Privacy Policy
This Privacy Policy explains how TagIt (“we,” “us,” or “the app”) collects, uses, and shares information when you use the TagIt mobile application, the TagIt website, and related services — including when you sign up on the website for product updates. TagIt lets you create QR-code labels (“tags”) for your belongings, scan tags, and — when you choose — share information through a tag with whoever finds it.
Information we collect
Account information
When you create an account you provide an email address and a password, or you sign in with Google or Apple. We store a profile that includes your display name and an optional profile photo. We do not store your password — authentication is handled by Google Firebase Authentication.
Content you create
We store the tags you create and their contents — for example titles, notes, links, contact details, dates, and any images or files you attach. You control what you put into a tag.
Camera
TagIt uses your device camera to scan QR codes. Camera frames are processed on your device for scanning; photos are only uploaded to us if you choose to attach them to a tag.
AI photo suggestions (optional)
While editing a tag, you can choose to use an optional AI feature that looks at a photo you select and suggests details you might add to the tag — such as a title, a group, or notes. If you use it, the selected photo is downscaled and sent through our servers to our AI provider, Anthropic (the maker of “Claude”), which analyzes the image and returns suggestions. You decide whether to use the feature and which photo to submit, and you review and accept any suggestions before they are saved — nothing is added to your tag automatically. Anthropic does not use images submitted through its API to train its models, and retains them only transiently as needed to perform the analysis. If you don't use this feature, no photo is sent to the AI provider.
Diagnostic and usage information
We collect limited technical information to operate, secure, and improve the app — such as app version, device model, operating-system version, general usage data, crash and performance diagnostics (including crash reports with device state at the time of a crash), and device-attestation tokens used to verify that requests come from a genuine copy of the app. This is collected through Google Firebase — including Firebase Analytics (usage), Firebase Crashlytics (crash and stability reporting), and App Check (app integrity).
Email updates (signing up on the TagIt website)
When you enter your email address in the signup form on the TagIt website, we collect that email address to send you updates about TagIt's development, launch timing, early access, and occasional requests for feedback. Signup uses double opt-in: after you submit your address we send a confirmation email, and we only add you to the list once you click the link in it. You can unsubscribe at any time using the link in any email we send. We do not ask for your name or other personal details on the website. Our email provider may also record standard technical information when you interact with our emails (for example, whether a message was opened or a link was clicked).
How we use information
- To provide the app — create and scan tags, store your content, and manage your account.
- To authenticate you and keep your account secure.
- To enable features you choose to use, such as sharing a tag or letting a finder contact you.
- To diagnose problems, prevent abuse, and improve the app.
- To generate AI suggestions from a photo you choose during tag editing, when you use that optional feature.
- To send product updates to people who sign up for them on the TagIt website, and to understand whether those emails were opened or links clicked.
How information is shared
Tags you share or make public
A core feature of TagIt is letting a finder see information through a tag. If you make a tag public or share it, the information you place in that tag — and a limited part of your profile, such as your first name or initials — may be visible to anyone who scans it. Items you mark as private are not shown to finders. Choose carefully what you put into a shared tag.
Service providers
We use trusted third parties to run the app and the website, who process information on our behalf:
- Google Firebase — authentication, database (Firestore), file storage, analytics, crash reporting, app-integrity checks, and hosting for the website (Firebase App Hosting).
- Apple— “Sign in with Apple” and device-attestation services, where used.
- Anthropic (“Claude”) — our AI provider. When you use the optional AI photo-suggestion feature while editing a tag, the photo you submit is sent to Anthropic to generate suggested tag details. Anthropic does not use your images to train its models and retains them only transiently to perform the analysis.
- Kit (kit.com) — our email provider, which stores the email address you submit on the website and delivers our update emails.
- Cloudflare — domain registrar, DNS, and email routing for replies.
These providers handle data under their own privacy and security terms. We do not sell your personal information.
Legal
We may disclose information if required by law or to protect the rights, safety, and security of our users, the public, or TagIt.
Data retention and deletion
We keep your information for as long as your account is active. You can delete your account from within the app (Account settings), which removes your profile and the tags you own. Some information may persist for a limited period in backups or where retention is required for legal or security reasons.
If you signed up for email updates, we keep your email address until you unsubscribe or ask us to delete it, or until the pre-launch signup program ends and the list is no longer needed.
Security
Information is transmitted over encrypted connections (HTTPS), access to data is restricted by server-side security rules, and requests are verified with app-integrity checks. No method of transmission or storage is completely secure, but we work to protect your information.
Children's privacy
TagIt is not directed to children, and we do not knowingly collect personal information from children under 13 (or the minimum age required in your region). If you believe a child has provided us information, contact us and we will delete it.
International users
We use cloud infrastructure provided by Google and Apple, and your information may be processed in the United States or other countries where these providers operate.
Your choices and rights
You can review and update your profile, control what you share in each tag, and delete your account at any time in the app. If you receive our email updates, you can unsubscribe at any time via the link in any email. Depending on where you live, you may have additional rights to access, correct, or delete your personal information — to make a request, contact us at the address below.
Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above when we do, and significant changes will be communicated within the app or on the website where appropriate.
Contact
Questions about this policy or your information? Email us at tagitadmin@gmail.com.