Buy a tag

Legal

Privacy Policy

Last updated

Effective date: September 28, 2026

1) Overview

PawTapp provides a mobile app and web pet profiles accessible via NFC tags. This policy explains what data we collect, how we use it, and your rights. Purchases on our online store at pawtapp.co are covered by the store's own privacy policy.

2) Categories of data we collect

Identifiers (CCPA Category A):

  • Owner full name
  • Phone number
  • Email address (with Sign in with Apple, the address Apple shares with us, which may be a private relay address)
  • Optional address and pickup instructions
  • Account identifiers (user_id)

Pet profile content:

  • Pet name, species, breed, gender and photo
  • Public "about" text and Instagram handle
  • Emergency health information you add
  • Voice messages you record or generate
  • AI portraits you generate, and the photo you choose for them

Usage data:

  • Tag tap events (timestamp, resolver outcome)
  • IP address and user-agent for security and abuse prevention

Purchase data:

  • Your subscription status and your App Store purchases (credits and marketplace items), which we receive from Apple through RevenueCat

AI voice data:

  • Text you enter to generate AI voice messages (sent to our text-to-speech provider, ElevenLabs, for processing)
  • Selected voice model identifier
  • Generated audio files (stored in your pet profile)

Device/support data:

  • Device model and OS version when logging NFC write verification failures (for debugging defective tags)

3) How we use your data

We use your data to:

  • Provide pet profiles and emergency contact actions
  • Enable tag linking and tag lifecycle features (lost/suspended/revoked)
  • Provide voice message playback on profiles
  • Generate AI voice messages using text-to-speech on your behalf (Pro plan)
  • Generate AI pet portraits from a photo you choose
  • Process your subscription and in-app purchases
  • Detect abuse and protect profiles from scraping
  • Provide support and troubleshoot NFC/linking issues
  • Comply with legal obligations

4) Privacy controls

  • Privacy Mode: Public vs Emergency-only
  • Lost Mode changes what is shown on the Lost profile view

5) Legal bases (GDPR, if applicable)

  • Legitimate interests: security logging, abuse prevention, service operation
  • Contract/performance: providing the service you request

6) Sharing and third-party providers

We share data with service providers only as needed to operate PawTapp:

  • Supabase: hosting, database, sign-in and file storage (pet photos, voice messages and AI portraits). It holds your account, pet profile and tag data.
  • Apple: Sign in with Apple, and App Store payment for subscriptions and in-app purchases. Apple processes payment; we never receive or store payment card data.
  • RevenueCat: subscription and purchase management. It receives your PawTapp account identifier and your App Store purchase records.
  • ElevenLabs: AI voice generation (Pro plan). It receives the text you enter and the voice you select. ElevenLabs may keep a history of these requests under its own terms.
  • fal.ai: AI pet portraits. It receives the photo you choose and the style you select, and returns the generated portrait.
  • Resend: email delivery. It receives your email address and the sign-in codes we send you.
  • Vercel: hosting for the public web pet profiles at pawtapp.me. It receives standard request data, such as IP address and browser type, when a profile is viewed.
  • Cloudflare: DNS, and forwarding of the emails you send to our support and privacy addresses to our team's mailbox.

Buying a tag in the app's Shop tab takes place on our Shopify store (pawtapp.co) and is covered by that store's privacy policy.

We do not sell your personal information.

We maintain Data Processing Agreements (DPAs) with our service providers where required by applicable law.

7) Retention

By default, we retain your data until you delete your account. Security logs may be retained for a limited period as needed to prevent abuse and comply with legal requirements.

8) Your rights

You can:

1) Access your data (export as JSON)

2) Download your pet profile and tap history (portability)

3) Request account deletion (completed within 30 days)

9) Children

PawTapp is intended for users age 13 and older. We do not knowingly collect data from children under 13.

10) International transfers

If we use providers outside your country, we will use appropriate safeguards for cross-border transfers, where required.

11) Cookies and web tracking

The PawTapp public web pet profiles do not set cookies and do not use analytics or advertising trackers.

12) Contact

For privacy requests, contact:

privacy@pawtapp.co