# Privacy Policy — Tap & Pay
Last updated 25 August 2026
Tap & Pay is a point-of-sale payment app (“we”, “us”). It lets merchants sign in to a merchant account and take payments through connected payment services.
This policy explains how Tap & Pay collects, uses, stores, and shares information when you use the Android or iOS app.
## Who we are
Tap & Pay is a merchant payment app. Payments are processed through connected payment services.
## Information we collect
**Account.** Email address and password, used to sign in. A display name if your account provides one. After sign-in we keep a session token and a cached copy of your account profile on the device.
**Payments.** Amount, currency, and description. Card details such as card number, expiry date, and cardholder name, collected by camera scan or manual entry. On Android only, card details may also be collected by NFC. NFC card reading is not available on iPhone or iPad. A CVV or PIN when a payment method requires it. Billing details when a service asks for them, which may include name, email, phone number, street address, city, state or province, postal code, country, and date of birth.
**Transactions.** Checkout identifiers, payment status, and transaction history returned by the payment service so you can review completed and failed payments in the app.
**Device and app.** Theme preference. Optional saved login emails and encrypted passwords if you choose “Save login on this device”. Cached merchant service options and account configuration needed to start a payment.
We do not collect precise location, contacts, photo-library access, or advertising identifiers.
## How we use information
We use this information to authenticate you and keep you signed in, process payments, show transaction history, remember appearance and optional saved logins on this device, and operate camera scanning during checkout. On Android, we may also operate NFC scanning during checkout. On iOS, NFC scanning is not offered.
## Camera
Camera access is used only to scan payment card details for checkout. Text recognition runs on the device using Google ML Kit. Tap & Pay does not upload camera frames or save scanned photos to your gallery as part of this feature.
## NFC
NFC card reading is available only on Android devices that support it. It is not available on iPhone or iPad.
On Android, Tap & Pay may read EMV contactless card data — typically card number, expiry, and cardholder name — to complete a payment. NFC is not used in the background or for tracking. If NFC is unavailable, you can scan with the camera or enter details manually where the payment flow allows it.
## Storage on this device
Session token, cached account details, service options, and theme are stored locally on the device. If you save a login, the email and an encrypted copy of the password are kept in the device secure storage.
Signing out removes the session and cached account data on this device. Saved logins stay until you delete them from the saved accounts list.
## Sharing
Authentication and payment data are sent to the payment processor so transactions can be processed. Some checkouts open a hosted page in an in-app browser, which may involve additional processors offered on that page.
We do not sell personal information. This app does not include third-party analytics or advertising SDKs. Google ML Kit processes card text on the device.
## Retention
Session data is kept on the device until you sign out. Optional saved logins remain until you delete them. Transaction records are held by the payment processor under its own policies. Card details are sent to complete a payment and are not intended to be stored long-term in the app.
## Security
The app communicates with the payment service over encrypted HTTPS. Optional saved passwords are encrypted on the device. You are responsible for controlling access to the device that runs Tap & Pay.
## Children
Tap & Pay is a merchant payment tool. It is not directed at children under 13 (or 16 where that higher age applies).
## Your choices
You can refuse camera permission and enter card details manually where the flow allows it. On Android you can also refuse NFC and use camera or manual entry instead. NFC is not offered on iOS.
You can choose not to save a login, delete saved accounts, sign out, or uninstall the app.
## International processing
Information sent for payment processing may be processed in countries other than where you use the app. Payment processing is also subject to the payment processor’s own terms and privacy practices.
## Changes
We may update this policy as the app or our practices change. The “Last updated” date at the top of this page will change when we do.
## Contact
For privacy questions, contact the administrator of your merchant account or the support channel provided with that account.