Privacy policy

What we collect

• Your first name and email address, when you join the waitlist or sign up, so we know who you are when we write to you or you need a hand.
• Your finish preference (American or Sunset), which the waitlist form sends with your email address.
• Your dose log, if you use the Tap Supply app or tag: see below.
• Your first name and email on your tag, asked when you set it up (the email confirmed with a code), and the name you give your tag, if you give it one. In the app, your first name is optional. See below.
• Your phone number, only if you give it (it’s always optional), so we can reach you if something’s wrong with your tag or your account. We don’t send texts.
• Your newsletter choice: whether you ticked the box for our weekly newsletter (news, tips and offers), and when and where you did.
• Your account and membership, if you start one: your email address, your name and shipping address (for the tag we send), your plan and its status. See below.
• Family sharing, if you use it: first names, how you’re related, the email addresses of the people who follow along and their alert settings. See below.
• Anything you write to us, if you email us.
• Basic technical information that any website receives when you visit, such as your IP address and browser type. We use your IP address for a moment to limit repeated sign-up attempts; we don’t save it with your waitlist entry. Our hosting provider may keep standard server logs for a limited time to run and secure the site.

To join the waitlist we ask only for your first name and email (a phone number is optional), never your address or payment details, and the tag holds nothing about you: only a link to your box.

The Tap Supply app

When you tap your phone to the lid, it opens a page on this site that logs the dose. For each tap we save your box’s code, the date, whether it was the morning or evening dose, the time you tapped and your phone’s time zone (so the time is shown in your local time). We also save which doses you take (morning, evening or both) and, if you add them in the app, what you take at each dose, your reminder times, the day you refill your box, the days you’re away (travel mode) and why a dose was missed (forgot, away, ran out or skipped on purpose; most answers are kept for up to 60 days, a skip for a year because it changes how that dose counts), and how many pills are left if you count them. Each dose also records whether it was tapped or logged by hand, and a dose you remove from the calendar is kept as a record that it was removed. There’s no location. Your tag’s own name (“Kitchen”), if you give it one, is kept with it, and so is your first name if you give it (so Tap Supply can greet you and knows whose tag it is). Family sharing works as described below.

Your log is linked to your box. Your first tap stores two cookies on your phone: your box’s code, so this site can open your week, and a random device key that lets this phone open your box (the app keeps the same kind of key). Neither is used for anything else. If you share a report from the app, anyone with that report link can see your last 30 days (they can’t log doses) until you turn sharing off. A report link also stops working after 7 days without a visit.

Your email and your phones. When you set up your tag we ask for your email and confirm it with a 6-digit code. It’s how Tap Supply reaches you: the weekly check-in on Sundays (turn it off in the app under You → Email, or with the link in each one), replies when you write to us, and the one-time codes that let a new phone use your tag. Your tag opens only on the phones you let in: we keep a list of them (a random key for each, nothing else about the phone). Your email is kept with your tag and in our list of who to reach (Upstash and Neon). If someone in your family set your tag up for you, the email they gave is theirs, for following you, and is never used to let a phone in.

The log is stored with our database providers (Upstash and Neon, through our host Vercel) and kept until you delete it: in the app under You → Your data, or on your week page on this site under Your data, choose Delete account and data. That deletes your tag’s email, every dose, your settings, your sharing and our records of your taps, and signs every other phone out. You can also email hello@taptaketrack.com with your tag’s code to have it deleted; see Delete your account.

The app’s coach reads your log to suggest habits: where to keep your pill box, reminders, a refill day. Its suggested questions and check-ins are answered by Tap Supply itself. If you say yes to AI answers, a question you type is sent as you wrote it, with up to the last 12 messages of the conversation and a summary of your log (dose times and patterns; never your tag’s code, your name or the names of what you take, which we take out of the conversation too), to Fireworks AI, which runs the AI model that writes the answer on its servers in the US, under its terms. Please don’t type health details. The conversation is kept on your phone, not on our servers, and Delete account and data clears it there (it doesn’t reach what Fireworks AI has already received). You can report an AI answer from the coach, which sends it to us to look at. The Sunday summary for family is written by Tap Supply itself from the week’s numbers, and isn’t sent to the AI. You can turn AI answers or the whole coach off in the app, under You.

Family sharing

Up to 3 people can follow a Tap Supply tag: see its doses and get a note if one is late. Either the person who taps it invites them, or a family member sets it up for them (at checkout on this site, or in the app on their phone) and follows along. To run this we keep:

• the first name of the person who taps, how the family member who set it up is related to them (“Mom”), and that family member’s first name, so each side knows who’s who;
• the email address and name of each person invited to follow, and whether they accepted and were let in;
• invitation links: we keep only a scrambled form of each link (a hash), never the link itself, and a link works for the first person who opens it;
• each follower’s alert settings (how late, quiet hours, the evening update) and a record of the alerts sent to them (which alert, for which day, and whether by notification or email);
• if a follower uses the Tap Supply app with notifications on, their phone’s push token, so alerts reach that phone.

Who sees what, and when. Followers see the names of what’s in each dose, the reminder times, when each dose was tapped, the week and the calendar, how many pills are left, the days you’re away, your refill day and the Sunday summary. They never see your email or your tag’s own name. When a family member sets it up for someone, nothing is shared with anyone (not even them) until the person who taps says “Yes, share”; “Not now” shares nothing. When you invite someone to follow your own Tap Supply tag, they see it once they accept. The person who taps can stop sharing anytime, remove any follower and decide who new gets in; a follower can stop following anytime. The family member who set it up can also change the doses, what’s in them and the reminder times; other followers can only look.

Alerts (a dose not tapped by its time, a late dose tapped after all, the evening update, the Sunday summary, something running low) name the person as the follower knows them and say which dose and when. A running-low note names what’s running low inside the email, never in a notification or an email’s subject. Each email has a link to stop them. They’re sent as notifications through Expo’s push service (and from there Apple or Google) to a follower who uses the app, or else by email through Resend. Nothing is sent while sharing is off, or after the membership has ended.

Deleting it. Delete my data (in the app) and deleting your account also remove the tag’s sharing, its followers, their invitations and their alert records. A follower who deletes their own account stops following, and their alert records go with it.

Your account and membership

You sign in with a code we email you; there’s no password. When you start a membership, payment is handled by Stripe: your card details go to Stripe, never to us. We keep your email address, the name and shipping address you gave at checkout (to ship your tag, and replacements you ask for), which plan you’re on and whether it’s in its trial, paid up or ended, and which tags are yours. Sign-in codes and receipts are sent through our email provider (Resend).

To see how Tap Supply is used and improve it, we record events such as a tap, a dose logged by hand, a sign-in, a checkout or a shipment, with your account or box and the time. This is our own record, kept for 13 months; there are no third-party analytics, advertising or tracking pixels.

Our list of people. So we can help when something goes wrong, we keep one list of everyone who signed up (the waitlist, a tag, an account, a family invitation): your first name and email, your phone if you gave it, your tag’s code, where you signed up, whether you want the newsletter, and when you signed up and last signed in. Next to it, our team can see how your tag is set up (which doses, what’s in them, the times and the pills left), so we can help with it, and how many people take what. Only Tap Supply’s own team sees it, it’s never sold or shared, and it goes when you delete your account and data.

Advice you send us. What you write on our Share your advice page, with the name and email you give, is kept for our team to read, and a copy is emailed to our inbox (through Resend) so we can reply. It goes from our records when you delete your account and data, along with our note of the welcome email we sent you; to have the emailed copy deleted too, write to us.

You can delete your account in the app (You) or on this site under Your account: your membership is cancelled, your tags’ logs, emails and sharing are erased, every phone is signed out of them, what you followed and our records of your account go, and your account is removed. A shipping address is kept until that order is delivered, then removed. Stripe keeps payment records it’s required to keep by law.

Why we collect it

• To email you about Tap Supply’s launch, including when memberships open and when TapStack, our pill organizer, is ready to order.
• To run your membership: sign you in, ship your tag, bill your plan and send receipts.
• To keep your tag yours: it opens only on the phones you let in, with a code from you.
• To send our weekly newsletter (news, tips and offers), only if you ticked its box. Every issue has a link to unsubscribe.
• To show your doses to the people you let follow you, and send them the alerts they asked for.
• To remember which finish you’d like.
• To show how many people have joined the list (a total only, never who).
• To answer your messages.
• To keep the site and the sign-up form safe from abuse.

Where it's stored and who sees it

When you join the waitlist, your email address, the page you joined from and your finish preference are saved in our database (run for us by Upstash), with your agreement to receive our emails. We send our emails, the waitlist confirmation included, through Resend.

If you use the chat, what you type is sent to Fireworks AI, which runs the AI model that writes the replies on its servers in the US, and is processed under its terms. We don’t save chat conversations on our site. Please don’t share health details or other sensitive information in the chat.

We don’t sell your personal information, rent it, or share it with anyone for advertising. We only share it with the service providers that run the site and the membership for us (Stripe for payments, Resend for email, Expo for the app’s notifications, Fireworks AI for the chat and the coach’s AI answers, our database providers Upstash and Neon, and our host Vercel), or when the law requires it. Family sharing shows your doses to the people you let follow you, and to no one else.

How long we keep it

• Your waitlist entry: until you leave the list (the link in our email) or ask us to delete it, or until we no longer need it for Tap Supply’s launch.
• Your newsletter sign-up: until you unsubscribe (the link in every issue, or the app under You → Email).
• Our record of sign-ups and sign-ins (when, your email, your tag, website or app): 13 months.
• Your tag’s email, log and settings: until you delete them (Delete account and data), or your account.
• Events (taps, sign-ins and the like): 13 months.
• Records of alerts sent to followers: 90 days. Followers removed or who said no: 30 days.
• Phones signed out of a tag: 30 days. Checkout answers for a membership never started: 30 days.
• Shipping addresses: until the order is delivered and your account is deleted.

Unsubscribing and deleting your data

Every email we send on our own (the newsletter, the waitlist, the weekly check-in, family alerts) has a link to stop it; the rest are ones you asked for (a sign-in or access code, a receipt). You can export your dose log from the app or your week page, and delete everything with Delete account and data. You can also email hello@taptaketrack.com at any time to unsubscribe, to ask what we hold about you, to correct it, or to have it deleted. Depending on where you live, you may have further rights under your state’s privacy law; write to us and we’ll help.

Cookies and tracking

This site doesn’t use third-party analytics, advertising cookies or tracking pixels, and joining the waitlist doesn’t set a cookie. Your first tap (or signing in) sets the cookies described above: your box’s code and this browser’s device key (signing in to follow someone sets the device key too). Our fonts are served from our own site, so no font service sees your visit. Checkout is run by Stripe, which uses its own cookies.

Security

We use reputable providers and take reasonable steps to protect your information, but no method of sending or storing data online is completely secure.

Children

This site and the app aren’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child has joined the waitlist or uses the app, email hello@taptaketrack.com and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update this page and the date at the top. If a change affects how we use your email address, we’ll let the waitlist know by email.

Contact

Questions about your privacy? Email hello@taptaketrack.com, or write to us at the address below.
Tap Supply, 401 W Kennedy Blvd, Tampa, FL 33606