Privacy policy

This page combines the app privacy policy (salluscloud.com/privacy, effective 26 October 2026) with the website and order policy. Keep the two in step, or point one at the other, so there's only ever one version. Have a lawyer review before orders open.

1. About this policy

tapWEAR helps people store and share user-entered emergency information through the tapWEAR apps, the TapWear Cloud portal, bands and cards. Health information is sensitive, and this policy explains how it’s handled.

This policy is provided by Sallus Pty Ltd (trading as tapWEAR) (“tapWEAR”, “we”, “us”). It covers the tapWEAR apps, TapWear Cloud and its browser portal, tapWEAR bands and cards, this website, and orders placed through it. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What we collect

What we collect depends on the features you use.

Account details

Your email address and account identifier.

Profile details

Information you choose to enter, such as your name, date of birth, blood type, allergies, medications, conditions, pregnancy information, emergency contacts, notes and medical documents.

Products and features

Linked band or card identifiers, notification tokens, temporary clinical shares, and profile access records.

Access records

When a verified band or card is scanned, the record may include the time of the scan, a one-way hash derived from the network address, limited browser or device information, the requested path and the band’s read counter. We don’t use this information for advertising or cross-app tracking.

Information kept on your phone

Local profile information stays on your phone unless you choose to publish it to the cloud, share it, or write it to a band or card with NFC. The Android app doesn’t upload medical documents or read your address book: emergency contacts are entered by hand, and medical documents can be uploaded through the browser portal.

Sign in with Google

If you choose Sign in with Google, Google handles authentication and we receive a verified account identifier and email address. We store a hash of the Google account identifier, don’t keep the Google identity token, and don’t send emergency profile or medical information to Google as part of sign-in. Accounts aren’t linked automatically just because the email addresses match.

Notifications on Android

The updated Android app keeps automatic Firebase Messaging and Analytics collection turned off. After you complete privacy setup and choose cloud sign-in, the app registers with Firebase Cloud Messaging and Firebase Installations for notifications. Firebase may then collect an app installation identifier and service and version information, even if notification permission is denied, and we may associate that identifier with your signed-in account. Older Android versions may initialise Firebase before sign-in. Notification settings control alerts; they don’t erase identifiers already registered with Firebase. The Android app doesn’t include Firebase Analytics or Crashlytics.

Orders

When you order from this website: your name, delivery address, email, phone number and what you bought. Card payments are handled by our payment provider, and we don’t store full card numbers.

Messages

What you send us when you contact us.

3. Health information

Much of what you may add to a profile, such as conditions, medications and allergies, is health information. The Privacy Act treats health information as sensitive information, which needs a higher level of protection.

We collect health information only with your consent, which you give when you enter it and save it. Every field is optional. You can withdraw consent at any time by deleting the information.

4. Public emergency information

You choose which profile fields appear on the read-only emergency card. Anyone who physically scans an active tapWEAR band or card may be able to view those fields without signing in. Keep the public card limited to information you’re comfortable making available in an emergency.

Details a scanner can choose to send you

After a verified physical scan, the person scanning can choose to submit their name and phone number from the emergency page, and may add a typed address or a one-time location from their phone. Their phone’s location is requested only if they choose “Use my current location” and grant browser permission. Coordinates and their reported accuracy are shared only when the form is submitted, and location isn’t tracked continuously.

These details are encrypted in scan records, shown only to the profile owner in Recent Scans, and included in the owner’s scan notification when alerts are on. They’re provided by the scanner and aren’t independently verified. Submitting them doesn’t change the medical profile or contact emergency services. Contact submissions expire after 30 minutes and are limited to one per scan.

5. How we use your information

• To create and secure accounts, and to store and display profiles
• To verify tapWEAR products
• To deliver notifications and password resets you’ve requested
• To provide temporary sharing features
• To prevent replay attacks and unauthorised access, and to investigate abuse of the service
• To run backups and provide support
• To process orders and deliver products
• To meet our legal obligations

We don’t use health information for marketing. We only send marketing emails if you’ve agreed to receive them, and you can unsubscribe at any time.

6. Who we share it with

We use service providers to run tapWEAR, including infrastructure and security providers, Cloudflare, Apple services (including Sign in with Apple and Apple Push Notification service), Google services (including Sign in with Google and Firebase Cloud Messaging), and Resend for transactional email. This website is hosted by Wix. Once orders open, payment and delivery providers will also receive what they need to process and deliver your order. Each provider receives only the information needed to provide its service.

We don’t sell health information or use it for targeted advertising.

We may also disclose information where the law requires it, to protect users or the service, or as part of a business transfer, subject to appropriate confidentiality and notice.

7. Storage, security and location

Cloud traffic uses HTTPS. Sensitive cloud profile and document data is encrypted at rest, passwords are stored using one-way hashing, session credentials are protected, and access is restricted by account ownership. On your phone, the apps use the platform’s secure storage and optional device authentication. No system can guarantee absolute security.

Service providers may process information outside your state or country, under their contractual and legal safeguards.

8. Keeping and deleting information

Account and profile information is kept while your account or profile is active. Temporary sessions, password reset links and clinical shares expire automatically. Verified scan records are kept while the related profile exists, so you can review recent access.

Deleting your account removes its active cloud profiles, documents, shares, sessions, notification registrations, scan records and cloud band links. Protected disaster-recovery backups may keep encrypted copies for up to 90 days before they rotate out.

Information already written to a physical band or card for offline use isn’t erased when you delete your cloud data. It needs to be rewritten, or the band or card physically destroyed.

We keep order records for as long as the law requires, for example for tax purposes.

9. Your choices and rights

You can edit what’s visible, turn off notifications, revoke a band or a temporary share, remove local profile storage, delete individual profiles, or delete your account. You can do this in the apps, and update your details in the online portal. Account deletion is available in both apps and on the account deletion page.

Both apps offer an optional monthly reminder to review your emergency information, scheduled on your phone for 9 am on the first day of each month. You can turn it off in Notifications. It needs device notification permission.

You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing info@tapwear.co. We’ll respond within 30 days.

10. Children

tapWEAR accounts are intended for people aged 13 and over. For a younger child, a parent or legal guardian should manage their information where local law allows. tapWEAR products contain small parts and aren’t suitable for children under 3.

In the updated Android app, account holders aged 13 to 14 need a parent or legal guardian’s approval before using account features; after that, they manage their own account and sharing choices. From age 15, the app asks for their own informed privacy choices. Anyone who needs help understanding these choices should contact us before publishing information.

The Android approval request securely sends us the account holder’s date of birth and the teenager’s and guardian’s email addresses. They’re encrypted at rest and used to request and record approval, link it to the teenager’s account, and enforce expiry or withdrawal. No medical profile is sent with the request. The guardian confirms they’re at least 18 and the parent or legal guardian; the process verifies they control the email address and records their declaration.

Uncompleted approval requests expire after 48 hours and are removed during periodic clean-up. Approval expires after 12 months while the account holder is under 15. Expired approvals that aren’t linked to an account are removed; approvals linked to an account are kept until the account is deleted, so withdrawal can be enforced and the consent record kept. A guardian can withdraw approval using the original email link or by contacting us. Withdrawal ends cloud sessions and blocks the account’s cloud and public profile access while approval is required. Information already written to a product must be rewritten separately. Deleting the account also removes linked approval records, subject to the backup rotation described above.

11. Complaints

If you’re concerned about how we’ve handled your personal information, email info@tapwear.co. We’ll respond within 30 days. If you’re not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

12. Changes to this policy

We may update this policy when the service or the law changes. We’ll update the effective date at the top, and give additional notice where required.

13. Contact us

Send privacy or data requests to info@tapwear.co. Please don’t send medical documents or emergency information by ordinary email.

Sallus Pty Ltd (trading as tapWEAR)
c/o The Company Spot, West 6, 33 Mackey Street, North Geelong VIC 3215, Australia