Privacy policy.

Your account. Your name, email address, sign-in sessions, and a password if you set one, which is stored only as an unreadable hash.

Your children’s profiles. Whatever you choose to enter: first name and any preferred name, optional surname and date of birth, blood group, allergies, medical conditions, medications and their expiry dates, emergency contacts, school or childcare details, notes, photos, and the action plan your doctor signed.

Your orders. Your order, payment status, delivery address, phone number, shipment tracking, refunds, and the bands packed into the order. Stripe processes card details; TapCare never sees or stores complete card numbers.

When a band is tapped, we record the time, which band and profile it was, and the actions taken on the page, such as calling 000, calling a contact, opening the action plan or using Allergy Response. If the helper’s browser allows it, we also record the approximate location of their phone at that moment.

We place a small, essential cookie on the helper’s phone so the profile opens only on that phone, for a limited time. We don’t use it to track the helper anywhere else, and we don’t ask them to sign in.

You see this activity in your dashboard. We use it to keep you informed and to keep the service secure.

Only someone holding the physical band can open your child’s profile, by tapping it with a phone. The profile then opens on that phone alone, for a limited time; a forwarded link or a screenshot of the address opens nothing. We ask search engines never to index any emergency page or uploaded file.

You decide whether the profile shows their photo, school details and notes. Their surname, date of birth and your account details are never shown.

Anyone who can sign in as you, with your password or a secure email link, can see and edit your children’s profiles. There is no other way to edit them. Our team can view a profile only to help with a support request you’ve made.

• To show your child’s emergency profile to whoever taps their band.
• To process and deliver your order, and to handle returns and refunds.
• To send the service messages your purchase and account need: account access, verification, receipts, shipping updates, password resets and refunds.
• To keep TapCare secure and working properly.

We don’t send bulk marketing from these messages, we don’t sell your data, we don’t run ads, and we don’t track you across other websites.

We use a small number of trusted providers:

• Stripe for checkout and payment processing.
• Amazon Web Services to send service emails and to store photos and documents.

Medical photos and documents are kept in private storage and are only ever shown through short-lived private links. They are never placed alongside public product images.

Our website uses essential cookies to run the shop, checkout, sign-in and emergency profiles. It also uses:

• Google Analytics (analytics), to understand how people use our website.

These run only on our public website: never on a child’s emergency profile, in your dashboard or on sign-in pages, and we never send them your child’s information. These providers handle what they collect under their own privacy policies and may process it outside Australia.

Our cookies policy lists every cookie, what it does and how long it lasts, and explains how to block or delete cookies in your browser.

A parent or guardian creates every child profile. By creating one, you consent to us storing that information for one purpose: showing it to whoever taps the band in an emergency, for as long as the band is in use. We won’t use it for anything else without asking you first.

We handle personal and health information in line with the Australian Privacy Principles.

Delete a child’s profile or the whole account from your dashboard at any time; deletion removes profile content from our live storage. Photos and plans you replace are removed from the live page immediately.

We keep order, payment and refund records for as long as Australian law requires.

You can see and correct almost everything we hold about your family in your dashboard. For anything else, or a copy of your information, email support@tapcare.com.au.

If you’re locked out, email us from the address on the account. We verify your identity before making any change, precisely because this is health information about a child.

Email support@tapcare.com.au and a real person will reply. If you’re not satisfied with our response to a privacy complaint, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

See also our terms of use.