Privacy Policy

Tagbit is operated by Kratue (“we”, “us”). This policy explains what we collect when you use the Tagbit apps for iPhone and Android, the Tagbit App Clip, the web console and the pages that open when someone taps a Tagbit tag, and what we do with it.

The short version: we collect what we need to run your tags, we encrypt the sensitive parts, we never sell or share your data, we don’t show ads, and you can delete your account at any time.

What we collect

Your account

• Your name, email address and profile picture from the sign-in method you choose (Apple, Google, or email and password), or an avatar you pick instead.
• Which sign-in method you use, when you created your account and when you last used it.

Sign-in is handled by Google Firebase Authentication. If you use email and password, your password goes to Firebase and is never seen or stored by us. If you use “Hide My Email” with Apple, we only receive Apple’s relay address.

Your tags

• What each tag does: for example a link, a contact card, a Wi-Fi network name, a phone number, a location or a note.
• Wi-Fi passwords, which are encrypted with keys held in Google Cloud Key Management Service before they are stored.
• If you protect a tag with a PIN, a one-way hash of the PIN. We never store the PIN itself.
• If a tag is private: the email addresses you invite and, for each device that opened it, a label (the email or the name you gave the invite link) and when it was added and last opened. Device passes and invite links are stored only as one-way hashes.
• Whether a tag is locked or turned off, and when it was created and changed.
• A count of how many times each tag is tapped, stored by day, so you can see it in the console. The count has no name, account, or IP address attached.
• A history of changes to your tags (which tag, what kind of change, and when), without the tag’s contents.

When someone taps a tag

People who tap your tags don’t need an account. We keep a count of taps per tag per day, and nothing about who tapped. To protect tags against abuse, such as guessing PINs or scanning for tags, we use the IP address of each request to count attempts. These counters are deleted automatically, within an hour at most.

If someone asks for a link to a private tag, we email it only if the tag’s owner invited that address, and we don’t keep the address they typed. A browser that opens a private tag keeps a cookie for that tag holding its device pass, so it opens without asking again; it’s used for nothing else.

Checking that requests are genuine

Our apps use Firebase App Check, which relies on Apple App Attest and DeviceCheck on iPhone and Google Play Integrity on Android, to confirm that requests come from a genuine copy of the app. These services exchange short-lived tokens that don’t identify you, and we don’t store them.

Error reports and logs

If our server hits an error, a report goes to Sentry, our error-monitoring provider. We strip request contents, headers, query strings and user details from these reports before they are sent. Our hosting providers keep standard request logs, which include IP addresses, for a limited time.

Premium purchases

If you buy Premium, Apple, Google Play or (on the web) our payment provider takes the payment; we never see or store your card details. RevenueCat, which manages subscriptions for us, receives your Tagbit account ID and the purchase details from the store, and tells us whether Premium is active, when it renews or ends, and where you bought it. On the web, the checkout page also asks for your email address for the receipt. We keep a count of tags you’ve written so Basic’s limits work.

AI feature

The AI tab sends what you type to Google’s Gemini API using your own Gemini key. Before your first request, the app asks for your consent. You can withdraw it at any time by removing your Gemini key in Settings, which stops all AI requests.

On tagbit.app, Premium members can describe a tag and have it drafted with AI. That description goes from our server to Google’s Gemini API, which returns a draft for you to check; we don’t store the description, and nothing is saved until you create the tag.

Stored only on your device

• The history of tags you’ve read with the app, and your settings, such as the theme.
• If you choose to add your own Google Gemini API key for the app’s AI feature, it is kept in your device’s secure storage. What you type into that feature is sent from your device directly to Google’s Gemini API under Google’s terms; it doesn’t pass through us.
• On the website, your browser remembers your sign-in and display preferences (theme, sidebar). We don’t use advertising or analytics cookies.

What we don’t do

• We never sell or share your personal information. Not for money, not for advertising, not for anything else.
• We don’t show ads, and we don’t track you across other companies’ apps or websites.
• We don’t use analytics or advertising SDKs in our apps.

How we use it

To provide Tagbit: signing you in, storing your tags and showing what a tag does when it’s tapped. To keep it secure: rate limiting, PIN protection, blocking abuse and fixing errors. And to contact you about your account if we need to. We don’t use your data for anything else.

Public and private tags

Anyone who taps a public tag, or opens its link, sees what the tag does. We keep tag pages out of search engines and refuse automated scrapers, but a person with the link can always see it. Contact cards start public.

A private tag opens only for people you invite, on devices they approve with a one-time link. Other tag types start private. You can add a PIN to either kind.

Who processes your data

We use these providers to run Tagbit. They process data on our behalf and only as needed to provide their service:

• Google (Firebase Authentication, Cloud Firestore, Cloud Key Management Service and App Check), in the United States.
• DigitalOcean (our API servers and cache), in New York, United States.
• Vercel (our website and tap pages), in the United States.
• Sentry (error monitoring).
• Resend (sending the one-time links for private tags), in the United States.
• RevenueCat (subscription management) and, for web purchases, Stripe (payments), in the United States.
• Apple and Google, when you sign in with them, and Apple and Google Play for app distribution and App Check.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or others.

How long we keep it

We keep your account and tags for as long as you have an account. When you delete your account, we immediately delete your profile, all your tags, their tap counts and their change history, and your sign-in from our systems. Your tags stop working at that moment.

Security and processing logs are kept for at least one year where the law requires it, and are then deleted. Logs held by our hosting and error-monitoring providers otherwise expire on their own schedules.

Your choices and rights

You can always do these things, wherever you live:

• Delete your account in the app (Settings, then Delete account) or in the web console (Profile, then Delete account). Deletion takes effect at once.
• See and correct your information: your profile and tags are in the app and the web console.
• Withdraw AI consent: remove your Gemini key in Settings.
• Ask us anything about your data: email hello@kratue.com.

If you live in India

Under India’s Digital Personal Data Protection Act, you can ask us to confirm what personal data we process about you, to correct or complete it, and to erase it. You can also name someone to exercise these rights for you if you can’t. Send your request, or a complaint, to our grievance officer, Sakshi Sharma, at sakshi@kratue.com. We respond within 90 days. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.

If you live in the United States

Depending on your state, for example California, Virginia, Colorado, Connecticut, Texas or Oregon, you may have the right to know what personal information we hold about you, to correct it, to delete it, to get a copy in a portable format, and to opt out of its sale, sharing or use for targeted advertising. We never sell or share personal information and don’t use it for targeted advertising, so there is nothing to opt out of; we honour browser opt-out signals such as Global Privacy Control anyway. You can appeal a decision on a request by emailing hello@kratue.com. We respond within 45 days, and we won’t treat you differently for using your rights.

Data breaches

If we discover a breach affecting your personal information, we’ll act to contain it, tell you, and tell the relevant regulators where the law requires it, as soon as we can and within the time limits that apply.

Security

Everything travels over encrypted connections (HTTPS). Wi-Fi passwords are encrypted before they’re stored, PINs are stored only as a one-way hash, and repeated wrong PINs lock a tag for an hour. No system is perfectly secure, but we work to protect your data.

Where your data is processed

Tagbit’s data is processed and stored in the United States, by the providers listed above. If you use Tagbit from India or another country, your information is transferred to the United States to provide the service.

Children

Tagbit accounts are for people aged 18 and over. We don’t knowingly collect personal information from anyone under 18, and if we learn we have, we’ll delete it. If you believe a child has given us personal information, email us. Tags can be read by anyone, including children, so keep private content behind a PIN.

Changes to this policy

If we change this policy, we’ll update it here and change the date at the top. If a change is significant, we’ll also tell you in the app or by email.

Contact

Kratue, 30 W Park Place, 3rd Floor, Morristown, NJ 07960, United States.

Questions about privacy: hello@kratue.com. Grievance officer under India’s Digital Personal Data Protection Act: Sakshi Sharma, sakshi@kratue.com.