Privacy Policy

Last updated: June 7, 2026

TapCharts ("TapCharts," "we," "us," or "our") provides a point‑of‑care documentation tool that helps clinicians build routine notes faster. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using TapCharts (the website at tapcharts.app and the TapCharts applications, together the "Service"), you agree to this Policy.

Our core privacy principle. TapCharts is designed so that the notes you build and any text you type stay on your own device and are not sent to us. We do not want — and ask you never to enter — patient names or other protected health information (PHI) into any field that leaves your device. See "Information we do not collect" below.

1. Information we collect

a) Information you provide

Email address — if you create an account, we use your email to sign you in (we email you a one‑time code) and to send service messages. If you submit the optional newsletter/early‑access form on our website, we use that email to contact you about TapCharts.
Payment information — if you subscribe to TapCharts Pro, payment is processed by our payment provider, Stripe. We do not receive or store your full card number; we receive limited billing details (e.g., subscription status, the last four digits, and a customer/subscription identifier).
Your customized libraries — if you are a Pro subscriber, the system/option templates (your checklists) you customize can be saved to your account so they sync across your devices. These are documentation templates only — not patient notes and not PHI.

b) Information collected automatically

Anonymous usage counts — we record aggregate counts such as how many notes were built and how often an app was opened, by discipline and date. These are counts only; they contain no note content and no personal or patient data.
Website analytics — we use Cloudflare Web Analytics, a privacy‑first, cookieless analytics tool, to understand aggregate visits (page views, referrers, general location, device type). It does not track you across other sites.
Server/security logs — our hosting provider (Cloudflare) processes standard technical data (such as IP address and request metadata) to deliver and secure the Service.
Local browser storage — the Service stores your selections, customized lists, preferences, and (if you sign in) a login token in your browser's local storage on your device. This stays on your device.

2. Information we do not collect

We do not collect protected health information (PHI) or patient records. The Service is built so the notes you assemble and any text you enter remain on your device and are not transmitted to us. For Pro subscribers, cloud sync transmits only your template libraries (the checklists) — never completed notes or patient information. Please do not enter PHI into any field. We also do not knowingly collect information from children (see Section 9).

3. How we use information

To provide and operate the Service, including signing you in and syncing your templates.
To process subscriptions and send transactional emails (login codes, receipts, account notices).
To send product updates or marketing only if you opted in, with an unsubscribe option in every such email.
To understand aggregate usage and improve the Service.
To maintain security, prevent fraud or abuse, and comply with legal obligations.

4. Cookies and tracking

We do not use advertising cookies and we do not sell your data. We use local browser storage for the app to function and to keep you signed in. Our website analytics (Cloudflare Web Analytics) is cookieless.

5. How information is shared

We share information only with service providers who process it on our behalf to run the Service, and only as needed:

Stripe — payment processing and subscription management.
Resend — delivery of login‑code and account emails.
Cloudflare — hosting, database, and privacy‑first analytics.
Web3Forms — delivery of optional website contact/newsletter submissions.

We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer (e.g., merger or acquisition). We do not sell your personal information.

6. Data retention and deletion

We keep account information (your email and synced templates) while your account is active. Aggregate usage counts and cookieless analytics contain no personal data and may be retained indefinitely. You can request deletion of your account and associated data at any time by contacting us at the email below; you can also stop using the account features at any time, since the app works fully on your device without an account.

7. Your choices and rights

You can use TapCharts fully without an account — in that case your data stays only on your device.
You can access, correct, or delete your account data by contacting us.
You can unsubscribe from marketing emails at any time.
Depending on where you live (for example, California or the EU/UK), you may have additional rights over your personal information; contact us to exercise them.

8. Security

We protect information in transit using encryption (HTTPS) and rely on reputable providers (Cloudflare, Stripe, Resend). No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Children's privacy

The Service is intended for working professionals and is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Data location

The Service is hosted on Cloudflare's infrastructure in the United States. By using the Service you understand your information may be processed in the United States.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes may be communicated by email or in‑app notice.

12. Contact us

Questions about this Policy or your data? Contact us at support@tapcharts.app.

TapCharts is operated by Christopher Keen, Missouri, United States.