Privacy Policy

Privacy Policy

Last updated: October 10, 2026

This Privacy Policy explains how TapSafe LLC (“TapSafe”, “we”, “us”, “our”), a company based in the United States, collects, uses, and shares information when you use the TapSafe mobile app and website (the “Services”), and the choices and rights you have.

Controller: TapSafe LLC

Contact: support@tapsafe.app

Registered office: 1021 E Lincolnway, Cheyenne, WY 82001, United States

1) Information we collect

Account & identifiers — email, internal user ID, device identifiers, installation identifiers, and similar account or device-related identifiers.

Location — precise location when you enable tracking or trigger an emergency feature to share with your chosen contacts. This may include background location if you enable it.

Contacts you add — names and phone numbers of trusted contacts you store in TapSafe. We do not read your device address book unless you explicitly import contacts. When you add a contact, you confirm they have consented to receive non-marketing emergency alerts from you where required. TapSafe may record a timestamp of that confirmation for compliance and auditing purposes.

Usage & diagnostics — app interactions, crash logs, performance metrics, technical diagnostics, and basic analytics.

Purchases & subscriptions — non-sensitive purchase metadata such as product ID, transaction status, expiration, renewal status, cancellation status, and related subscription or entitlement information provided by app store billing systems or subscription processors.

Emergency messages and messaging records — messages may be composed on-device or processed through our servers or service providers to deliver emergency-related communications. We may process message content transiently where needed for delivery. We may also retain related metadata and service records, such as send time, recipient, delivery status, estimated or actual message cost, messaging allowance or top-up balance, spend ledger entries, invite or resend counts, opt-in or opt-out events, and technical, fraud-prevention, or abuse-prevention signals needed to operate, secure, troubleshoot, and enforce limits on the messaging service.

Sources — we collect this information directly from you, automatically from your device when you use the Services, and from service providers such as app stores and subscription processors.

Sensitive information — precise geolocation is considered “sensitive personal information” under some U.S. state privacy laws. We use it only to provide the features you request, such as emergency alerts and location sharing with your chosen contacts, and to keep the Services safe and secure. We do not use it to infer characteristics about you or for advertising.

2) How we use information

We use personal data to:

(a) provide TapSafe’s core functionality, including emergency alerts, location sharing you authorize, and trusted contact features;

(b) manage subscriptions, entitlements, messaging allowances, and purchased top-ups;

(c) operate, secure, maintain, and improve the Services;

(d) monitor usage, troubleshoot delivery failures, and support users;

(e) prevent spam, abuse, fraud, false emergencies, unlawful messaging, and attempts to circumvent service limits;

(f) comply with legal obligations and carrier, platform, or app store requirements; and

(g) communicate service, security, and support-related updates.

SMS opt-out: Recipients of TapSafe emergency SMS can reply STOP at any time to unsubscribe that phone number from future TapSafe emergency SMS. TapSafe does not send marketing or promotional text messages.

3) Legal bases (EEA/UK)

Where GDPR or UK GDPR applies, we rely on the following legal bases as relevant:

Contract — to provide the Services you request, including account functionality, emergency features, messaging-related functionality, subscription management, and support.

Consent — where required, such as for location permissions, notifications, contacts access, camera or microphone permissions, or other device-level permissions.

Legitimate interests — to secure the Services, prevent fraud and abuse, enforce fair-use and messaging limits, troubleshoot failures, maintain reliability, perform basic analytics, improve the Services, and establish, exercise, or defend legal claims.

Legal obligation — where processing is required to comply with applicable law, lawful requests, accounting, tax, consumer protection, regulatory, or other legal obligations.

You can withdraw consent at any time for permissions-based processing through your device or app settings. Withdrawal does not affect prior lawful processing.

4) Sharing & processors

We do not sell personal data.

We share personal data only as needed to operate the Services, including with service providers and processors such as Supabase (hosting, database, authentication), RevenueCat (subscriptions), Superwall (paywall), Apple and Google (device services and in-app purchases), messaging and telecommunications providers such as Twilio and downstream carriers, and analytics, crash-reporting, security, and infrastructure vendors.

These providers receive only the information reasonably necessary for their role and are subject to contractual or legal safeguards where required.

Text messaging opt-in data, consent records, and related emergency messaging data are not sold, rented, or shared for marketing purposes. They are disclosed only where needed to deliver, support, secure, monitor, or comply with the messaging service.

We may also disclose information where required by law, to respond to lawful requests, to protect the rights, property, or safety of TapSafe, users, recipients, or others, or in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business.

5) Retention

We keep personal data only for as long as necessary for the purposes described in this Policy, including to provide the Services, comply with law, resolve disputes, enforce our agreements, and protect the security and integrity of TapSafe.

In general:

Account and trusted contact data — kept while your account is active and for a limited period after deletion or closure, unless longer retention is required by law.

Location data and emergency-session data — retained only for the period reasonably necessary to provide the feature, support reliability, address related support or safety issues, and comply with legal obligations, after which it is deleted, anonymized, or de-identified according to our retention practices.

Messaging metadata and service records — such as send logs, delivery outcomes, opt-out records, spend ledger entries, invite or resend counts, and abuse-prevention or security records, are retained for as long as reasonably necessary to operate the messaging service, enforce limits, investigate misuse, respond to support issues, comply with legal or carrier requirements, and establish, exercise, or defend legal claims.

Purchase and transaction records — retained as required for billing, tax, accounting, fraud prevention, legal compliance, and dispute resolution.

When data is no longer needed, we delete, anonymize, or securely de-identify it.

6) Your choices

You can manage location and notifications in your device settings, add or remove contacts in the app, and manage subscriptions through Apple or Google.

Where offered, you may also opt out of analytics or similar optional data processing through in-app controls.

7) International transfers

TapSafe is based in the United States, and personal data is processed and stored in the United States and in other countries where our service providers operate. If you are located in the European Economic Area, the United Kingdom, or Switzerland, we transfer personal data to the United States using lawful transfer mechanisms, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum where applicable) or the EU-U.S. Data Privacy Framework where a provider is certified, together with additional safeguards where appropriate.

8) Children

TapSafe is intended for adults and is not directed to children under 13 (or the minimum age required in your region). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact support@tapsafe.app and we will delete it.

9) Your rights

Depending on where you live and applicable law, including U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA), the GDPR, or the UK GDPR, you may have the right to request access to or a copy of your personal data, correction, deletion, portability, objection, restriction, or information about our processing practices, and to opt out of the sale or sharing of personal information, targeted advertising, or certain profiling (we do not engage in these).

U.S. residents — residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with consumer privacy laws may exercise the rights available under those laws. We will not discriminate against you for exercising your privacy rights.

How to make a request — email support@tapsafe.app from the email address associated with your account. We will verify your request by matching it to the information in your account and respond within the time required by applicable law (generally 45 days under U.S. state laws, or one month under the GDPR). You may use an authorized agent to submit a request on your behalf; we may ask for proof of the agent’s authority and verify your identity directly.

Appeals — if we decline to act on your request, you may appeal by emailing support@tapsafe.app with the subject line “Privacy request appeal”. We will respond within the time required by law. If your appeal is denied, you may contact your state Attorney General.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may also lodge a complaint with your local data protection authority.

10) Account deletion & data erasure

TapSafe users may request deletion of their account and associated data at any time using one of the following verified methods:

In-app: Go to Settings → Account → Delete Account.

Website: Visit the TapSafe account deletion page on our website and submit a verified deletion request from your registered email address.

Email: Send a request from your account email to support@tapsafe.app with the subject line “Delete my TapSafe account”.

We aim to complete most verified deletion requests within 7 days, and in all cases within 30 days unless a longer period is required by law.

Once verified, we will delete your account profile, trusted contacts, and stored location history or emergency message metadata, except where limited retention is required for fraud prevention, security, audit logging, legal compliance, or the establishment, exercise, or defense of legal claims.

Purchase records managed by Apple, Google, RevenueCat, or other payment platforms remain subject to their own retention practices.

If you reinstall the app or create a new account after deletion, your previous data cannot be recovered.

11) Security

We use industry-standard measures such as encryption in transit and access controls. However, no system is 100% secure.

12) U.S. state privacy disclosures (including California)

We do not sell or share personal information, as those terms are defined under the CCPA and similar U.S. state laws, and we have not done so in the preceding 12 months. We do not use personal data for targeted advertising, and we do not knowingly sell or share the personal information of consumers under 16.

Categories collected — in the preceding 12 months, we have collected the following categories of personal information for the business purposes described in Section 2, and disclosed them to the categories of service providers described in Section 4: identifiers (such as email address, user ID, and device identifiers); personal information described in California Civil Code § 1798.80(e) (such as the names and phone numbers of trusted contacts); commercial information (such as subscription and purchase records); internet or other electronic network activity (such as app usage and diagnostics); and geolocation data. We retain each category as described in Section 5.

Sensitive personal information — we collect precise geolocation and use it only for purposes permitted by law, such as providing the Services you request and keeping them safe and secure. We do not use or disclose sensitive personal information to infer characteristics about you.

Global Privacy Control and Do Not Track — because we do not sell or share personal information, there is nothing to opt out of; however, we treat Global Privacy Control (GPC) signals as a valid request to opt out of sale or sharing. Our Services do not respond to browser “Do Not Track” signals, as there is no common industry standard for them.

California “Shine the Light” — we do not disclose personal information to third parties for their own direct marketing purposes.

13) Automated decision-making

TapSafe does not use automated decision-making that produces legal or similarly significant effects in the sense of applicable data protection law.

However, we may use automated systems and rules to detect spam, fraud, abuse, unusual messaging activity, delivery risk, policy violations, or attempts to circumvent service limits, and to apply temporary restrictions or pauses to messaging-related features. If you believe a restriction was applied in error, you may contact support@tapsafe.app for review.

14) Changes

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date and, where appropriate, notify you in-app or by email.

Questions? Contact us at support@tapsafe.app or by mail at TapSafe LLC, 1021 E Lincolnway, Cheyenne, WY 82001, United States.