Legal

Privacy Policy

Last updated: October 9, 2026

1. Information We Collect

We collect information you provide directly to us (email, username, profile content) and information collected automatically (IP address, device data, usage analytics) when you use our services.

2. How We Use Your Information

We use your information to provide, maintain, and improve our services, communicate with you, monitor and prevent fraud, and ensure the security of our platform.

3. Data Retention and Account Suspension

We retain your personal information for as long as your account is active. However, if your account is suspended or terminated due to a violation of our Terms of Service, we reserve the right to retain certain data (such as IP addresses and email addresses) securely to enforce the ban and prevent the creation of new accounts. Content associated with banned accounts will be removed from public view immediately.

If you sign up but do not confirm your email address within 24 hours, the unconfirmed account and its username are deleted.

4. Data Deletion Rights

You have the right to request the deletion of your personal data. However, this right is not absolute. We may retain data if we are legally required to do so, or if it is necessary for legitimate business interests such as fraud prevention, dispute resolution, or enforcing our Terms of Service.

5. Children's Privacy (Strict Policy)

6. Contact Form and Messages

Account holders can turn on a contact form on their public page. When you send a message through it, we store your name, email address and message so the account holder can read it in their private inbox and reply to you by email. This information is encrypted when stored. We also keep one-way hashes of your email address and IP address to prevent spam and to let the account holder block unwanted senders.

To filter out automated spam, contact forms use Cloudflare Turnstile, which processes information about your browser and connection under Cloudflare's privacy policy. Messages are deleted automatically after 180 days, or sooner if the account holder deletes them or their account. We do not include message content in notification emails.

If you are logged in to tapin.now when you send a message, it is linked to your account: the account holder sees your username instead of your email address, and can reply to you inside tapin.now. Your replies and theirs are stored the same way (encrypted, deleted after 180 days). Either of you can delete a conversation from your own inbox; it is removed from our systems once both of you have deleted it.

7. Appointment Bookings

Account holders can let visitors book appointments from their public page. When you book, we store your name, email address, optional note, the appointment type and time, so the account holder can see the booking in their dashboard and contact you. Your name, email address and note are encrypted when stored, and we keep a one-way hash of your email address to limit repeat bookings.

We email you a confirmation with a private link to cancel, and we email the account holder about new and cancelled bookings. Booking forms use Cloudflare Turnstile in the same way as contact forms. Bookings are deleted automatically 180 days after the appointment, or sooner if the account holder deletes their account.

8. Notifications

If you turn on notifications on a device, your browser gives us a push address from its notification service (for example Google, Mozilla, Apple or Microsoft). We store that address so we can tell your device when you have a new message. Notifications contain no message content. You can turn them off at any time in your dashboard settings or your browser, and the address is removed when it stops working or you delete your account.

9. Explore and Reports

Explore: if you choose to be listed in Explore, your display name, username and profile photo can be found by anyone searching tapin.now. Listing is off unless you turn it on, and you can turn it off at any time.

Reports: when someone reports a message or a page, we keep the report, who made it, and an encrypted copy of the reported message so we can review it, even if the conversation is later deleted. Reports are used only to enforce our Terms of Service.

10. Contact Us