Privacy Policy

TapCharm ("TapCharm," "we," "us") is currently operated as [business / entity name], based in the Philippines. This policy covers tapcharm.asia, the public profile pages hosted there, and the NFC charms that link to them.

If you have questions about this policy or how your data is handled, you can reach us at tapcharm.asia@gmail.com.

We collect information in a few different ways, depending on how you use TapCharm.

Information you give us directly

• Account details: your email address and password (handled by our authentication provider), and an optional backup email for account recovery.
• Profile details: your display name, handle, bio, role, company, phone number, public email, theme color, profile photo, and cover image, plus the links you add to your page.
• Anything you send us directly, like a bug report or a content report.

Information your visitors give us

• When someone taps your charm or visits your profile and chooses to "Connect," they can submit their name, email, phone number, and a message. This becomes a lead in your dashboard. We store it so we can show it to you and notify you, on your behalf.
• If someone reports a profile for breaking our rules, we collect the email address and details they provide, so our team can review it.

Information we collect automatically

• When your profile is viewed or a link is clicked, we log basic details: device type, browser, referring source, and whether the visit came from a QR code or an NFC tap. We don't log IP addresses or precise location alongside this data.
• If you enable push notifications, your browser gives us a subscription token so we can deliver alerts to that specific device. We don't use this to track you elsewhere.
• Your charm's unique ID, and which profile it's linked to, so tapping it opens the right page.

• To run the core service: create and display your profile, activate your charm, and keep your links working.
• To notify you when someone leaves their details on your profile, by email and/or push notification, based on your settings.
• To respond to support requests, bug reports, and content reports.
• To keep the platform safe: detecting abuse, rate-limiting suspicious activity, and enforcing our Terms.
• To back up our database, so accidental data loss doesn't cost you your profile.

We don't sell your personal information, and we don't use it for third-party advertising.

We use a small number of service providers to run TapCharm. We share only what each one needs to do its job:

• Supabase: authentication, our database, and file storage for images.
• Vercel: hosting, plus privacy-friendly, cookieless analytics and performance monitoring.
• Upstash: short-lived rate-limiting data, used only to slow down abusive traffic. Nothing here is kept long-term.
• Our email provider: sending verification, recovery, and lead-notification emails.
• Discord: internally, to alert our team when a bug or content report comes in. This isn't visible to the public.

And of course: whatever you choose to put on your public profile is, by design, visible to anyone who taps your charm or visits your page. Don't add anything there you'd rather keep private.

We keep your account and profile information for as long as your account is active. If you deactivate your account from Settings, your public profile goes offline and your charms stop working, but your data isn't erased right away, it's kept for up to 30 days in case you'd like to reactivate. If you'd like your data deleted sooner, or entirely, email us at tapcharm.asia@gmail.com and we'll take care of it.

We also keep routine database backups for disaster recovery. These follow their own retention schedule and aren't used for any other purpose.

Under the Philippines' Data Privacy Act of 2012, you have the right to be informed about how your data is used, to access it, to correct it, to object to certain uses, and to request that it be erased or blocked, subject to some legal exceptions, like records we're required to keep.

Most of this you can already do yourself: update or remove your profile details, links, and photos any time from your dashboard. For anything else, including a full data export or deletion request, email us at tapcharm.asia@gmail.com.

If you left your name, email, or phone number on someone's TapCharm profile, that information belongs to the profile owner, think of it like handing someone a business card. They can see it in their dashboard and may contact you directly. If you'd like your details removed from our systems entirely, email tapcharm.asia@gmail.com and we'll help.

TapCharm is intended for people who are at least 18 years old, or who have a parent or guardian's permission to use it. We don't knowingly collect personal information from children, and if we learn that we have, we'll delete it.

We use industry-standard safeguards: encrypted connections, database-level access controls so your data is only reachable by you, rate-limiting to slow down abuse, and hardened session handling. No system is perfectly secure, but we take this seriously and keep improving it.

Our service providers may store or process data outside the Philippines. Wherever your data is processed, we take reasonable steps to keep it protected to the standard described in this policy.

We use one essential cookie to keep you signed in. We don't use advertising or cross-site tracking cookies, and our analytics run without cookies at all.

If we make meaningful changes to this policy, we'll update the date at the top of this page. If a change is significant, we'll do our best to let you know directly.

Questions, requests, or concerns about your data? Reach us at tapcharm.asia@gmail.com.