Privacy policy

Last updated: 28 September 2026

This policy explains what we collect and why, in line with Sri Lanka's Personal Data Protection Act No. 9 of 2022.

Tag owners

• Mobile number (to sign in and to reach you), and optionally your name and email.
• Your tags: nickname, type, optional registration number, and settings.
• Orders: contact and delivery details, payment status. Card details go to PayHere, not us.
• App push-notification tokens, so we can alert your phone.
• Messages people send you, including photos and voice notes.

Your phone number is never shown to people who scan your tag, unless you turn on Public mode.

People who scan a tag

• The reason, message, photos and voice notes you choose to send.
• A one-way coded fingerprint of your IP address and browser, used only to limit and block abuse. We do not store your IP address or your location.
• Photos are re-encoded and all location and camera data (EXIF/GPS) is removed.

How long we keep it

• Photos and voice notes: 30 days (free plan) or 90 days (paid plan).
• Account data: until you ask us to delete your account.
• Order and invoice records: as required for accounting.

Who we share it with

Only what each service needs to work:

• SMS provider (login codes and alerts).
• Email provider (alerts, receipts, reminders).
• Expo / Google Firebase / Apple (app push notifications).
• PayHere (card payments) and our courier (delivery details).
• Our hosting and database providers.

Your rights

You can ask to access, correct, export or delete your data by emailing [email protected]. We acknowledge requests within 7 days and complete them within 30 days.