Privacy

Effective October 28, 2026 · Applies to gettagtime.com and the Tag Time iOS beta

Tag Time is a small, independent project operated by TenFifty LLC. This page explains — in plain language — what we collect, why, and what your choices are. If anything here is unclear, email hello@gettagtime.com and a human will answer.

The website and the waitlist

This website has no analytics scripts and no advertising trackers. If you join the beta waitlist, we collect the email address you enter, for exactly one purpose: contacting you about the Tag Time beta.

• Waitlist emails are stored with MailerLite, our email service provider, and are subject to a confirmation step (double opt-in).
• If our email service is unreachable from your network, the form falls back to a signup stored with Netlify, our website host, and we transfer it to the waitlist manually.
• Every email we send includes an unsubscribe link, and unsubscribing is immediate. You can also ask us to delete your address entirely.
• Our host (Netlify) keeps standard server logs (IP address, request time) to operate the site, as virtually every website's infrastructure does.

The Tag Time app (beta)

The app is currently an invite-only beta distributed through Apple TestFlight (Apple's own terms cover TestFlight itself). If you use the app, here is what it works with:

• Account: the email address you sign in with, plus your username, display name, avatar, bio, interests and the city you say you're based in, if you set them. Your profile, including that city, is visible to other users. Stored with Supabase, our backend provider.
• Precise location — the heart of the app. While the app is open, it reads your location continuously to show the map, measure distances, unlock nearby content, and place the AR view. We don't read your location in the background. Importantly, location is part of the content itself: every tag you create stores the coordinates it's pinned to, and when you unlock a tag by being there, we record that visit — which is, in plain terms, a history of places you've physically been while using Tag Time. When you finish walking a journey, we also record that you completed it, when, how you traveled, and how long it took. When the app alerts you that you're near a tag, we also note that tag so you aren't alerted about it twice, which likewise reflects places you've been near. All of this lives on our servers as part of your account. When you try to open a tag, from the app or from paired glasses, we keep a record of the attempt, including failed ones: which tag you tried to open, when, roughly where you were (to about 10 m), how precise your phone said its location was, whether your phone reported that location as simulated or as coming from a connected accessory, whether the request was verified as coming from the genuine app (below), and whether it opened. We use it only to stop guessing and remote unlocking. It is never shown to anyone or sold, and it is deleted after about a week, or when you delete your account. While you're near tags you haven't opened yet, the app (and paired glasses) also asks our server exactly where those tags are, and we keep the same kind of record each time it asks: when, and roughly where you were (to about 10 m). It is kept for the same purpose, the same week, and never shown to anyone or sold.
• App integrity check: to stop scripted unlocks, Tag Time asks your iPhone to confirm, through Apple's App Attest, that it is running the genuine app. We store a key identifier for each install of the app and, from Apple, an estimate of how many times your device has set up the app recently. It is not a device ID, it is never shared or sold, and it is deleted when you delete your account.
• Content you create: tags (text, photos, video, audio) and the location they're pinned to. Photos are re-encoded to strip embedded metadata (such as EXIF location data) before upload. Video is not yet stripped this way, so a video you upload may still carry the capture location its camera recorded. Uploaded media is stored with Supabase. Only signed-in Tag Time users who are allowed to see a tag can open its photos, video or audio. Your avatar can be opened by any signed-in Tag Time user.
• Visibility: each tag is private, followers-only, or public — your choice per tag, changeable later. Be aware that a public tag is discoverable by strangers who are at or near that location, together with your username.
• Social activity: follows, likes, comments, mentions, saved tags and places, and journeys you build or save are stored so the features work, and are visible to other users where the product shows them (e.g. a comment carries your username).
• Blocks, mutes, and reports: people you block or mute are stored with your account so the app can hide them. If you report a tag, place, journey, or person, we store the report, and any reason you type, with your account so we can review it.
• Notifications: if you allow notifications, the app gets a notification token for your device through Expo (our app platform's notification service) and Apple, and we store it with your account so notifications can reach you. It's removed when you sign out.
• Camera, microphone, photo library, motion: used only for the features that need them (creating content and the AR view), each behind the standard iOS permission prompt.
• Crash and performance reports: if the app crashes or misbehaves, a technical report (device model, OS version, what the code was doing) goes to Sentry so we can fix it. These reports aren't used for advertising or profiling.
• Place search: when you search for a place, drop a tag, or open a tag and the app shows places around it, the search text and the relevant coordinates are sent from your device to Google (Places service) to return results. Because these requests go straight from your device, Google sees them the way any website you visit would, including your IP address. Address lookups also use OpenStreetMap's Nominatim service, which our server queries on your behalf. To turn coordinates into a city or street name (for your profile city, a tag's place line, and the name suggested when you drop a tag), the app uses Apple's built-in iOS geocoder, which sends those coordinates to Apple.
• Directions: when you ask for directions along a journey, and again if you go off the route, your current location and the journey's stops are sent through our server to Google (Directions service) to get a route. We note each request against your account to apply a daily limit. We also save the route Google returns (which includes the street address it starts from), so the next request for that journey from nearby doesn't have to go to Google again. A saved route is stored with the journey, not with your account, and someone starting the same journey from the same block within a day may be given it. Right now these saved routes aren't automatically deleted.
• Snapping a tag to a building. When you drop a tag, the app sends those coordinates directly from your device to OpenStreetMap's Overpass service to find the building or feature you're standing at, so the tag lands on the right spot rather than on raw GPS. Because this request goes straight from your device, OpenStreetMap sees it the way any website you visit would — including your IP address. We send no account information with it.
• Glance (optional, smart glasses): if you pair glasses from Settings, we create a short-lived pairing code linked to your account. Before you unlock anything, the glasses get only the names, locations and unlock radius of tags you could already see, plus nearby events. When you're at a tag, they send back their position. If our server agrees you're there, the glasses get that tag's text or photo, its likes, and recent comments with usernames. Likes and comments you make from the glasses (including dictated text) are saved to your account like any other. The glasses page runs inside Meta's app, which has its own privacy policy.

Local events

• Where events come from: nearby events come from Ticketmaster and from local city guides (such as the Secret Media Network's city sites). When you open events in a part of town we haven't looked up recently, our server sends Ticketmaster the location to search around (your phone's current position, with no account details), and we keep a record of that search point, not linked to you, so we don't ask Ticketmaster again. We send the city guides nothing.
• Saved events: when you save an event, we store that with your account so it shows up in your Saved list on any device you sign in on.
• Event reminders: saving an event can set a reminder for 1 hour before it starts. That reminder is scheduled on your iPhone itself; nothing about it is sent to our servers. Your on/off choice for reminders is also kept on the phone, and signing out cancels any reminders still waiting.
• Add to Calendar: this opens your iPhone's own calendar screen with the event filled in. You decide whether to add it there. The app doesn't read your calendar or see what's in it.
• Outside links: ticket and details links open in the app that handles them if you have one installed (for example Ticketmaster), or otherwise in a browser view inside Tag Time. Those sites, including Ticketmaster, Fever, and Universe, have their own privacy policies. We don't receive what you do there, and we never see anything you buy or enter on them.

How we learn what's working

The app records a small set of usage events tied to your account, so we can understand how Tag Time is used and make it better. Each event is a name, a time, and a few identifiers or labels:

• opening the app;
• creating a tag (which tag, its type, whether it has media) and unlocking one (which tag, and whether by being there or by passcode);
• opening, saving, or unsaving an event, and tapping its ticket or details link (which event, which source, where in the app);
• if a screen fails to load, a short technical description of the error.

These events don't include the text you write, your media, your email address, or your coordinates. They're used only by us, to improve the app. They aren't sold, shared for advertising, or used to target ads. They're deleted when your account is deleted.

What we don't do

• We don't sell your data, ever.
• We don't share your data with anyone except the service providers named above, who process it on our behalf.
• We don't run ads or ad tracking.

Deleting your data

You can delete your account from inside the app, or email hello@gettagtime.com and we'll do it for you — waitlist entries included. Deleting your account removes your account and the posts, comments and other records tied to it. Uploaded photo, video, audio and avatar files aren't yet removed automatically: once your account is gone, other users can no longer open your posts' media, but the files stay in storage until we remove them. Email hello@gettagtime.com and we'll make sure they're gone.

Children

Tag Time is for people 13 and older (see our Terms). It isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child under 13 is using Tag Time, email hello@gettagtime.com and we'll delete the account.

Changes

If this policy changes in a way that matters, we'll update this page and the effective date above, and — for anything significant — tell beta users directly.