NFC Tap · Legal

Privacy Policy

Effective from 20 October 2026

App: NFC Tap, an Android app for reading and writing NFC tags, scanning and creating QR codes, and keeping a history of your scans.

Provided by: Xerxes Limited, a company registered in Ireland under number 681600, with its registered office at 77 Camden Street Lower, Dublin 2, D02 XE80.

Contact: mail@xerxes.ie

1. Introduction

NFC Tap is a mobile app for reading and writing NFC tags, scanning and creating QR codes, and keeping a history of your scans. This policy explains what information the app collects, why we collect it, how it is stored, and the choices you have. By using the app, you agree to this policy.

The app is provided by Xerxes Limited.

2. Information we collect

We collect only what the app needs to sign you in and to save your scans.

Account information (Google Sign-In). If you sign in with Google, Firebase Authentication gives us your name, email address, profile photo and a unique account ID. We use your name and photo to personalize the app. We never receive your Google password.

Guest accounts. If you continue as a guest, Firebase creates an anonymous ID for you. We do not collect your name or email for guest accounts.

Saved tag scans. When you tap "Save to cloud", we store the scan in your account. This includes the tag's unique ID (UID), tag technologies and type, capacity, whether it is writable, the number of records, the contents and raw data of each record (for example text, links or contact details), and the date and time. A tag can contain personal information if someone wrote it there, so save only tags you are comfortable storing. Wi-Fi passwords found on a tag are not uploaded.

Data kept on your device. Recent Activity, your latest scans and writes, is kept on your device. A scan that you do not save is not uploaded.

QR codes and camera. The camera is used only to scan QR codes. Camera images are processed on your device and are not uploaded or stored by us. QR codes you create are generated on your device and are shared only when you choose to share them.

Device permissions. The app asks for NFC access to read and write tags, camera access to scan QR codes, and internet access to sign in and sync your saved scans. You can turn these off in your device settings, but the related features will stop working.

Technical information. The Google and Firebase services the app uses may automatically process technical data such as your IP address, device and operating system information, and app instance identifiers, to run and secure the service.

3. How we use your information

We use your information only to run the features you ask for:

To sign you in and keep you signed in.
To show your name and profile photo in the app.
To save your scans to your account, and to show them back to you in Tag History.
To let you delete your saved scans.
To keep the service secure and to fix problems.
To meet legal obligations.

We do not use your scans or account details for advertising, and we do not build advertising profiles.

4. Third-party services

The app relies on services provided by Google LLC. They process your data on our behalf and under their own privacy terms.

Google Sign-In and Google Play Services let you sign in with your Google account.
Firebase Authentication manages your account and your sign-in session, including guest sessions.
Cloud Firestore stores the scans you choose to save.

Read how Google handles data in the Google Privacy Policy and the Firebase Privacy and Security information.

The app does not show third-party ads.

5. Data storage, retention and deletion

You control how long your saved scans are kept: we keep them until you delete them or ask us to delete your account.

Saved scans are stored in Google Cloud Firestore, in a Google Cloud data center region. Your data may be processed in other countries where Google operates.

You can delete your data in these ways:

Delete a single saved scan from its Tag Detail screen.
Delete all saved scans with "Clear" in Tag History.
Clear Recent Activity on your device from the Home screen.
Ask us to delete your account and all related data by emailing mail@xerxes.ie. We will act on the request within 30 days.

Guest accounts are tied to one device. If you sign out of a guest account, reinstall the app or clear its data, you lose access to that guest account. Guest sessions that stay inactive may be removed automatically. Sign in with Google from your Profile to keep your account and saved scans.

6. Security and sharing

We do not sell or rent your personal information, and we share it only in the cases below.

With Google and Firebase, which provide sign-in and storage for the app.
When the law requires it, such as a valid court order or request from a public authority.
To protect the rights, safety or security of our users or the app.
If you choose to share a scan, for example with the "Share this dump" option, which hands the text to the app you pick.

Data is sent between the app and our servers over encrypted connections (HTTPS/TLS). Access rules on the database restrict each account to its own saved scans. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your rights and choices

You can ask us at any time to access, correct or delete the personal data we hold about you. Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, the GDPR and the CCPA, you may also have the right to:

Receive a copy of your data in a portable format.
Withdraw your consent, for example by signing out and asking us to delete your account.
Object to or restrict how we process your data.
Nominate another person to exercise your rights if you cannot.
Complain to your local data protection authority.

To use any of these rights, email mail@xerxes.ie. We may need to confirm your identity first, and we will reply within 30 days.

You can also use the app as a guest, which means we do not collect your name or email.

8. Children's privacy

The app is not directed to children under 13, or under the minimum age set by the law where you live. We do not knowingly collect personal data from children. If you believe a child has given us personal data, email mail@xerxes.ie and we will delete it.

9. Changes to this policy and contact

We may update this policy when the app or the law changes. When we do, we will post the new version in the app or on xerxes.ie/nfc-privacy-policy and update the effective date at the top. Please review it from time to time.

For questions or requests about your data, contact us:

Email: mail@xerxes.ie