Privacy Policy

TapCash does not collect, transmit, sell, or share any personal data. Specifically, the app:

• makes no network requests — it has no server and works fully offline;
• contains no analytics, telemetry, crash-reporting, advertising, or tracking SDKs;
• does not track you across other apps or websites, and requests no advertising identifier;
• does not collect location, contacts, health, or biometric data;
• creates no online account and asks for no email, phone number, or name of the person using it.

To do its job, TapCash saves operational data locally on the device, in the app’s private storage. This information never leaves the device unless you choose to export it (see “Exporting your data” below). It includes:

• Operator profiles — a display name and a role (staff or admin) chosen by the event administrator. PINs are stored only as a salted cryptographic hash, never as plain text.
• Event configuration — the event name, currency, an event identifier, and a signing key used to validate cards.
• Product catalogue — product and category names, prices, and any product images you add from your photo library.
• Sales log — a record of each transaction (amount, time, outcome, the card’s identifier, and the operator name) used for the on-device analytics dashboard and end-of-day reconciliation.
• App preferences — such as your chosen language and the currently signed-in operator.

Card balances themselves are stored on the physical NFC cards, secured with a cryptographic signature. TapCash reads and writes these cards only while a card is physically tapped to the device.

TapCash requests two permissions, each used only for the feature described and only on the device:

• Camera — to scan a QR code when copying an event’s setup from one device to another. No images are stored or transmitted.
• Photos / Photo library — so an administrator can choose a picture for a product tile. Selected images are stored locally within the app only.

It isn’t. TapCash has no back-end and no third-party services, so there is nobody for us to share data with. We do not sell or disclose any information to anyone.

An administrator can export the sales log as a CSV file from within the app (Settings → Data). This action is initiated entirely by you, and once exported, the file is under your control and leaves the scope of this app and this policy. Device-to-device event transfer via QR code likewise happens directly between two devices you control, with no server in between.

Because all data is local, you are in full control of it:

• An administrator can edit or remove operators and products at any time in the app.
• Uninstalling TapCash permanently deletes all app data from the device.
• Re-provisioning a device to a different event replaces the previous event’s data on that device.

Operator PINs are stored as salted hashes, card data is cryptographically signed to detect tampering, and repeated failed sign-in attempts lock an account. Because TapCash never sends data over a network, your information is not exposed to interception in transit.

TapCash is a business tool for event operators and is not directed to children. It does not knowingly collect any information from anyone, including children.

We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date. Continued use of the app after an update constitutes acceptance of the revised policy.

Questions about this policy or your data? Contact Digital Zanat at privacy@digitalzanat.com or visit the TapCash page.

This policy is provided in good faith and describes the app’s behaviour at the “Last updated” date above.