Last updated: 1 August 2026
This explains what data we collect, why, and your rights over it, in line with UK GDPR.
| Data | Why we collect it |
|---|---|
| Name, email | Account creation and login |
| Household name, address, postcode | Service delivery and sticker fulfilment |
| Push notification subscription | Sending you tap notifications |
| Tap timestamps and tag labels | The core service — logging and notifying on taps |
| Payment details | Processed directly by Stripe — we never see or store your card details |
| Referral codes | Operating the referral programme |
Your data is stored in our database, hosted by Supabase in the EU (Ireland). Payments are processed by Stripe. Emails are sent via Resend. The dashboard is hosted by Vercel.
Under UK GDPR, you have the right to access the personal data we hold, ask us to correct or delete it (subject to legal retention obligations), and withdraw consent to notifications at any time by removing yourself as a household member. Contact kumitap@outlook.com to exercise any of these.
We retain your data for as long as your account is active, and for a reasonable period afterward to comply with legal obligations (e.g. UK tax record-keeping, typically 6 years).
KumiTap is not directed at children, and the notification recipient is expected to be an adult who can consent on behalf of the household.
Contact us first at kumitap@outlook.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) at any time.