Redipple Privacy Policy

Effective date: September 22, 2026

Redipple is a product-catalog and inventory organization service operated by TapThat Concepts Lc (“we,” “us,” or “our”). This policy explains how we handle information when you use Redipple at redipple.tapthatconcepts.com or contact us. Questions and privacy requests can be sent to accounts@tapthatconcepts.com.

Information we collect

Account and profile information. We collect your name, email address, verification status, and preferences such as currency, measurement system, and time zone. If you create a password, we store a cryptographic password hash rather than your readable password. We also maintain authentication records, sessions, and verification or recovery records.

Optional provider sign-in. When you choose an available provider such as Google or Microsoft, we receive the account identifier and basic profile information the provider supplies, such as your name, email address, and profile picture. Authentication records may include tokens supplied by that provider. We use this information to identify you and operate your account. Google sign-in requests only basic identity, email, and profile access; it does not give Redipple access to your Gmail messages, Google Drive files, or contacts. Each provider also handles information under its own privacy policy.

Catalog and business information. We store the content you save, including catalog and business names, product descriptions, categories, sizes, SKUs, barcodes, supplier information, purchase prices, storage settings, stock areas, and other product details you enter. We also store business membership, roles, invitations, and associated email addresses.

Service and security information. Our hosting and authentication systems process technical information such as IP addresses, browser or device information, request times, session activity, and errors to deliver and protect the service. If you contact us, we receive the information in your message.

How we use information

We use information to provide sign-in and recovery, save and synchronize catalogs, apply your preferences, support collaboration, send account and invitation emails, respond to support requests, troubleshoot problems, prevent abuse, and meet applicable legal obligations. We do not use Google sign-in information for advertising or to train general-purpose AI models.

Browser storage and barcode scanning

Redipple uses essential authentication cookies and browser storage to maintain sessions, retain local catalogs and preferences, cache application files, and support synchronization. A catalog used without an account is stored on that browser; signing in alone does not necessarily upload every local catalog. Catalogs connected to your account are synchronized to our servers as you save changes.

Copies of catalog information can remain in browser storage. Use a trusted device and clear site data when appropriate. Clearing browser data can permanently remove guest catalogs and changes that have not synchronized.

Camera scanning requires your permission. The current scanner processes camera frames on your device and does not upload or store camera video on our servers. A decoded barcode may be searched or saved as catalog data. You can enter a barcode manually instead and revoke camera access in your browser settings.

The current Redipple application does not include advertising cookies or third-party advertising or behavioral-analytics trackers. Identity providers may use cookies when you visit their sign-in pages.

Who receives information

• Your business collaborators. When a catalog is associated with a business, authorized members can access it. Staff can view, create, and edit products. Admins have additional management permissions, including membership management and permanent product deletion. Business Admins can see member names, email addresses, and roles. Removing access does not erase copies someone previously exported or retained.
• Service providers. Cloudflare hosts the application and cloud database and processes information needed for delivery and security. Google Workspace delivers our account and invitation emails, including recipient addresses and message content. If you choose provider sign-in, the relevant provider processes that sign-in. We do not request access to your mailbox to send these account emails.
• Legal and protective disclosures. We may disclose information when required by law or reasonably necessary to protect rights, safety, or the security of the service.
• Business changes. Information may transfer as part of a merger, acquisition, or transfer of the service, subject to applicable law and notice where required.

We do not sell personal information or share it for cross-context behavioral advertising. We do not make your private catalogs publicly searchable.

Retention and security

We retain account and catalog information while needed to provide the service and for legitimate security, dispute-resolution, and legal purposes. Archiving a product retains it for possible restoration; it is not deletion. Deleting an account does not necessarily delete a business catalog that other authorized members continue to use.

Deletion requests are reviewed to verify identity and authority, identify shared business records, and determine any lawful retention requirements. Deleted information may remain temporarily in provider backups or security records until those records expire or are overwritten. We do not promise immediate removal from every backup.

We use measures including HTTPS, password hashing, session controls, and server-side access checks. No service can guarantee absolute security. Protect your login credentials and devices, and contact us if you suspect unauthorized access.

Your choices and requests

You can edit available profile preferences, manage permitted catalog content, use available export tools, and contact accounts@tapthatconcepts.com to request access, correction, account closure, or deletion. We may ask for information needed to verify your request. Business users should also contact their business Admin about business-controlled records and access.

Depending on your location and applicable law, you may have additional rights to obtain a copy of your information, restrict or object to processing, withdraw consent where consent is the basis for processing, or complain to a privacy authority. We will evaluate requests under the law that applies to them. We do not penalize you for exercising applicable privacy rights. Revoking a provider connection does not itself delete your Redipple account or catalogs.

International processing and age limits

Our service providers may process information in the United States and other countries where they operate. We do not promise storage in a particular country. Where legally required, appropriate safeguards must apply to international transfers.

Redipple is intended for adults managing personal or business catalogs, not children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Changes and contact

We may update this policy as the service changes. We will post an updated effective date and provide additional notice of material changes where appropriate or required by law.

Contact: TapThat Concepts Lc — accounts@tapthatconcepts.com.