Privacy

This notice explains how SafeTap Kids uses personal information on safetapkids.co.uk. It describes the software as it runs today. It is not legal advice.

Who we are

The controller of this service is the operator of SafeTap Kids at safetapkids.co.uk. For privacy requests, email privacy@safetapkids.co.uk. We will add a registered office and ICO registration number here when those exist. We do not invent them.

Who this service is for

Parent accounts are for adults. We do not offer sign-in to children. Information about a child is limited to what a parent types (usually a first name or nickname) and what they choose to show on a finder page. We do not collect a child's surname, date of birth, school, home address, or medical details.

What we store

A parent account stores an email address, a display name, and a password hash. Optional UK mobile numbers chosen by the parent can appear on a public finder page. Child profiles store a first name or nickname only when the parent types one.

When someone opens a tag page we record that a scan happened, whether it came from NFC, QR, or a typed address, and a coarse device class (for example mobile). We also store a browser family for operations. We do not show that browser family on Activity and we do not include it in account export. We do not fingerprint finders.

A finder can send a short message. That may include an optional name, phone, and place description. Coordinates are stored only if the parent allowed location on that tag and the finder taps to share location.

Why we store it

We use account data to let you sign in, send product email, and manage tags. Public contact details exist so a finder can return an item. Scan events exist so you can see activity and so we can operate the service securely. Finder messages exist so you can arrange a return.

For UK GDPR we treat account and tag management as necessary to provide the service you asked for, scan and security logs as a legitimate interest in running a safe service, and optional location as the finder's consent at the moment they tap Share location.

Who can see it

You see your own account, tags, messages, and activity. A finder sees only what you switched on for that tag, and only while the tag is active or marked lost. Disabled or retired tags hide contact details. Administrators can provision hardware. They do not browse parent profiles through this product.

Who processes it for us

The website runs on Vercel. The database runs on Railway. DNS is at Hostinger. The domain is registered at IONOS. Product email is sent through the SMTP host we configure (Hostinger once a mailbox is set; Mailpit only on local development). Those providers see what they need to host, store, or send. We do not load advertising, analytics, or social plugins in the browser. We have not added Sentry or another error-monitoring agent.

If you turn on masked calling, calls and texts between a finder and you are carried by Twilio, in their Irish region. Twilio sees the two phone numbers involved, the time, and how long a call lasted, because a phone network cannot connect a call without them. We do not record calls and we do not store the finder's number. Masked calling is off unless you enable it; without it, a finder who taps “Call” sees the number you chose to publish.

Hosting providers may process data outside the United Kingdom. We use them only to run this service.

Cookies

After you sign in we set one HTTPOnly session cookie (safetap_session). It is used to keep you signed in. We do not set advertising or analytics cookies.

Retention

Scan events are deleted after 90 days. Finder messages are deleted after 12 months. Those windows can be changed in operations. If you delete your account we remove the account, profiles, contact methods, and auth tokens, and we retire tags you owned. The physical tag row can remain so the public code still resolves, without your contact details. Scan and finder-message rows already stored may remain until the retention job removes them.

Location

The browser is asked for a position only after a finder taps Share location. Coordinates are not sent without that tap. Sharing location is off unless you enable it on the tag.

Your rights

Under UK data protection law you can ask for access, correction, deletion, restriction, or objection, and you can complain to the Information Commissioner's Office (ico.org.uk). From Account you can download a current JSON copy of your data and delete the account. That download is a current copy, not a promise that it meets every portability rule. Email privacy@safetapkids.co.uk if you want us to handle a request another way.

Changes

If this notice changes in a material way we will update the date at the top of this page.

Contact

Privacy requests: privacy@safetapkids.co.uk.