Last updated: 31 July 2026
This policy explains what Taporium does with your information. It is written to be read, not to be survived.
Taporium has no account, and the things you actually make stay on your iPhone. Your stickers, their names, your counts, timers, inventory, notes, links and health records are stored on your device. We never receive any of them.
If you turn collection on, one thing is sent to us: a weekly tally. Not your activity — a count. "This installation tapped 14 things in the Routines category the week of 3 August, on iOS 26.5, in en_US." It is built on your phone before it is sent, so the detail never exists on our side to begin with. Everything is off until you turn it on, and each purpose is asked separately.
Health, food and drink are never included, at any setting. Not as a policy — as a filter in the code that has to be deliberately removed.
We may sell the combined result. Grouped across everyone who opted in, with nothing tying rows to a person, it becomes ordinary market data about how NFC tools get used. That only ever includes tallies from people who switched "Share data with partners" on, and section 7 says exactly what that means before you do.
This app is made by Taporium, based in Illinois, United States. Taporium is a trading name rather than a registered company. For anything in this policy, including a request about your data, contact wuwilliamyixuanwu@gmail.com.
All of it, by default:
These are held in a container shared between the app and its widget, so the widget can draw your counts without anything being uploaded. Deleting the app deletes them.
If you have turned nothing on: nothing. Not "nothing we look at" — the code that sends does not run, so there is nothing to look at.
If you have turned collection on: one tally per week. Once a week has ended, your phone counts up what happened in it and sends the counts. This is the whole of a row:
The counting happens on your phone, before anything is sent. This is the part that matters: we do not receive your activity and reduce it, we receive the reduction. The detail never exists on our side, so it cannot be leaked, subpoenaed, re-analysed later, or sold in a form we did not describe here.
What is deliberately not in it: no name, no email, no advertising identifier, no location beyond a country, no sticker names, no links, no contents of anything, no text you typed, and nothing at all from the health, food or drink tools. Weeks with fewer than three events are not sent — a tally of one is closer to an event than a statistic.
One thing we will not pretend about. Each tally carries a random code that identifies the *installation* — not you. It is generated on your phone, is tied to nothing about you or your device, and is thrown away and replaced if you delete your data. But it does mean two tallies can be recognised as coming from the same phone, so we describe this as pseudonymous rather than anonymous, which is the accurate word.
It exists for two reasons and both work in your favour. It is the only handle by which we can actually delete your uploaded rows when you ask — with no code at all, "delete my data" would be a promise we could not keep. And it lets a dataset count *installations* rather than rows, so one heavy user cannot be mistaken for a trend.
Where the tallies are stored. On Cloudflare, a hosting company, on servers we control the software for. Cloudflare processes this on our behalf and does not use it for anything of its own. Their network necessarily sees the IP address your phone connects from, as it does for every website you visit — our software never reads it and never stores it, and the country in your tally comes from your phone's language settings, not from your connection.
Three features use iCloud — Apple's service, your account, under Apple's privacy policy rather than ours:
Sharing a sticker. When you share a sticker with someone, that sticker's data syncs through iCloud to the people you invite. It does not pass through any system of ours. You choose who is invited, they see only the sticker you shared, and you can end sharing at any time.
Referrals. If you refer someone, a count is kept in iCloud so it can't be edited on the phone. No names, no email addresses, no device identifiers and nothing about what either person uses the app for.
The student offer. If you claim it, your email address is turned into a SHA-256 fingerprint and only the fingerprint is stored — a one-way value that cannot be turned back into your address. It exists so the same address cannot claim twice. We never hold the address itself.
Weekly tallies. If you have turned collection on, section 3 describes exactly what is sent. Unlike the three above, this one does not go to your iCloud — it goes to our own service, hosted on Cloudflare.
Nothing else leaves. There is no advertising network and no analytics company: the only third parties in this picture are Apple, whose services the app is built on, and Cloudflare, which hosts the tallies for us.
Guest Wi-Fi passwords. A guest Wi-Fi sticker stores your network password in your iPhone's Keychain and writes it to the tag itself. It is carried in the fragment portion of a link — the part after #, which browsers never send to any server. It is not transmitted to us, not stored by us, and we could not disclose it to anyone, including in response to a legal demand, because we do not have it. Note that anyone who can reach that tag can read it; that is inherent to the feature and is explained where you create one.
Blocked apps. Choosing apps to block gives the app opaque tokens from Apple's Screen Time system, not names or bundle identifiers. The tokens are meaningless outside your device and never leave it. We cannot tell which apps you chose.
Tag serial numbers. A tag's chip ID, used to unlock a strict focus session, is stored on your device only.
Health information. Records from the medication, injection, inhaler, supplement, water, food, drink, sleep and mood tools are permanently excluded from every sharing option, whatever your settings say. This is enforced in the app's code in a single place, rather than by remembering to apply it. It cannot be switched on.
Four things can be turned on, each asked separately, each off until you say otherwise, and each revocable at any time under Settings › Your data:
Crash reports. Crash traces, error messages, iOS version and device model. Never the contents of your stickers, counts, notes or links.
Usage analytics. Which tools you add, which screens you open and how often stickers are tapped — as counts, never as content. Never the names of your stickers, the items in your inventory, your links, or your app selections.
Personalized suggestions. Reorders the store around the tools you actually use. This one never leaves your iPhone at all, so it costs you no privacy.
Share data with partners. This is the one that lets your weekly tallies be included in a dataset we may sell. It is separate from the others precisely because it is the one that carries weight, and turning the others on does not turn this on.
Until you answer, nothing is recorded at all — not collected-and-held- back, but not written. Declining leaves no log to send.
We would rather describe this plainly than bury it, because "we may sell your data" is a sentence that deserves detail.
What is sold. The weekly tallies above, from installations that switched "Share data with partners" on, grouped together across everyone with the installation code dropped. The result is a table of statistics — "in this week, in this country, this tool was used this many times across this many installations", or "people who installed 12 weeks ago used the app on 2.4 days that week". Any grouping representing fewer than 20 installations is discarded entirely rather than published, so no row can be narrowed to a small set of people, let alone one.
Why there is no "allow tracking" prompt. Apple defines tracking as sharing data about *a particular person or device* with a data broker. We sell statistics about groups, never rows about people — so this is market research rather than data brokerage, and iOS never asks you about tracking. If that ever changed, the prompt would appear and this policy would say so first.
What is never sold, and cannot be:
Who buys it. Nobody yet. When someone does, the contract will forbid attempting to re-identify anyone and forbid combining the data with other sources to do so. If we ever want to sell something not described here, this policy changes and you are asked again — turning the switch on once is not permission for whatever we think of later.
Turning it off stops it. Withdrawal is forward-acting: from that moment, nothing further of yours is included. Tallies already sold cannot be pulled back out of a dataset someone else now holds, which is a real limit and the reason the switch is off until you choose it. Anything not yet sold is removed when you delete your data.
Do Not Sell or Share My Personal Information. Under California law you have the right to direct us not to. In Taporium this is not a request you have to send — it is a switch, it is already off, and it is in Settings › Your data. There is a shortcut to it in Settings labelled with exactly that name.
The free plan shows promotions for Taporium's own features. There is no advertising network in the app and no third-party ad code. Ads are never shown while a tag tap is being handled.
About Apple's tracking prompt. If you agree to share data with partners, iOS will ask whether you allow tracking. We ask for that permission at that moment because sharing data with a third party is the situation Apple's prompt exists for, and because the App Store listing declares it — we would rather ask than rely on a technicality about what we do today.
To be exact about what we do today: we do not read your advertising identifier, and no tally described in section 3 contains one. Saying no to that prompt does not change what is collected. If that ever changes, this policy changes first.
Taporium is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child under 13 has provided information, contact wuwilliamyixuanwu@gmail.com and we will delete it.
Because your information is on your device, most rights are exercised directly rather than by asking us:
Depending on where you live you may also have rights of access, correction, portability, erasure, restriction and objection under the GDPR, the UK GDPR, the CCPA/CPRA or similar laws, and a right to complain to your data protection authority. Write to wuwilliamyixuanwu@gmail.com and we will help, though in most cases the buttons above are faster than we are.
We do not sell personal information, and no data is shared with any partner today. If that changes, the "Sharing with partners" switch is the only route, it stays off until you turn it on, and health data is never included.
Information on your device is kept until you delete it or remove the app. Analytics data, if you turned it on, is trimmed automatically — the oldest entries are folded into anonymous per-category counts rather than kept in full. Deletion requests complete after a 30-day grace period.
Two companies, and no others.
Apple — the App Store for purchases, iCloud for sharing, referrals and the student offer, and iOS itself for NFC, Screen Time, alarms and notifications. Governed by Apple's privacy policy, not ours.
Cloudflare — hosts the weekly tallies described in section 3, as a processor acting on our instructions. They do not use the data for their own purposes. This applies only if you have turned collection on; with everything off, your phone never contacts them.
We use no analytics provider, no advertising network, no crash-reporting service and no data broker.
If this policy changes materially you will be told in the app, and asked again where the law requires it. The date at the top always reflects the current version.
wuwilliamyixuanwu@gmail.com