Your location never leaves your phone. TapPerk resolves where you are to nearby store names on the device, using Apple's MapKit. Only those names are sent to our server to match your cards' offers. We show no ads, sell no data, and use no cross-app tracking.
What we collect and why
Account: the email from Sign in with Apple (or Apple's private-relay address) and a random account ID — to keep your data yours.
Cards you add: nickname, issuer, optional last 4 digits, and — only if you enter them — credit limit, balance, statement day, and APR, used to estimate rewards and warn about utilization. Never full card numbers.
Offers and spend: card offers you review and amounts you log (or scan from receipts) so TapPerk can track progress toward offer thresholds.
Place names: when you use arrival alerts or "Use my location", the names of nearby stores — not your coordinates — are sent to rank your cards there.
Connected email (optional): if you connect Gmail, we read only credit-card issuer emails (offers and purchase alerts) to create offers and spend entries. The connection is read-only, its grant is stored encrypted, and disconnecting deletes our copy and revokes access at Google. Google API data use complies with the Google API Services User Data Policy, including Limited Use.
Photos you choose to scan: offer mail and receipts you photograph are processed to extract the offer or purchase; the extraction runs on our server and the image is stored in your account's archive until you delete your account.
What we don't do
No advertising, no analytics brokers, no sale or sharing of personal data.
No tracking across other companies' apps or websites.
No bank logins: TapPerk never asks for, sees, or stores your bank credentials.
Third parties we rely on
Cloudflare hosts the TapPerk service and database.
Anthropic (Claude) processes offer emails, pasted text, and photos you submit, to extract offer terms — content only, no account identity.
Apple provides sign-in and on-device maps; Google provides the optional Gmail connection.
frankfurter.dev receives only a currency code when you use foreign-currency amounts. No user data.
Deleting your data
Settings → Account → Delete account erases everything server-side — account, cards, offers, spend history, scanned images, and email grants (revoked at Google) — immediately and irreversibly. You can also email support@tapperk.app for deletion or a copy of your data.
Changes
If this policy changes materially, the app and this page will say so before the change takes effect.