Tapster App Privacy Policy

Effective date: 27 October 2026. Version: app_privacy_2026_10_v1.

1. Who we are

Tapster AB, Swedish company registration number 559237-5165, Östermalmsgatan 26A, 114 26 Stockholm, Sweden ("Tapster", "we", "us") is the controller for the personal data described in this policy. Contact us about privacy at support@gotapster.com.

This policy covers the Tapster app for iOS and Android, your Tapster account, and Tapster Share (together, the "App"). Purchases in the Tapster online store are covered by the store's privacy policy. Your card issuer, bank, Fidesmo, Apple and Google process data under their own privacy policies.

2. Personal data we process

We only process the data needed for the purposes below. Accepting our App Terms is not consent to optional processing; those choices are separate (section 5).

Data	Examples	Why we use it	Legal basis	How long we keep it
Account	Email address, sign-in method, account ID	To create your account and sign you in	Contract	Until you delete your account
Profile (optional)	First and last name, country, date of birth, gender, profile picture	To show and personalise your profile in the App	Contract	Until you remove it or delete your account
Wearables	Wearable ID, name you give it, connection status, chosen bank, when payment was activated	To connect and manage your wearables and their services	Contract	Until the wearable is disconnected or you delete your account
Purchases	Apple or Google transaction ID, product, the wearable it was bought for, refunds	To deliver purchased services and keep accounting records	Contract; legal obligation	7 years after the end of the financial year, as required by Swedish accounting law
Security	Sign-in sessions, time of last sign-in, App lock PIN (stored only as a secure hash)	To keep your account and App secure	Contract; legitimate interest	Until you sign out or delete your account
Devices and notifications	Notification token per installation, platform, App version	To send notifications you have allowed	Contract; consent for marketing	Until you sign out, turn notifications off or delete your account
Legal records	Which terms and privacy policy version you accepted, and when	To show what you agreed to	Legal obligation	While your account exists and up to 10 years after it is closed
Technical and diagnostic	NFC connection results, installation attempts, errors	To deliver services and fix problems	Legitimate interest	Up to 400 days
Usage analytics (optional)	Which features you use and when	To improve the App	Consent	Depending on the measurement, at most 400 days

We do not store your full payment card number. Card details entered when you add a card are sent from the App to Fidesmo and your card issuer over an encrypted connection and are not stored by Tapster.

3. Purchases, refunds and Apple and Google

When you buy a service in the App, Apple or Google handles the payment. We receive a transaction record that tells us what was bought, so we can deliver the service to the right account and wearable. We never receive your card details from Apple or Google.

If you ask Apple or Google to refund an in-App purchase, they may ask us about it. We may then share:

• with Apple: whether the service was delivered to your wearable, how much of it you have used, whether it included a free trial or sample, and whether we recommend that the refund is granted;
• with Google: whether the purchase included a free trial or sample, and whether we recommend that the refund is granted.

Apple and Google use this to decide on your refund. They handle it under their own privacy policies. You authorise this sharing by accepting the current App Terms and this Privacy Policy. Your optional analytics choice does not affect it.

4. Tapster Share

Your Share page shows the details, links and images you choose to publish. Anyone who scans your wearable or opens your Share link can see them, and they may save or copy what they see. Do not publish anything you are not allowed to share.

If Tapster Share is uninstalled from your wearable or the purchase is refunded, your page is hidden at once and deleted after 30 days. If you install it again on the same wearable within 30 days, the page comes back. If the wearable is connected to another account, or you delete your account, your page and its images are removed. Copies others have already saved are outside our control.

5. Your choices

These choices are separate from accepting the App Terms. Saying no does not stop the App's core functions, and you can change your mind at any time in the App. Withdrawing consent does not affect processing that took place before.

• Usage analytics: with your consent, we collect information about how you use the App to improve it.
• Marketing notifications: with your consent, we may send you offers and news. We only send them to people who have said yes.
• Service and achievement notifications: reminders about your wearables and notices about milestones in the App are controlled by your phone's notification settings and the App's settings.

6. Who we share data with

We do not sell your personal data. We share it only as needed to provide the App:

Recipient	Role	What they receive
Google Cloud and Firebase	Processor (hosting, sign-in, notifications)	Data needed to run the App and your Share page
Fidesmo	Independent controller	Wearable ID and data needed to install, remove and verify services
Your card issuer and payment network	Independent controller	Card and verification data when you add a card
Apple and Google	Independent controllers	Purchase records, and refund information as in section 3

Some providers may process data outside the EU/EEA. Where they do, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses. Contact us for more information.

7. How long we keep data

We keep data only as long as we need it for the purposes in section 2, then delete or anonymise it. Accounting records are kept as long as the law requires.

We keep encrypted backups to recover from errors and incidents. Backups are not used as an active customer register and are deleted after at most 8 days. If we ever restore from a backup, we first apply any deletions made since it was taken.

To stop a deleted account from coming back, we keep a short record with a pseudonymous reference and the time of deletion. This record is access-controlled and deleted 10 years after the account is closed.

8. Your rights and deleting your account

You have the right to access, correct and delete your personal data, to restrict or object to processing, and, where it applies, to data portability. Contact support@gotapster.com. We may need to verify your identity first. We reply without undue delay and normally within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY).

You can delete your account in the App or by contacting us. For your security, the App may ask you to sign in again first, and you may need to uninstall services and disconnect your wearables. When we accept the request, access to your account ends at once. Your account data, profile pictures and Share page are then removed from our active systems through a separate deletion process.

Deleting your account does not refund purchases, cancel other agreements, or block a payment card. Contact your card issuer or bank for anything about your card. If your wearable is lost or you cannot sign in, contact us and we will handle your request manually.

9. Security, children and changes

We protect your data with encryption in transit, access controls and secure storage of credentials. No system is completely secure, so contact us at once if you think your account has been compromised.

There is no minimum age to use the App. If you are under 13, a parent or guardian must make the optional choices in section 5 for you. Card issuers and other providers may have their own age requirements.

We may update this policy. If the changes are material, we will tell you in the App before they take effect, and the App will ask you to accept the new version.

10. Contact

Tapster AB, Östermalmsgatan 26A, 114 26 Stockholm, Sweden. Email: support@gotapster.com.