable, Supabase RLS policies restrict access so users can only read their own private data.

6. Third-Party Services

Tapski uses the following third-party services. Each has its own privacy policy:

  • Supabase (Privacy Policy) — authentication, database, and sync.
  • Apple — Sign In with Apple, App Store distribution, push notifications, and Apple Pay when you choose it.
  • Stripe (Privacy Policy) — payment processing for starter-kit orders.
  • Resend (Privacy Policy) — transactional emails such as order confirmation and shipping updates.
  • PostHog (Privacy Policy) — product analytics, diagnostics, and error tracking.
  • DiceBear Avatars (Privacy Policy) — generates avatar images during onboarding. Only a seed string is sent; we do not upload your photos.

7. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

  • Service providers — the processors listed above, only as needed to run Tapski, process payments, ship orders, send email, and understand product usage.
  • Leaderboard and friends — your chosen username, avatar, and habit score may be visible to other Tapski users. Friend features share limited activity needed to send or receive nudges. Habit names and completion history stay private unless a feature explicitly shows them to a friend.
  • Legal requirements — we may disclose information if required to do so by law or in good-faith belief that such action is necessary to comply with a legal obligation or protect our users or service.

8. Data Retention & Deletion

We retain your data for as long as your account exists, and for as long as needed to fulfill orders, keep payment records, and meet legal obligations. You may delete your account at any time from the Settings screen inside the app. When you delete your account:

  • Cloud-stored profile, habits, completions, scores, and related app data are deleted from our servers.
  • Locally stored data on your device is cleared.
  • Payment and shipping records may be retained by us or by Stripe as required for tax, accounting, fraud prevention, or legal purposes.
  • This action cannot be undone.

9. Children's Privacy

Tapski is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@tapski.app and we will promptly delete it.

10. Your Rights

Depending on your jurisdiction you may have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data (account deletion is available in-app).
  • Object to or restrict certain processing of your data.
  • Data portability where applicable.

To exercise any of these rights, please contact us at support@tapski.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@tapski.app

← Back to Tapski