TAPINPrivacy Policy
Last updated: November 7, 2026
TapIn ("TapIn," "we," "us") is an event check-in app operated by Matthew Dysart in California. This policy explains what we collect, why, who can see it, and how to delete it. We collect only what the app needs to work. We do not sell your information, show ads, or track you across other apps or websites.
What we collect
| Information | Why we need it |
|---|---|
| School email address | To sign you in with a one-time code and confirm you have a school (.edu) email. |
| Full name | So hosts can see who checked in to their event. |
| Date of birth | To confirm you are 18 or older, and to show hosts a self-reported "21+" or "under 21" tag. We do not verify it. |
| Check-in records | Which event you checked in to and when, so the host has a guest list. |
| Account and security logs | Sign-in activity, limits on repeated scans, and a record of host actions (such as creating an event or exporting a list) to prevent abuse. |
Camera: TapIn uses your camera only to read QR codes. Images are processed on your device and are never saved or sent to us.
We do not collect your location, contacts, photos, ID documents, or payment information.
Who can see your information
- Hosts and door staff of an event you check in to can see your name, your check-in time, and the self-reported 21+ tag. They cannot see your email or date of birth.
- Other guests cannot see that you checked in, and you cannot see other guests.
- Hosts can export their event's guest list (name, check-in time, self-reported 21+) as a PDF or spreadsheet. Once exported, that copy is the host's responsibility.
- TapIn's operator can access the database to run, secure, and support the app, for example to respond to a deletion request or investigate abuse.
Service providers
We use a few trusted companies to run TapIn. They process data only on our behalf:
- Supabase: database and sign-in (hosted in the United States).
- Resend: sends your sign-in code emails.
- Apple: App Store and TestFlight distribution.
We may share information if required by law, or to protect the safety of our users or the public.
How long we keep it
- Check-in records are automatically deleted 30 days after the event.
- Your account (email, name, date of birth) is kept until you delete it.
- Security logs are kept only as long as needed to prevent abuse.
Deleting your account
In the app, go to Account → Delete my account. This permanently removes your profile and all of your check-ins. You can also email support@tapin-events.com from your account's email address and we will delete it for you.
Your rights
You can ask us what information we have about you, ask us to correct it, or ask us to delete it. California residents have these rights under the California Consumer Privacy Act (CCPA). We will not treat you differently for using them. Email support@tapin-events.com.
Security
Your data is encrypted in transit and at rest. Database rules limit each user to only the data they are allowed to see, and sign-in uses one-time email codes instead of passwords. No system is perfectly secure, but we work to protect your information.
Age requirement
TapIn is only for people 18 and older. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has an account, contact us and we will delete it.
Changes
If we change this policy, we will update the date above and, for significant changes, notify you in the app.
Contact
Email support@tapin-events.com.