Privacy

Venue accounts

When someone creates a venue account, Tappo stores their name, email, and sign-in method. Sign-in can be a magic link, Google, or Apple. A signed-in session may include an IP address and browser type so the account stays signed in.

The venue record holds the venue name, card design, stamp rules, and subscription status. Payment card details are entered with Stripe. Tappo does not store the full card number.

Guest passes

A guest does not create a Tappo account. Adding the pass to Apple Wallet or Google Wallet lets the venue keep the stamp count, redemptions, and scan history for that pass.

A lock-screen note near the shop is shown by the phone. Tappo does not receive the guest's location. If the venue sends a short form, the answers are stored with that pass.

Messages

Tappo emails venue staff about account activity, stamps, and rewards. Lock-screen messages go only to guests who already hold the pass, and only when the venue's plan includes them.

A copy or a deletion

Write to hello@tappo.ch to ask for a copy of personal data, or to ask for it to be deleted.