Privacy Policy

Last Updated: November 5, 2025

1. Introduction

This Privacy Policy explains how Digital Tap ("we", "our", "us") collects, uses, stores, and protects your personal information when you use our prototype demonstration service. By using the Service, you consent to the data practices described in this policy.

2. Data We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using our Service:

• Contact Form: Name, email address, subject, and message content
• Voting/Feedback: Your votes, comments, and optional images you upload
• User Journey Data: Station selections, tap-in/tap-out times, and simulated journey details

2.2 Automatically Collected Data

We do NOT automatically collect:

• Cookies or tracking pixels
• IP addresses for tracking
• Device fingerprints
• Analytics or usage patterns
• Third-party advertising data

Note: Our hosting provider (Netlify) may collect basic server logs for operational purposes, which are governed by their privacy policy.

3. How We Use Your Data

We use the information we collect for the following purposes:

• Communication: To respond to your contact form submissions and inquiries
• Demonstration: To display voting results and feedback within the prototype
• Improvement: To gather feedback and improve the prototype concept
• Testing: To test user flows and interface functionality

4. Data Storage and Security

4.1 Where We Store Data

Your data is stored using:

• Convex: Database for user submissions, votes, and journey data
• Convex Storage: Cloud storage for uploaded images
• Resend: Email service for contact form deliveries

4.2 Data Retention

Important: As this is a prototype:

• All data may be deleted at any time during development cycles
• Data should not be considered permanent
• We make no guarantees about data retention or backup
• You should not submit data you need to keep

4.3 Security Measures

We implement reasonable security measures including:

• HTTPS encryption for data transmission
• Secure authentication for database access
• Regular security updates and patches
• Limited access to data (development team only)

However, no system is 100% secure. Please do not submit highly sensitive or confidential information.

5. Data Sharing and Disclosure

We do NOT:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your data for marketing purposes
• Provide your information to data brokers

We MAY share data:

• With service providers (Supabase, Resend, Netlify) necessary to operate the Service
• If required by law or legal process
• To protect rights, property, or safety of users or others
• Aggregated, anonymized data for research or demonstration purposes

6. Your Rights

Under GDPR and UK data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request limitation of processing your data
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your data
• Withdrawal: Withdraw consent at any time

To exercise these rights, please contact us via the contact form.

7. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

8. Third-Party Services

The Service uses the following third-party services, each with their own privacy policies:

• Convex: Privacy Policy
• Resend: Privacy Policy
• Netlify: Privacy Policy

9. International Data Transfers

Your data may be transferred to and stored on servers located outside the UK/EEA, including the United States. We ensure appropriate safeguards are in place, such as standard contractual clauses, when transferring data internationally.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us via our contact form.