Privacy Policy

Tap Out • NSTGATE, LLC • Effective May 26, 2026

This Privacy Policy describes how NSTGATE, LLC ("we," "us," or "our") collects, uses, and shares information when you use the Tap Out mobile application and related services (the "Service").

1. Information We Collect

• Phone number. Required to sign in and to identify you to friends who want to challenge you. Stored in E.164 format.
• Display name. Optional; shown to friends in challenge invitations.
• Phone numbers you submit for friends. When you send a friend-challenge invitation, the recipient's phone number is sent to our servers and to Twilio (our SMS provider) for the purpose of delivering that single invitation.
• Game results. Tap counts, challenge durations, challenge outcomes, and timestamps.
• SMS event logs. A record of each SMS we attempt to send (sender phone, recipient phone, timestamp, delivery status) so we can enforce abuse-prevention rate limits and respond to delivery complaints.
• Session cookies (web client only). A standard HTTP session cookie to keep you signed in.
• Purchase records. When you make an optional in-app purchase (such as a tip or a limited-edition skin), we store the item, the amount paid, and a timestamp so we can restore your unlocks. See Section 4 (In-App Purchases) below.

We do not collect device contacts, location, precise identifiers, biometric data, or advertising IDs. Payment card details are handled entirely by the app store and our purchase processor — they never reach our servers.

2. How We Use Information

• To authenticate you via one-time SMS code.
• To send friend-challenge invitations you explicitly initiate.
• To display your scores and challenges to you and to opponents you invite.
• To prevent abuse and enforce rate limits.
• To diagnose and fix problems with the Service.

3. SMS & Twilio

We use Twilio, Inc. to deliver SMS messages. Phone numbers and message content are transmitted to Twilio solely for the purpose of message delivery. We do not sell or share phone numbers with marketers, affiliates, or third parties for marketing purposes.

SMS opt-in is never shared with third parties or affiliates for marketing purposes. Phone numbers collected for SMS consent stay within NSTGATE, LLC and our message-delivery provider.

4. In-App Purchases & RevenueCat

Optional in-app purchases (tips and limited-edition skins) are processed by the Apple App Store or Google Play and managed through RevenueCat, Inc.. We never receive or store your payment card details. We record which items you purchased and the amount so your unlocks can be restored across devices. Purchases are one-time and non-refundable except as required by the applicable app store's policies.

5. How to Opt Out of SMS

Reply STOP to any Tap Out message to immediately opt out of all further SMS from us. Reply HELP for help. You may also email adam@nstgate.com to request opt-out or deletion of your data.

6. Data Retention

• Phone verifications: deleted on successful sign-in or after 10 minutes, whichever comes first.
• Challenges: retained indefinitely so you can view your history. Pending challenges auto-expire after 24 hours.
• SMS event logs: retained for abuse-prevention purposes. You may request deletion at any time.

7. Your Rights

You may delete your account and all associated data at any time — either from within the app or at our account deletion page. You may also request access to, correction of, or deletion of your personal information by emailing adam@nstgate.com. We will respond within a reasonable time.

8. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Security

We use TLS for all data in transit and follow industry-standard practices to protect data at rest. No system is perfectly secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service.

11. Contact

NSTGATE, LLC
Email: adam@nstgate.com