Privacy for customers
Your information
TapDibs Ltd. uses your email or social sign-in identity, country and recognized postal or ZIP code to run your account. Your city and home-area coordinates are derived from the postal area; no street address is collected. We record your agreement to the customer documents, including identity, version and time.
Dibs and location
We record views, taps, locks, expiry, cancellation and approved redemption, with the relevant offer and video, identity reference, bill, discount and final amount. At a lock, device location is used first; your postal home area is the fallback. A snapshot of home area, distance and inside/outside result is available to authorized administrators, not displayed to other customers.
Messages and business visibility
A business sees the identity or email reference and saved terms needed to manage its own Dibs and redemptions, including your saved home area and distance at the time of locking. Account lists businesses you hold or have held a Dib with. Message opens your private two-way conversation; authorized business staff read and reply from Customers. New-message dots show unread replies. You cannot message a business you have never locked a Dib with. Switching a business off stops its Notify notices, not your conversation, Dibs, expiry reminders or account messages. Phone alerts are optional: after locking, choose Get alerts on this phone and allow notifications. On iPhone, first add TapDibs to your Home Screen. We store a device notification registration to send reminder times and the running-out warning through Firebase; no phone number is collected and no SMS is sent. The Account Phone alerts switch stops phone delivery; in-app reminders continue and email remains an independent backup when available. Support reports are available to authorized administrators.
Providers and security
Providers support sign-in, hosting, private media, email and service security. TapDibs may use third-party automation providers to send claim links in response to comments and messages, and a commenter’s public profile information is processed for that purpose. Purchases are paid directly to the business; TapDibs does not collect your purchase payment. Providers may process information outside your province or country under their safeguards and applicable law. Browser storage or cookies maintain your session. Access controls protect private records, but no online service guarantees absolute security. Some of our service providers are located outside Canada, including in the United States — they help with sign-in, email delivery, phone alerts and data storage. Their written policies about personal information are available from the Privacy Officer, TapDibs Ltd. (info@tapdibs.com), who can also answer questions about them.
Retention and closure
Account closure removes your name and email, ends live Dibs and removes identifying location snapshots. Anonymous financial history remains for accounting, integrity and legal obligations. You can sign up fresh later. When your account closes, we delete your personal information — your name, email, postal code, messages and sign-in details — within 30 days. The money record of a past Dib (the offer, the amount saved, the date) stays in our business books, because Canada's Income Tax Act (section 230) requires businesses to keep their records for six years from the end of the tax year they belong to. Those records are kept with your name and contact details removed, so they no longer identify you. Backup copies are overwritten within 30 days. Records caught in an active dispute or legal hold are kept until it ends. Three records outlive the 30 days where the law requires it: information about a decision we made about your account is kept at least one year so you can ask for it; breach records are kept at least 24 months; and if you unsubscribe from marketing messages we keep just enough to honour that choice — that record is not deleted.
Privacy contact and breaches
The person responsible for privacy at TapDibs is the Privacy Officer, TapDibs Ltd. — contact: info@tapdibs.com. If a privacy breach creates a real risk of significant harm, we report it to Alberta's Information and Privacy Commissioner without unreasonable delay, and we tell the people affected when the law requires it. If a breach involves information handled across provincial or national borders, we also report it to the Privacy Commissioner of Canada as soon as feasible, we tell the people affected as soon as feasible, and we keep a record of every breach for at least 24 months.
Your choices
Update your home postal area and message choices in Account. Ask us about access, correction or applicable privacy rights; we may need to verify your identity. Material policy updates will be communicated where required by law.
Rewards
A business can see your locks and redemptions at its own business, and can send you rewards inside TapDibs. It never sees your activity at any other business.
Connected calendars
C1. Connecting a calendar is always your choice. When this feature is available, you can connect a calendar from the Integrations tab so your Dibs land in the calendar you already use. Connecting is optional and off until you turn it on. You can disconnect at any time from the same tab (see C5). C2. When you connect Google Calendar. When you connect a Google Calendar, two things can happen, and only for your own Dibs: (a) when you take a Dib, TapDibs adds a booking event — the business name, the time, and what the Dib is — to your calendar; and (b) if you ask TapDibs to check a time for you, TapDibs reads only whether you are busy or free at that time, so it can warn you if a Dib clashes with something already in your day. We do not read the titles, details or guests of events already in your calendar, and we never change or delete an event that was already there. TapDibs changes or removes only booking events TapDibs itself added. C3. How we use Google data — our Limited Use commitments. TapDibs' use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use your Google Calendar data only to provide and improve the calendar features described in this section. We do not sell it; we do not transfer it except as needed to run these features, for security, to comply with the law, or as part of a sale of the business with your explicit consent first; we never use it for advertising, for credit decisions, or to train general artificial-intelligence or machine-learning models; and no person at TapDibs reads your calendar data except with your documented consent, for security, where data is aggregated and anonymised for internal operations, or where the law requires it. C4. If you use an iPhone and Apple Calendar. Apple does not offer apps like TapDibs a way to read your calendar, and we do not ask for your Apple password or any special password — never enter one for TapDibs. Instead, when you turn it on, your Dibs are sent to your Apple Calendar as a calendar subscription you add once, the same standard way booking confirmations have worked for years. Bookings flow one way only: out of TapDibs, into your calendar. TapDibs never reads your Apple Calendar, and nothing you change in Apple Calendar changes your Dib — your record in TapDibs is the one that counts, and a Dib stands on the terms it was taken until it is redeemed or its time runs out. Keep your subscription link private: anyone holding the link can see the booking titles on it. You can turn the subscription off, or reset the link, at any time from the Integrations tab. C5. Disconnecting. When you disconnect a calendar in the Integrations tab, TapDibs' access ends immediately: we stop reading, stop writing, and delete the access tokens that let us connect. Booking events already added to your calendar stay there — they are yours to keep or delete. Your Dibs and your TapDibs records are unaffected. C6. Service providers outside Canada (calendars). When you connect Google Calendar, your information is collected, used and stored by Google as our service provider in the United States, for the purposes in this section. Our written policy on service providers outside Canada, listing the countries and purposes, is available at [link to foreign-provider policy]. Questions about collection, use, disclosure or storage by a provider outside Canada: Privacy Officer, TapDibs, [contact email / mailing address].
Contact
Questions: info@tapdibs.com.