Privacy Policy

Tappd is a cross-merchant digital receipt and loyalty app operated by Vice Robotics LLC (“Vice Robotics,” “Tappd,” “we,” “us,” or “our”). This policy explains the information Tappd handles, why we handle it, when it is shared, and the choices available to you. It applies to the Tappd iPhone app, App Clip, website, receipt-claim experience, and related services.

Information we handle

• Account information — your name and email address, provided when you sign in. Authentication is handled by our identity provider (WorkOS); we receive your name, email, and an account identifier.
• Receipt and claim information — merchant, date and time, line items, discounts, taxes, tips, totals, currency, receipt status, and an opaque signed claim token. Participating merchants or their service providers supply claim and receipt information. Tappd is not part of the payment itself.
• Information you create or choose — manually entered receipts, selected receipt photos or PDFs, split participants and allocations, folders, export choices, and preferences.
• Loyalty and consent choices — merchant-specific loyalty identifiers, balances or rewards when available, and your separate choices about receipt storage, loyalty enrollment, marketing, sharing, and aggregate features.
• Technical and support information — standard request metadata such as IP address, device or app information, timestamps, authentication events, security records, and information you choose to send when requesting support.

Information we do not use for Tappd

• No full payment credentials — Tappd does not receive or store your full card number, security code, bank-account credentials, or other credentials that can authorize a payment. A receipt can include limited tender information supplied by a merchant or processor, such as payment type, card brand, and the last four digits.
• No cross-app tracking and no advertising — we do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites.
• No location, contacts, health, or browsing-history data is required to provide Tappd.

How we use your information

We use information to authenticate you; deliver, organize, search, split, and export receipts; show spending and merchant-specific loyalty information; process your consent choices; operate folders and sharing that you initiate; secure and troubleshoot the service; respond to requests; enforce our terms; and comply with law. We do not merge processor identities across unrelated merchants.

Device permissions and local information

Camera access is used only when you choose to scan a receipt. Photo and document imports use Apple’s system pickers so you select the specific item to provide. Notification permission is used only for notifications you enable. Some receipts, attachments, splits, folders, preferences, pending claims, and exports are stored or prepared locally on your device; information you export or share is then governed by the destination you choose.

When information is disclosed

• Service providers — WorkOS provides authentication; Cloudflare provides hosting, object storage, networking, and security; Neon provides managed Postgres database services; and Apple provides the App Store and device system services. Each provider handles information under its own terms and privacy policy.
• Merchants and receipt providers — participating merchants and their service providers supply receipt and loyalty records. Square and, when enabled for a relevant service, Stripe can provide signed processor events and receipt or transaction metadata. We exchange only the information needed to validate, deliver, secure, or support the requested record and do not provide them your full card credentials.
• People you choose — a receipt, split, folder, or export is disclosed when you intentionally share it.
• Legal and business events — we may disclose information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a merger, financing, acquisition, or transfer of assets subject to appropriate protections.

Your choices

• Consent choices — receipt storage and loyalty enrollment are presented separately when applicable, and sharing occurs only when you initiate it. The Account area can show recorded consent status but does not itself revoke every merchant or processing record. Use an unsubscribe control to stop a marketing message, contact the merchant about its loyalty program, or contact Tappd Support for another withdrawal request.
• Export local receipt information from the app without signing in.
• Delete your account from Account → Data controls after signing in and confirming deletion. This permanently queues deletion of the Tappd account and erases Tappd account data from the device. If the control is unavailable, contact support.
• Privacy rights — depending on where you live, you may request access, correction, deletion, or a portable copy; appeal certain request decisions; and opt out of any sale, targeted advertising, or profiling that produces legal or similarly significant effects. Tappd does not currently sell personal information, share it for cross-context behavioral advertising, or use it for such profiling.

To make a privacy request, email support@vicerobotics.com. We may verify your identity and authorized-agent authority before acting. We will respond within the time required by applicable law and will not discriminate against you for exercising a privacy right.

Data retention

We retain account and server-hosted receipt information while your account is active and as needed to provide the features you choose. Local information, including folders, remains on your device until you delete it, use the in-app deletion controls, or remove the app, subject to normal iOS backup behavior. Claim tokens expire or are removed after they are handled. We retain limited security, support, transaction, and legal records for as long as reasonably necessary for fraud prevention, dispute resolution, accounting, or legal compliance. We then delete or de-identify the information unless law requires longer retention.

Security

Network traffic uses HTTPS, sensitive session and pending-claim material uses platform security controls, and access is limited to what is needed to operate the service. No system is perfectly secure. Report a suspected vulnerability without including credentials, card data, or another person’s receipt at support@vicerobotics.com.

Children

Tappd is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

United States state disclosures

In the preceding 12 months, the categories described above may include identifiers; customer records; commercial information such as receipt and purchase history; internet or other electronic network activity; and inferences used only to provide user-requested organization or insights. Sources include you, your device, identity and hosting providers, and participating merchants or receipt providers. We use and disclose these categories for the business purposes described in this policy. We do not use or disclose sensitive personal information to infer characteristics about you.

Changes

We may update this policy as Tappd changes. We will post the revised policy with a new effective date and provide additional notice in the app or by email when required by law.

Contact

Questions or requests? Use Tappd Support or email support@vicerobotics.com. Vice Robotics LLC is the service operator.