Privacy Policy

tappey is the data controller for the personal data we hold about you. You can reach us via our contact form.

• Account data: your name, email and password hash.
• Order data: billing/shipping address, the design you chose, and Stripe payment metadata. We do not store your card details.
• Photos and captions you upload: stored in our cloud storage so they can appear on your private timeline.
• Usage data: standard server logs (IP, user-agent, timestamps) to keep the service secure and reliable.

• To fulfil your order and operate your gallery.
• To communicate with you about your order or account.
• To keep the service secure and prevent abuse.
• To comply with legal obligations.

The photos you upload are stored in Google Cloud Storage in a region within the UK or EU. They are served only to people holding a valid tappey link for that gallery, not indexed by search engines, and not shared with third parties for advertising or training.

Illegal content (including child sexual abuse material) is forbidden. If we detect or are notified of such content, we will delete it immediately, ban the account from the service, and report the content and the account to the appropriate authorities (including the National Crime Agency and the Internet Watch Foundation, where applicable). See our Terms & Conditions for the full acceptable-use policy.

We use a small number of trusted processors to run tappey:

• Stripe for payment processing.
• Google Cloud for hosting and image storage.
• Resend for transactional email (order updates, password resets).
• Google Analytics for aggregate analytics on our marketing site (not used inside private galleries).

We do not sell your data.

We keep your account and gallery for as long as you have an active account. Order records are retained for at least six years to meet UK accounting and tax obligations. You can ask us to delete your gallery at any time.

Under UK GDPR you have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. To exercise these rights, use our contact form. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

tappey is bought by adults to host photos of their own children. Children do not create accounts. If you believe a child has created an account, please tell us and we will close it.

We use a small number of essential cookies for sign-in and site functionality. We do not use advertising cookies and do not sell or share data with advertisers.

We do use Google Analytics on our marketing site to understand how the site is used in aggregate (pages visited, source of traffic, broad device/region). Google Analytics may set its own cookies and collect a truncated/processed IP address for that purpose. We do not use it inside your private gallery. You can opt out at any time via your browser's cookie controls or by installing the Google Analytics opt-out add-on.

We may update this policy occasionally. If a change is significant we'll let you know by email.