Privacy

Who is responsible

For a venue account, billing, and this website, Carolina Isler Zozaya Creations decides why personal data is used and how.

For a guest pass, the venue runs its loyalty programme. Tappo processes the pass record on the venue's behalf. The venue decides the reward, the messages, and any form.

Guest passes

A person who adds a pass does not create a Tappo account. Tappo does not ask for a name, an email address, or a phone number, and it does not store them.

Tappo does not track GPS and does not receive the guest's location. A note on the lock screen near the shop is shown by the phone. The phone compares its own location with the shop's coordinates. Those coordinates belong to the venue, so the pass can appear nearby. They are not a record of where a guest has been.

Tappo keeps the pass itself: a random pass number, the stamp count, redemptions, the time of a stamp, which wallet holds the card, and the technical token the wallet uses to update it. That token refreshes the stamp count. Tappo does not use it to name a person.

The page that adds the pass may keep a cookie with that pass number for up to a year, so the same card can be opened again. The cookie contains no name.

If the guest chooses to answer a short form from the venue, the answers are stored with the pass for the venue. If the guest chooses to open Google for a review, that choice can be noted on the pass. The review itself stays with Google.

Venue accounts

When someone creates a venue account, Tappo stores their name, email, and sign-in method. Sign-in can be a magic link, Google, or Apple. A signed-in session may include an IP address and browser type so the account stays signed in.

The venue record holds the venue name, card design, stamp rules, and subscription status. Payment card details are entered with Stripe. Tappo does not store the full card number.

Messages

Tappo emails venue staff about the account, stamps, and rewards. Those emails go to the venue, not to guests. A lock-screen message goes only to a phone that already holds the pass, and only when the venue's plan includes it. The message does not need a guest email, because Tappo has none.

Why the data is used

A venue account and its subscription are kept to provide the service the venue asked for.

The pass record is kept so the stamp card works: the stamps, the reward, and updates in the wallet. That use is part of the service to the venue.

A form answer is stored only when the guest chooses to send it.

Swiss law, the Federal Act on Data Protection, applies to this processing. Where a person is in the European Economic Area, the General Data Protection Regulation applies as well.

Who else receives data

Stripe handles payment cards for the venue. Tappo does not store the full card number.

Apple and Google receive the pass the venue designed, so it can live in the wallet. Tappo does not send them a guest's name or email.

The public pages use Google Analytics to count visits and see which pages people open. Google receives the browser data used for that measurement. The venue dashboard is not included. The demo and enterprise form checks submissions with Google reCAPTCHA. Google receives the data it uses for that check.

These providers may process data outside Switzerland. A transfer rests on a decision that the destination offers adequate protection, or on the contracts those providers use for transfers. Tappo does not sell personal data, and it does not use guest passes for advertising.

How long it is kept

A venue account is kept while it is open. Invoices are kept for the period Swiss accounting law requires.

A pass record is kept while the venue uses Tappo and the pass exists. It is deleted when the venue account is closed, or when a deletion is requested and the pass can be matched.

Your rights

A person can ask for a copy of their personal data, a correction, or deletion, and can object to a use that is not required for the contract. Write to hello@tappo.ch. Because a pass is not tied to a name, a guest request can be matched through the venue or with the pass number.

A complaint can be sent to the Federal Data Protection and Information Commissioner in Switzerland. A person in the European Economic Area can also complain to the authority in their country.

Reminders on the pass follow the stamp count and the rules the venue set. They are not an automated decision that produces a legal effect.