Privacy Policy

Effective date: April 20, 2026 · Last updated: June 27, 2026

TapMyCar is operated by Praman Tech LLC, a Connecticut limited liability company ("we," "our," "us"). We respect your privacy and are committed to being transparent about what information we collect and how we use it.

1. Information we collect

To provide our service, we collect:

Account information: your name, email address, and phone number (used to verify your identity and deliver masked calls).
Vehicle information you choose to provide: license plate, make, model, year, and color. This is optional.
Shipping address: collected only when you purchase a physical sticker.
Payment information: processed securely by our payment provider; we never see or store your full card number.
Scan data: when someone scans your tag, we log the time, location, device type, and whether they placed a call. If the person scanning allows their device to share its location we may store a precise location; otherwise we store an approximate location based on their IP address.
Messages left by a scanner: a person who scans your tag may choose to leave you a short text message, a photo, and/or a voice message. If they do, we store it and show it to you on your activity page. These are optional and are provided by the person scanning, not collected from your device.
Push notification tokens: if you enable notifications in our app, a device token from Firebase Cloud Messaging so we can deliver alerts (such as scan and renewal notices) to your device.
Referral data: if you invite friends, we track who signed up using your referral code to issue rewards.

When someone places a masked call through your tag, our telephony provider processes both your phone number and the caller's phone number in order to connect the call. Neither party's real number is shown to the other, and we do not record the audio content of masked calls.

2. How we use information

To connect scanners of your tag to you via our masked-call system (your real number is never shared).
To ship physical stickers to your provided address.
To process payments and manage subscription renewals.
To send transactional emails (order confirmations, renewal reminders, account alerts).
To improve the product, detect fraud, and debug issues.

Verifying tags

Always confirm a tag is genuine using the Verify feature — it checks that the tag is a registered TapMyCar tag. If a tag does not verify, treat it with caution and do not rely on it.

3. What we never do

We never share your phone number, email, or home address with anyone who scans your tag.
We never sell your personal data to third parties.
We never use your information for advertising outside TapMyCar.

4. Third-party service providers

To run TapMyCar we share the minimum information necessary with the service providers below, each bound by a data-protection agreement. They process data only to perform their function for us:

Stripe — payment processing.
Twilio — masked voice calling (and text messaging where you have opted in).
Supabase — database and file-storage hosting.
Vercel — application and website hosting.
Google / Firebase — push-notification delivery and our in-app AI support assistant. Messages you send to the assistant are transmitted to Google's Gemini API to generate a reply, so please do not include sensitive personal information in the chat.
Resend — transactional email delivery.
Cloudflare — DNS, security, and email routing.

5. Data retention

We retain your account data as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are legally required to retain records (for example, tax records for completed orders).

6. Your rights (CCPA / GDPR / Connecticut Data Privacy Act)

Right to access — you can request a copy of the data we hold about you.
Right to delete — you can request deletion of your account and data at any time.
Right to correct — you can update your information from the Settings page.
Right to opt out of sale or targeted advertising — we do neither, but you can confirm this in writing by emailing us.
Right to data portability — you can request a portable copy of your data.

Connecticut residents have these rights under the Connecticut Data Privacy Act, and residents of California (under the CCPA) and other states or regions with comprehensive privacy laws have similar rights. To exercise any of them, email support@tapmycar.io. If we decline a request, you may appeal by replying to our response.

7. Children

TapMyCar is intended only for adults aged 18 and older. It is not directed to minors, and we do not knowingly collect information from anyone under 18. In particular, consistent with the Children's Online Privacy Protection Act (COPPA), we never knowingly collect information from children under 13. If you believe a minor has created an account, email us and we will delete it.

8. Security

We use industry-standard security practices: encrypted connections (HTTPS), encrypted storage, least-privilege access to databases, and we do not store credit-card numbers on our servers. No system is perfectly secure, but we work hard to protect your data.

9. Cookies and tracking

We use essential cookies and similar local storage to keep you signed in and remember preferences. We do not use third-party advertising cookies or cross-site tracking.

10. Where your information is processed

TapMyCar is operated from the United States, and your information is processed and stored in the United States. If you use the service from outside the United States, you understand that your information will be transferred to and processed there.

11. Changes to this policy

We may update this policy occasionally. If we make material changes, we'll notify you by email or a prominent notice on the app. The "Last updated" date at the top will always reflect the most recent version.

12. Contact

Questions about privacy? Email support@tapmycar.io and we'll respond within 5 business days.