Privacy Policy

1. Information We Collect

To provide and operate the Tap and Call platform effectively, we collect and store the following types of information:

• Account Information: Name, email address, and authentication credentials for your account and any delegates you authorize
• Profile Details (Pet, Person, Property): Names and details for the profiles you create in your account
• Placement Data: User-defined placement names and configurations you set up (for example, "collar" or "front door"). We do not track your device's location in the background.
• WiFi Guest Pass (optional): If you enable WiFi guest pass mode for a property placement, we store the network name (SSID) and password you provide so they can be shown to people who tap that FlairTag. Only enter credentials you intend guests to use.
• Alert Messages and Placement Content: Optional messages and URLs you configure for placements, which may be displayed to anyone who taps your FlairTag
• Alerts and Service Requests: When someone taps your FlairTag, we store the request type, optional message, timestamp, and related context. If the person tapping chooses to share their location with you as part of an alert or check-in, we store that latitude and longitude with the request and may include it in notifications to you. We do not track the location of people who tap your tag unless they explicitly provide it.
• Browser Push Subscriptions: If you opt in to browser notifications, we store your browser's push subscription endpoint to deliver alerts to you and your delegates. Subscriptions are removed when you delete your account or revoke notification permission in your browser.
• FlairTag Identifiers: Unique identifiers that link a FlairTag to your profiles and placements
• Order Information: When you purchase a FlairTag on the website, we collect name, email, shipping address, and payment information processed by our payment partners. See our Returns Policy for defective tags, lost shipments, and refunds.
• Passkey / Saved Credentials: If you use a passkey or your browser's saved credentials to sign in, authentication is handled by your browser and device. We do not receive or store biometric data.

2. Why We Collect This Information

We collect this information solely for the purpose of operating the Tap and Call platform and providing our services. This includes:

• Delivering browser push notifications and routing alerts to you and the people you authorize
• Managing accounts, access permissions, and delegate relationships you set up
• Maintaining placement and FlairTag configuration so taps reach the right destination
• Presenting WiFi guest pass credentials to people who tap a FlairTag in guest pass mode
• Processing optional location a tapper submits with an alert or check-in
• Screening user-provided content for safety before it is saved (see §5)
• Processing FlairTag orders and validating shipping addresses
• Ensuring platform security and preventing unauthorized access

3. Data Ownership and Access

Access to your data is restricted to authorized users only. Only you, family members or caregivers you authorize, and delegates you invite have access to your profile and alert data, according to the permissions you set.

We maintain strict access controls to ensure that your information remains confidential and secure.

4. Data Storage and Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission
• Secure authentication and access controls
• Regular security audits and updates
• Secure cloud storage infrastructure

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.

5. Content Safety Filters

To help protect the people who tap your FlairTag, we apply automated filters to two user-provided fields before they are saved:

• Alert messages are scanned for common patterns that resemble phone numbers or email addresses, to reduce accidental exposure of personal contact information to strangers.
• Redirect URLs are checked against third-party services for adult or explicit content (Cloudflare Family DNS) and known malware or phishing threats (Google Web Risk API).

To screen redirect URLs, we send the domain to Cloudflare and Google for evaluation. No other account or placement data is shared with these services as part of this process.

6. Data Retention

We retain your data for as long as necessary to provide our services and as required by law. If you choose to close your account, you may request deletion of your data, subject to any legal obligations we may have to retain certain information.

7. Third-Party Services

The Tap and Call platform integrates with the following third-party services to operate:

• Cloud Infrastructure (AWS): Data storage, authentication (Amazon Cognito), and serverless compute. Subject to AWS's data processing terms.
• Payment Processing (Stripe): FlairTag purchases on the website. Payment information is handled by Stripe and is not stored on our servers. See our Terms of Use for purchase terms.
• Push Notifications (Web Push): Browser push subscription endpoints are used to deliver alerts to you and your delegates. Subscriptions are removed when you delete your account or revoke notification permission in your browser.
• Address Validation (Google): Shipping addresses entered during checkout are validated via the Google Address Validation API.
• Content Safety Screening (Cloudflare, Google): Redirect URLs are screened using Cloudflare Family DNS and the Google Web Risk API. Only the URL domain is sent. No account data is shared. See §5.

AWS, Stripe, and Google operate under their own privacy policies and terms. We share only the minimum data necessary for each service to function.

8. Website and Checkout

When you sign in or create an account on tapandcall.com, we use Amazon Cognito for authentication.

When you purchase FlairTag on the website, checkout uses Stripe for payment. We collect shipping and order details as described in §1. Card numbers are handled by Stripe and are not stored on our servers.

Our public website does not use advertising or analytics cookies. Fonts and icons may load from third-party CDNs (Google Fonts, Font Awesome) under their respective policies.

9. Passkey & Saved Credentials

You may optionally save your credentials in your browser or password manager, or register a passkey, to sign in to Tap and Call without re-entering your password each time.

Passkey authentication is processed locally on your device by your browser. We do not collect, store, or have access to your biometric data. You can remove saved credentials at any time in your browser or account settings.

10. Children and Minors

Tap and Call accounts must be created by someone 18 or older (or the age of majority in their state), as described in our Terms of Use.

You may create profiles for minors (for example, a child) or pets as part of your use of the service. You are responsible for how you configure FlairTag, placements, and alerts for those profiles, and for obtaining any consent required in your situation.

Tap and Call is not directed at children under 13, and we do not knowingly collect personal information directly from children under 13. If you believe a child under 13 has provided us personal information without appropriate consent, please contact us and we will take appropriate steps to delete it.

11. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We will only disclose the minimum amount of information necessary to comply with such requests.

12. Your Rights

As the owner of your account data, you have the right to:

• Access your data at any time through the platform
• Correct or update inaccurate information
• Control access permissions for family members, caregivers, and delegates you authorize
• Delete your account from account settings. This removes your login, profiles, placements, and related app data. Order records are retained for fulfillment, customer support, and legal requirements.
• Request deletion of your data by contacting us (subject to any legal retention requirements)

California residents. Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you may have the right to know what personal information we collect, request deletion, and request correction of inaccurate information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. To exercise these rights, email tapandcall-support@makergully.com with “California Privacy Request” in the subject line. We will verify your request before responding.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out: