EZTap Manager

EZTap Manager (accessible at eztapmanager.com) is operated by EZTap PTY LTD. This Privacy Policy explains how we collect, use, disclose and protect your information when you use our NFC-enabled digital profile management platform. It should be read together with our Terms of Service.

We collect the following information to provide and improve our service:

• Your name and email address
• Profile data you provide (such as bio, links, photos, and contact details)
• Health and medical information, if you choose to use a Medical profile (see section 7)
• Payment information, processed by Stripe (see section 9)
• Contact details submitted to you by visitors via lead capture (see section 10)
• NFC tap and profile analytics, including device type and pseudonymous visitor identifiers
• Usage data about how you interact with the platform

We use your information to:

• Provide and operate the EZTap Manager service
• Send you important account and activity notifications
• Improve our features and overall user experience

We use Google Sign-In to let you securely access your account. When you sign in with Google, the data we access is limited to your name and email address. We do not access any other Google account data.

We do not sell your data. We may share information with trusted service providers only where needed to operate the platform, including Base44 for app infrastructure, Stripe for subscription payments, and AI processing providers when you choose features such as ID or business-card scanning. Some providers or infrastructure may process or store information outside Australia. We take reasonable steps to use providers with appropriate security and privacy protections.

Your data is stored on Base44's cloud infrastructure and is protected by platform security controls. EZTap also applies additional application-level protections to sensitive profile data. Medical, child, emergency-contact and selected Digital ID fields are encrypted using AES-256-GCM before being stored by the app. Profile passwords and protected-link PINs are stored as salted password hashes rather than readable passwords. Public profile endpoints apply server-side privacy filtering so sensitive fields that are not intended for a profile type are not returned to anonymous visitors.

For analytics, EZTap uses pseudonymous hashed visitor identifiers for unique-counting and abuse prevention. Visitor fingerprints are anonymised from analytics records after 90 days while aggregate counts may be retained.

If you choose a Medical or Children's Medical profile, you may enter health information about yourself or a person in your care. This can include date of birth, blood type, allergies, medications, medical conditions, doctor and insurance details, care instructions, additional notes, and emergency contact details.

This is sensitive information. Under the Australian Privacy Act, health information is “sensitive information” and receives extra protection. We only collect it because you choose to enter it, and by entering it you consent to it being stored and displayed as described here.

Why we collect it: solely to display it to a person who taps your tag or opens your profile link — for example a paramedic, teacher, or bystander in an emergency. That is the entire purpose of a medical tag.

Who can see it: anyone who taps the tag or has the profile link. A medical profile is public by design so it works in an emergency when you may be unable to unlock anything. If you do not want it publicly visible, set a Profile Password Lock — but be aware this means a first responder will not be able to see it either.

We do not use it for anything else. We never sell health information, never use it for advertising or profiling, and never share it with third parties for their own purposes.

Your controls: you can edit or remove any field at any time, delete the profile, or delete your entire account (see section 11).

Not medical advice or a medical device. EZTap displays information you enter. It is not a medical device, does not provide medical advice, and must not be relied upon as the sole source of medical information in an emergency. You are responsible for keeping the details accurate and up to date.

The Children's Medical Tag profile is designed for a parent or guardian to create a tag for a child in their care. It may contain the child's name, date of birth, school details, photo, health information, and parent or guardian contact details.

Parent or guardian only. EZTap Manager is not directed at children and we do not knowingly allow anyone under 18 to create an account. A child's profile may only be created and managed by a parent or legal guardian, who is responsible for what is entered and for the decision to make it publicly viewable.

Consider what you include. Because a tag is public when tapped, we recommend including only what a first responder genuinely needs. Think carefully before adding a child's photo, full date of birth, or school details.

A parent or guardian can edit or delete a child's profile at any time. If you believe a child's information has been added without proper authority, contact us at admin@eztap.net and we will remove it.

Subscription payments are processed by Stripe. When you subscribe, your card details are collected and handled directly by Stripe under their own privacy policy — EZTap never sees or stores your full card number. We receive only a payment confirmation, your subscription status, and limited billing metadata needed to manage your account.

If you enable lead capture or contact exchange on your profile, visitors may submit their name, email, phone, company, and a message to you. We store this and make it available to you as the profile owner, and may email it to you.

If you use this feature, you are responsible for that data. You must handle the details people give you lawfully — only contact them for the purpose they provided it, and honour any request to be removed. Do not use EZTap to collect contact details for spam.

You can permanently delete your account at any time from Settings → Delete Account inside the app. Before deletion, EZTap requires an email verification code. If you have an active EZTap subscription, the app attempts to cancel it with Stripe before deleting the account. Deletion removes your EZTap profiles (including medical and Digital ID profile data), links, analytics, captured leads, support records, team records, subscription mirror and app user record, and removes your ownership from physical tags.

Deletion is intended to be irreversible. Operational records that must remain for fraud prevention or transaction/audit integrity are stripped of your direct account identifiers where possible. Uploaded files or residual copies may persist in platform storage or backups for a limited period before being overwritten. Stripe may retain payment or transaction information under its own legal and regulatory obligations.

If you choose to use the Digital ID profile, EZTap collects and stores the information and images you add. This can include photos of your identity document (front and back), your name, date of birth, address, licence or document numbers, expiry date, and a portrait photo extracted from your document.

Why we collect it: solely to display your Digital ID profile to people who tap your tag or open your profile link, and to send you expiry reminder emails.

AI processing: if you use the scan feature, your ID photo is processed by an AI service to read the printed details and detect the card colour. It is used only for that purpose and never for AI training by us.

Who can see it: Digital ID profiles are designed to be shareable, but the public response is deliberately redacted. Full ID/licence and card numbers are masked, the uploaded front/back document images are not released in the anonymous public payload, and date of birth is removed from the public ID-card data. Other details you choose to publish, such as your name, card type, expiry or address, may still be visible. You can additionally set a Profile Password Lock.

Storage: selected Digital ID fields receive EZTap's additional AES-256-GCM application-level encryption before storage. Uploaded document files are stored on the app platform's cloud infrastructure and may be processed or stored outside Australia.

Your controls: you can edit or remove any field or image at any time, delete the profile, or delete your entire account. When you delete a Digital ID profile we immediately remove the stored details from your profile; residual copies may persist in platform storage or backups for a limited period.

Not an official ID: your EZTap Digital ID is a convenience display of your own information. It is not a government-issued identity document and must not be presented as one.

We never sell your information or share it with third parties for their own purposes.

You have the right to access, correct, or delete your personal data. To exercise any of these rights, please contact us at admin@eztap.net.

If you have any questions about this Privacy Policy, please contact us at admin@eztap.net.