Privacy Policy for TapPass
Last updated: 7 July 2026.
This privacy policy describes how Folde.AI AB ("we", "us") processes personal data in the TapPass mobile app ("the app"). We value your privacy and process data in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
Folde.AI AB, company reg. no. 559573-1372, Regnbågsvägen 5B, 141 32 Huddinge, Sweden. Contact for data protection matters: contact@folde.ai.
2. What data we process
TapPass is built to require as little information as possible. We process:
- An anonymous, randomly generated device ID created by the app and stored locally on your device. It is used solely to make the app work and is not linked to your name, your email, or your real identity.
- Stamp and reward data linked to the device ID – i.e. how many stamps you have collected at connected stores and which rewards have been redeemed. This data is stored in our database (at our supplier Supabase) so that your cards persist and work.
We do not collect your name, email address, location information, or purchase history and link it to your identity.
3. Purpose and legal basis
We process data to provide the app's core function (digital stamp cards and reward redemption). The legal basis is performance of a contract and our legitimate interest in delivering a working service (Article 6(1)(b) and (f) GDPR).
4. Ads
The app is free and may over time display ads from external ad networks. When ads are activated, such networks may process limited data (e.g. device ID) to display ads. We will then update this policy with information about the ad providers involved and, where applicable, ask for your consent where the law requires it. At present, no tracking of you for advertising purposes across other apps or websites takes place.
5. Recipients and sub-processors
To operate the service we engage trusted suppliers who process data on our behalf:
- Supabase (database and backend services)
- Expo (app infrastructure and distribution)
- Google Fonts (font display)
Any in-app purchases are handled by Apple. We do not share your data for these parties' own marketing purposes.
6. Storage and deletion
We keep data for as long as needed to provide the service. You can request deletion at any time via contact@folde.ai.
7. Transfers outside the EU/EEA
If any supplier processes data outside the EU/EEA, this is done with appropriate safeguards under GDPR, e.g. the European Commission's Standard Contractual Clauses.
8. Your rights
You have the right of access, rectification, erasure, restriction, objection, and data portability under GDPR. Contact us at contact@folde.ai. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
9. Changes
We may update this policy. Material changes are announced in the app or on tappass.se.
10. Contact
Folde.AI AB · contact@folde.ai · Regnbågsvägen 5B, 141 32 Huddinge, Sweden.