TapBack's privacy approach
TapBack is a school lost-property QR label pilot. It is designed to collect only the personal information needed to create labels, deliver pilot tag packs, send found-item alerts, handle support, process payment, and improve the service with family feedback.
TapBack does not need student dates of birth, student ID numbers, medical information, school passwords, school system access, class lists, or family contact details printed on labels.
Information TapBack collects
- Parent or guardian name, email address, school or club if supplied, and delivery address for pilot tag pack fulfilment.
- Plan choice, consent records, checkout status, and payment reference information from Stripe. TapBack does not store card numbers.
- Private setup codes, tag codes, optional item nicknames, and tag status such as active, lost, inactive, or reissued.
- Finder messages, where-found details, and optional finder contact details entered by the person scanning a tag.
- Signup, founder, and pilot feedback submitted by families.
- Basic technical records needed to operate and secure the website.
How TapBack uses information
- To create and manage private QR labels.
- To deliver pilot tag packs and setup instructions.
- To send found-item alerts to the family linked to a tag.
- To respond to support requests and fix product issues.
- To understand whether the pilot is useful, clear, and safe enough to continue.
- To share aggregated pilot results with the school, such as number of tags used, scans received, and items returned.
What finders and schools can see
A finder who scans a TapBack label sees a private message form. The family's email address and phone number are not shown on the public finder page and are not printed on the label.
TapBack does not require the school to upload family data, connect school systems, process payments, or manage customer accounts. If pilot results are shared with the school, they should be aggregated unless a family has clearly agreed otherwise.
Storage and service providers
TapBack stores pilot records, including delivery addresses, in TapBack's Supabase database. TapBack uses Vercel for hosting, Resend for email delivery, and Stripe for payments. Stripe handles payment card details; TapBack does not store card numbers.
Family delivery addresses are stored so TapBack can prepare and send pilot tag packs. They are not shown on public finder pages, not printed on labels, and not stored in school systems. Access to TapBack admin data is limited to people helping run and support the pilot.
Access, correction, and deletion
Families can ask TapBack to access, correct, delete, or de-identify their information by emailing info@tapback.school. TapBack will keep pilot information only for as long as it is needed for the pilot, support, legal, accounting, security, or product-improvement purposes.
Contact
Questions about privacy can be sent to info@tapback.school.