Tapwick Privacy Policy
What we collect
| Data | Why |
|---|---|
| Email address | Account sign-in — visible to support |
| Name | Shown to other members of your household, and to support |
| Household name | Shown to members of your household, and to support |
| A unique account ID | Required for the app to function |
| A device identifier, device model, app version, and when your device last connected | Linked to your account — app functionality and support |
| A notification token | Delivering push notifications |
| Your household's content (items, stores, lists, chores, tags, and history, including when an item was checked off and at which store) | The app's core functionality |
| A store's saved location, if you set one | Shown on the store's map and used for Arrival alerts; visible to your household like the rest of the store (see Location below) |
| Which store list you've recently viewed | So we can notify you if someone adds something to it while you're likely still shopping there |
| Crash and error reports: your device model, operating system and app version, the screens you visited before the problem, a random install identifier, and a one-way hashed account identifier | Finding and fixing crashes. These reports contain no email, name or IP address |
| Subscription and trial status | Your household's 60-day trial start date is recorded when your household is created, and your subscription status is recorded to confirm it's active |
Location
Store locations you save. If you tap "I'm at this store," your phone's current position is used once to set that store's pin on its map. What's saved is the store's location, and like the rest of the store, it's visible to everyone in your household. Your own location is never shared with your household. Setting a store's pin is the only time your position is sent to us.
Arrival alerts (optional). If you turn on Arrival alerts, the app uses your location in the background, on your phone, to notice when you arrive at or leave one of your saved stores. That check happens on your device; your location isn't sent to us. Your phone may remind you that the app has used your location in the background — this is that feature. You can turn it off any time in the app's Settings or your phone's settings.
Opening the app near a store. If you've allowed location while using the app, it may compare your position with your saved stores, on your phone, to offer that store's list. Your location isn't sent to us.
What we don't collect
Your location history or movements, contacts, or photos (the camera only scans QR codes on your device — no image ever leaves your phone), an advertising identifier, health information, or browsing history. We don't share anything with data brokers or use your data for third-party advertising, so you won't see an App Tracking Transparency prompt from us.
Who we share it with
Google Firebase (sign-in), Expo (push notifications and app updates), RevenueCat (subscriptions), Sentry (crash and error reports, from Functional Software, Inc.), and Google Cloud (hosting). Store maps are shown by Apple Maps on iPhone and Google Maps on Android, which receive map requests for the area being displayed. We don't sell your data, and we don't share it for advertising.
How long we keep it
Device information (identifier, model, version, last-connected time) is automatically deleted 90 days after we last see that device — for example, if you stop using the app or switch to a new device. Crash and error reports held by Sentry are kept for up to 90 days, and contain no email, name or IP address. Operational logs are kept for a shorter period, as described below. Everything else is kept until you delete your account.
Operational logs
Our servers keep operational logs that include your IP address, request metadata, hashed account identifiers and error details. They are kept for up to 30 days for security and troubleshooting. They are not deleted earlier when you delete your account.
Deleting your account and data
In the app, go to Account → Profile → Delete account. This immediately deletes your account, sign-in, push notifications, and device records. If you're the only member of your household, your household and everything in it is deleted too. If other members remain, your account is removed but the household's shared content stays, with your name replaced by "Former member."
We keep a minimal record that an account was deleted, which does not include your email or other identifying details. If you've used your free trial, we also keep a one-way (irreversible) reference to the email address and, if you signed in with Apple, your Apple account identifier, so a deleted account can't claim a second free trial.
If you don't have access to the app, email support@wilbur.works from the email address you sign in with, and we'll delete it for you.
Changes to this policy
If we change this policy, we'll update the effective date at the top. If a change affects what we collect or how we use it, we'll tell you in the app before the change takes effect.