Privacy

Who we are

TapCard is made and run by Emax Innovation & Technology, in Lagos, Nigeria. We are the data controller for everything described here, and we operate under the Nigeria Data Protection Act 2023.

Postal address

[TODO: registered office address, including street and city]

Privacy and data requests

electricalemax@gmail.com

Two different people

Almost every privacy question about TapCard depends on which of these you are, so the rest of this page is split that way:

A card owner

You have an account. You decided what your profile says, and you can change or remove any of it at any time.

Someone who tapped a card

You held a phone to someone’s card, or scanned its QR code, and read their profile. You do not have an account and we do not identify you. We record that a tap happened so the card’s owner can see their card is being used.

If you own a TapCard

Your account

Your email address, and a password stored only as an argon2id hash — we cannot read it, and neither can anyone who obtained a copy of the database. If you choose “Continue with Google” instead, we keep the Google account identifier and the email address Google confirms, and never see your Google password.

Why we may do this: to perform our contract with you. Without an account there is nothing to attach a card or a profile to.

Your profile

Whatever you put in it: your name, job title, company, a short bio, location, profile picture, and your contact details — phone, WhatsApp, email, website, social links, and bank name, account name and account number.

Nothing in your profile is public until you publish it, and each contact detail has its own switch. Your bank account number is only ever shown if you switched “show bank” on. A published profile is also kept out of Google unless you separately allow search engines to index it.

We put your details into the vCard a visitor saves to their phone, and into the QR code and link that open your page. That is the entire purpose of the product, and it only ever contains what you chose to publish.

Why we may do this: your consent, given field by field with those switches, and withdrawable at any time by turning one off or unpublishing the page.

Card orders

When you order cards we keep the delivery details for that order — recipient name, phone number, address, city, state, any note you added, and how many cards. They are stored per order rather than on your profile, so an order keeps the address it was actually delivered to.

The app takes no payments and stores no card numbers. There is no payment provider in the app at all: payment for an order is arranged with us separately, so no debit or credit card details ever reach TapCard.

Why we may do this: to perform the contract — we cannot print and deliver a card without a name and an address — and afterwards to keep ordinary business records, which is our legitimate interest and in places a legal duty.

Notifications and email

If you allow notifications, we store the push token that identifies that installation, so we can tell you when a card is tapped or an order moves. Turning notifications off, or signing out, removes it.

We also send email about your account, your orders and your card. The Monday summary of your views and taps is optional and every one of those emails carries an unsubscribe link; account, order and card emails are not marketing and do not.

Why we may do this: contract for the account, order and card emails, which you cannot be opted out of while you hold an account; consent for the weekly summary.

What the app asks permission for

Each of these is requested only at the moment it is needed, with the reason on screen, and the app keeps working if you refuse:

Photos

So you can choose a profile picture from your camera roll. We read only the picture you pick.

Saving to Photos

So the app can save your card’s QR code to your phone when you ask it to.

Camera

So you can scan the QR code on a new card to set it up. No photo is taken or kept.

NFC

So the app can read a new card when you hold it to the phone, which is how a card is claimed.

Notifications

So we can tell you when your card is tapped or an order moves. Optional, and declining it breaks nothing.

The app has no access to your microphone, your contacts or your location. Microphone recording and drawing over other apps are explicitly blocked in the build, not merely unused. We never read your camera roll beyond the single picture you choose.

If you tapped someone’s card

So the owner can see that their card works, we record an event: when it happened, which card and profile, whether you arrived by tap, QR scan or a direct link, what you pressed (saving the contact, calling, WhatsApp, a link), your device type, operating system and browser, your country, your city where our network provider tells us, and the website you came from if any.

Your IP address is never stored. It is combined with your browser’s user-agent and a secret value, hashed with SHA-256, and only the hash is kept — so repeat visits within a day can be counted without knowing who you are. That secret is replaced every night, which means the same person on two different days cannot be connected even by us.

We do not build a profile of you, do not track you across other websites, and use no advertising or third-party analytics anywhere on TapCard.

Why we may do this: our legitimate interest, and the card owner’s, in knowing that a card they paid for is working. The measures above are what keep that interest from outweighing your privacy: the data cannot be traced back to you.

Cookies, and this website

Four cookies, none of them for advertising, and no analytics or tracking scripts on this site at all:

tapcard_session

Keeps you signed in. Only set if you have an account.

tc_src

Remembers for thirty minutes that this visit began with a tap or a scan, so the owner’s figures attribute it correctly instead of calling it direct traffic.

tc_oauth, tc_next, tc_app

Set only while you are signing in with Google, to prevent the sign-in being forged and to know where to return you. They last ten minutes.

All of them are restricted to TapCard and unreadable by JavaScript. None is used to profile you, so there is no consent banner to click past.

Who else handles it

Resend

Delivers our email, so it handles your address and the contents of the message. Their privacy policy

Expo

Carries push notifications to the app, which means the notification and the token identifying your installation. Their privacy policy

Google

Delivers notifications to Android phones, and confirms your identity if you choose Continue with Google. Their privacy policy

Apple

Delivers notifications to iPhones. Their privacy policy

Everything else — the database, the website, your uploaded profile picture — sits on a server we rent and administer ourselves.

We do not sell your personal data, and never have. We do not share it for advertising, we run no ad network, and we have no arrangement under which anyone pays us for access to it.

Where it is kept

The database and the website run on a server in [TODO: the data-centre region of the VPS, from the hosting provider]. Email is delivered through Resend, which sends from the European Union (Ireland). Push notifications pass through Expo, Google and Apple, which operate internationally.

That means your data may be processed outside Nigeria. Where it is, we rely on the processor’s own contractual safeguards — standard contractual clauses in each case — and we send them no more than the service needs: an email address and a message, or a push token and a notification.

How long we keep it

Your account and profile

As long as you have an account, and then deleted when you delete it.

Order records

Kept as business records after the order is complete, including after account deletion where we are required to keep them.

Tap and view events

Kept so your statistics have history, and deleted with your profile.

Encrypted backups

Fourteen days, then deleted — so something you remove can persist in a backup for up to a fortnight before it is gone for good.

Sign-in and reset links

Minutes. A password-reset link and an app sign-in handoff both expire on a timer and are single-use.

Deleting your account and your data

You can do this yourself, inside the app, without asking us. Open the Profile tab, scroll to Delete account, and confirm with your password.

That removes your account, your profile, your links, your tap history and your orders, and signs out every device. Any card you had claimed is retired so it can never open your old page again. You get one email confirming it is done. Backups follow the fourteen-day window above.

If you cannot reach the app, email electricalemax@gmail.com from the address on the account and we will do it for you. Full instructions, including what survives deletion and why, are on the account deletion page.

You can also empty your profile or unpublish it yourself at any time, which takes it offline immediately without closing the account.

Keeping it safe

Every connection is encrypted. Passwords are argon2id hashes. The database enforces, in the database itself, that one account cannot read another’s rows — not merely in application code. The service credential that can bypass those rules is used only by the few server routines that must, and never by anything handling a visitor’s request. Backups are encrypted. Deleting your account requires your password even if someone already holds your signed-in device.

No system is perfect. If something looks wrong, or you think you have found a security problem, write to electricalemax@gmail.com and we will take it seriously.

Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

Show you what we hold

A copy of your personal data, and an explanation of where it came from.

Correct it

Most of it you can edit yourself in the app; write to us for anything you cannot.

Delete it

As above — you can do this yourself in the app.

Give you a portable copy

Your profile and your statistics in a machine-readable file.

Stop relying on your consent

Withdraw it for anything based on consent, such as the weekly summary or a published field.

Object, or ask us to restrict

Object to processing based on our legitimate interests, or ask us to pause it while a complaint is resolved.

Write to electricalemax@gmail.com and we will answer within thirty days, free of charge. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

If you are in the EU or the UK

The GDPR and the UK GDPR give you the same rights, and the legal bases we rely on are named under each section above — contract, consent, or legitimate interests. You may complain to your national supervisory authority, or to the Information Commissioner’s Office in the UK. We make no automated decisions that have a legal effect on you, and we do no profiling.

If you are in California

Under the CCPA as amended by the CPRA you may ask what we collect, ask for a copy, ask us to delete it, and ask us to correct it, and we will not treat you differently for asking. We do not sell personal information and do not share it for cross-context behavioural advertising, so there is nothing to opt out of — but the same address above reaches us if you want that confirmed in writing. We collect no sensitive personal information as the CPRA defines it.

Children

TapCard is a product for working adults and is not directed at children. We do not knowingly create accounts for anyone under 18, and the app is not designed for or marketed to children. If you believe a child has given us personal data, write to electricalemax@gmail.com and we will delete it.

Changes

If we change what we collect we will change this page and move the date at the top. If the change is significant and you have an account, we will email you about it rather than quietly editing this page.