Privacy Policy

1. Information We Collect

To provide and operate the Tap and Call platform effectively, we collect and store the following types of information:

• Account Information: Name, email address, and authentication credentials for your account and any delegates you authorize
• Profile Details (Pet, Person, Property): Names and details for the profiles you create in the app
• Placement Data: User-defined placement names and configurations you set up (for example, "collar" or "front door"). This is not GPS or device location data — we do not collect your device's location.
• Alert Messages and Placement Content: Optional messages and URLs you configure for placements, which may be displayed to anyone who taps your FlairTag
• Alerts and Service Requests: Information submitted when someone taps your FlairTag, including request type, context, and timestamp
• Push Notification Tokens: Device tokens used to deliver push notifications to you and your delegates. These are removed when you delete your account.
• FlairTag Identifiers: Unique identifiers that link a FlairTag to your profiles and placements
• Order Information: When you purchase a FlairTag — name, email, shipping address, and payment information processed by our payment partners

2. Why We Collect This Information

We collect this information solely for the purpose of operating the Tap and Call platform and providing our services. This includes:

• Delivering push notifications and routing alerts to you and the people you authorize
• Managing accounts, access permissions, and delegate relationships you set up
• Maintaining placement and FlairTag configuration so taps reach the right destination
• Screening user-provided content for safety before it is saved (see §5)
• Processing FlairTag orders and validating shipping addresses
• Ensuring platform security and preventing unauthorized access

3. Data Ownership and Access

Access to your data is restricted to authorized users only. Only you, family members or caregivers you authorize, and delegates you invite have access to your profile and alert data — according to the permissions you set.

We maintain strict access controls to ensure that your information remains confidential and secure.

4. Data Storage and Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission
• Secure authentication and access controls
• Regular security audits and updates
• Secure cloud storage infrastructure

While we take every reasonable precaution to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards of data protection.

5. Content Safety Filters

To help protect the people who tap your FlairTag, we apply automated filters to two user-provided fields before they are saved:

• Alert messages — scanned for common patterns that resemble phone numbers or email addresses, to reduce accidental exposure of personal contact information to strangers.
• Redirect URLs — checked against third-party services for adult or explicit content (Cloudflare Family DNS) and known malware or phishing threats (Google Web Risk API).

To screen redirect URLs, we send the domain to Cloudflare and Google for evaluation. No other account or placement data is shared with these services as part of this process.

6. Data Retention

We retain your data for as long as necessary to provide our services and as required by law. If you choose to close your account, you may request deletion of your data, subject to any legal obligations we may have to retain certain information.

7. Third-Party Services

The Tap and Call platform integrates with the following third-party services to operate:

• Cloud Infrastructure (AWS): Data storage, authentication (Amazon Cognito), and serverless compute. Subject to AWS's data processing terms.
• Payment Processing (Stripe): FlairTag purchases. Payment information is handled by Stripe and is not stored on our servers.
• Push Notifications (Apple APNs, Google FCM): Device tokens and notification payloads are transmitted to Apple and Google to deliver alerts to your device.
• Address Validation (USPS): Shipping addresses entered during checkout are validated via the USPS API.
• Content Safety Screening (Cloudflare, Google): Redirect URLs are screened using Cloudflare Family DNS and the Google Web Risk API. Only the URL domain is sent — no account data. See §5.

AWS, Stripe, Apple, and Google operate under their own privacy policies and terms. We share only the minimum data necessary for each service to function.

8. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency). We will only disclose the minimum amount of information necessary to comply with such requests.

9. Your Rights

As the owner of your account data, you have the right to:

• Access your data at any time through the platform
• Correct or update inaccurate information
• Control access permissions for family members, caregivers, and delegates you authorize
• Delete your account and all associated data at any time from within the app
• Request deletion of your data by contacting us (subject to any legal retention requirements)

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out: