Privacy & data handling.

Last updated: 4 November 2026.

NFC records and local storage

When you save a tag, TapVault stores its NDEF records and associated library information in SwiftData. Records can contain links, text, contact details or binary content. Metadata can include a tag identifier, technology, capacity, write access and scan time. Saved names, symbols, favorite status and timestamps are also stored.

Language and region preferences are stored using the system preferences mechanism. Reading or saving content does not establish ownership of a tag or permission to reproduce an access credential.

iCloud synchronization

The persistence configuration uses a private CloudKit database associated with your iCloud account. When the build is configured correctly and iCloud is available, saved library data is synchronized through Apple’s services between your devices. It is not accurate to describe this data as device-only.

Account availability, connectivity and configuration affect synchronization. An error or pending status does not mean that all devices have the same data. Apple processes iCloud service information under its own terms and privacy policy.

Writing physical tags

Writing transfers the chosen NDEF records to the physical tag. Anyone who can read that tag may be able to access its content. Write only data you are authorized to share. Deleting a library entry does not erase or revoke content already written to a tag.

Developer services and website hosting

The current app source contains no developer-operated backend or third-party analytics SDK. Its privacy manifest declares no tracking or collected data types and declares UserDefaults access for app preferences. This source declaration is not a substitute for checking the final distributed artifact or the behavior of Apple’s system services.

This website uses static HTML and CSS with no JavaScript, analytics, remote fonts or third-party embeds. GitHub Pages hosts the site and may process request information such as IP addresses according to GitHub’s privacy statement.

Support and security reports

GitHub issues and attachments are public. Share only fictional or sanitized examples. GitHub processes submitted information under its privacy policy. For suspected vulnerabilities, use the private reporting channel; never include actual credentials or personal NFC content.

Remove your data

Delete saved entries using the app’s library actions. Deletions are intended to synchronize through iCloud when it is available; verify the result on other devices before assuming every copy is gone. Uninstalling the app alone does not establish deletion of cloud data, device backups or physical-tag content.

Manage app data and backups using the available device and iCloud controls. To remove content from a writable tag, overwrite it using an appropriate tool; locked tags may not be erasable. Contact the issuer to revoke an access credential. Previously shared issue attachments may require separate removal through GitHub.

Privacy questions

Use a support question to request a private contact channel without posting personal details. A dedicated privacy contact and final release disclosures will be added before distribution.