Privacy Policy
1. Information We Collect
We collect data through your deliberate interaction with our NFC tags ("Tap Events").
Presence Data: The specific location and time of your tap.
Device Identifiers: To prevent fraud (synthetic taps), we collect unique hardware IDs, OS versions, and NFC chip types.
Interaction Context: What the tap was for (e.g., a "Check-in," "Payment," or "Information Retrieval").
2. How We Use Your Data
We do not passively track your location via GPS. We only record your physical presence when you actively tap a designated tag. This data is used to:
Verify attendance or service delivery.
Trigger automated workflows (e.g., sending a digital receipt or opening a door).
Improve tag placement and network health.
[Optional] Power AI-driven insights to personalize your physical experience.
3. Legal Basis for Processing
Consent: By physically moving your device within 4cm of a tag, you are performing a clear affirmative action to share that specific moment with us.
Contractual Necessity: To provide the secure access or payment service you requested via the tap.
4. Data Retention (The "Physical Record")
Unlike digital cookies, physical presence data is highly sensitive.
We retain tap logs for [e.g., 12 months] unless a longer period is required for legal or safety audits.
Your Right to Forget: You may request the deletion of your tap history at any time. In 2026, we honor "Right to Know" requests for all data collected since January 1, 2022.
5. Third-Party Sharing
We do not sell your "Physical Moments" to third-party data brokers. We only share tap data with:
Service Providers: (e.g., secure cloud hosting or payment processors).
Venue Partners: Only if the tap occurred at their specific physical location for a service they provide to you.
6. Your Rights & Choices (2026 Compliance)
Opt-Out Preference Signals: We honor Global Privacy Control (GPC) signals. If your device sends an opt-out signal, we will minimize data collection to the "essential only" level required to complete the tap.
Sensitive Data Limitation: You have the right to limit the use of your precise geolocation data. You can exercise this right in the [App Settings/Website Link].
No Dark Patterns: We commit to a "Symmetrical Choice" design. Declining a data-sharing request is as easy as accepting one.
7. Security Measures
NFC interactions are secured via [Encryption Standard, e.g., AES-128] and tokenization. We monitor for "Relay Attacks" and "NFC Skimming" to ensure that your tap was performed by you and not a remote attacker.