# Privacy Policy — Tap & Backup
**Last Updated:** June 11, 2026

## Data Collection
Tap & Backup does not collect, transmit, or store your personal data on any server. The app reads your contacts using Apple's Contacts framework solely to create a backup file (vCard 3.0 / .vcf) on your device. Backups — including their date, time, and contact count — are stored locally in the app's Documents folder on your iPhone. Nothing is uploaded anywhere by the app. We (the developer) operate no server and have no technical means to see your contacts or your backups.

## Third-Party Services
- **Apple App Store / StoreKit:** In-app purchases (the one-time Pro unlock) are processed entirely by Apple. We never see or store your payment details. Purchases, billing, and refunds are handled by Apple under their standard policies; you can request a refund at reportaproblem.apple.com.
- **Google Forms (feedback, optional):** If you choose Settings → Send Feedback, the app opens a Google Forms page in an in-app Safari view. Any information you type there is submitted to Google Forms and governed by Google's privacy policy. The app does not inject your contacts, identifiers, or any app data into that page. Using the feedback form is entirely optional.

No other third-party service, SDK, analytics, or advertising framework is integrated.

## Permissions
- **Contacts (`NSContactsUsageDescription`):** "Tap&Backup reads your contacts to create a local backup file. Your contacts never leave your device." Contacts are read only on demand — when you tap Back Up Now, or to display your total contact count in Settings. On iOS 18 and later, Limited Access is fully respected: only the contacts you have granted are read.

No other device permission (camera, location, microphone, photos) is requested.

## Data Storage
All backups are .vcf files stored locally on your device, inside the app's private Documents folder. They remain until you delete them — swipe any backup to delete it, or use Settings → Delete All Backups. Deleting the app removes all backups with it. Files you export through the share sheet (AirDrop, Mail, Files, Messages, etc.) go only to destinations you explicitly choose and are then under your control.

Because all data stays on your device, you retain complete local control over your personal data — including your rights under GDPR: access, portability, and erasure are all exercised directly on your device, by you.

## Analytics & Tracking
This app does not include any analytics, advertising, or tracking frameworks. It does not fingerprint your device, and it makes no network calls to read or back up your contacts.

## Contact
For questions about this privacy policy or the app, use the in-app feedback form: **Settings → Send Feedback**.