Privacy Policy

Tap-a-Round ("we", "us") provides a mobile-first round management tool for window cleaners and similar service professionals. This policy explains what personal data is processed, why, and the rights you have under the UK GDPR and EU GDPR.

You are the data controller for the personal data you enter about your own customers (names, phone numbers, addresses, service details). Tap-a-Round acts as a data processor on your behalf — we store and process that data only to deliver the service to you. You are responsible for having a lawful basis and, where needed, your customers' consent to store and contact them.

For your own account data (email, login, business settings, subscription), Tap-a-Round is the data controller.

• Account data: your name, email address, and login credentials.
• Business data: working days, payment details, and WhatsApp message templates you configure.
• Customer records you create: customer names, phone numbers, emails, addresses, postcodes, service types, prices, visit frequency, job history and payment status.
• Usage data: anonymised analytics events that help us improve the app.

Our lawful bases under GDPR are:

• Contract (Art. 6(1)(b)) — to provide and manage your account and subscription.
• Legal obligation (Art. 6(1)(c)) — where required, such as tax/ billing records.
• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, and product improvement.
• Consent (Art. 6(1)(a)) — for any optional analytics you agree to.

We use trusted providers to deliver the service:

• Base44 — application hosting and database storage.
• Stripe — subscription billing and payment processing (we never see your full card details).
• WhatsApp — you initiate reminder and completion messages via WhatsApp deep-links; messages are sent directly from your device, not by us.

We do not sell your data or your customers' data to anyone.

We keep your account and customer data for as long as your subscription is active. If you cancel, you can export or delete your data at any time; we will remove it from our live systems within 30 days, except where retained to meet legal or accounting obligations.

Under the UK/EU GDPR you have the right to:

• Access — request a copy of the personal data we hold.
• Rectification — correct inaccurate or incomplete data.
• Erasure — ask for your data to be deleted ("right to be forgotten").
• Restriction & objection — limit or object to certain processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, where processing relies on consent.

To exercise any of these rights, email support@tap-a-round.app. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Data is stored securely with row-level isolation so each account can only access its own records. Access is restricted to authorised personnel and protected by authentication. However, no internet transmission is fully secure, and you use the service at your own risk.

Our hosting and payment providers may process data outside the UK/EEA. We rely on appropriate safeguards such as UK International Data Transfer Agreements or providers' approved data-protection frameworks.

Tap-a-Round uses essential cookies and local storage to keep you signed in and remember your preferences. We do not use advertising or third-party tracking cookies.

The service is not intended for anyone under 18. We do not knowingly collect data from children.

We may update this policy from time to time. Material changes will be posted on this page with an updated revision date.

Questions about this policy or your data? Email support@tap-a-round.app or use our contact page.