Who we are
Tap for Her (tapforher.com) is a small independent service run by a sole proprietor in Pakistan, who is the “controller” of the personal data described here.
- Operated by: Muhammad Sheharyar, sole proprietor, Pakistan
- Email: hello@tapforher.com
What we store
When you make a surprise (the sender)
- The surprise itself — her name, your name, your words, the template and features you picked, and any photos, songs or voice notes you upload.
- A private edit key — a random secret saved in your browser so you (and only you) can edit, track or delete the surprise.
- Your email, if you choose to sign in. Signing in is optional; it lets you see your surprises on every device. We use it to send you sign-in links and important service messages — never marketing without asking.
When she opens it (the recipient)
- Open counts — when the surprise was first and last opened and how many times, so you can see that she opened it. We don't record her IP address, location or device in our database.
- Her reply, if she sends one — an emoji, a message and optionally a selfie, shown to the sender.
- Love coupons she redeems — which coupon and when.
When a friend adds a wish
- The name they type, their message and an optional photo. These appear on her wish wall inside the surprise.
Wedding cards and RSVPs
- The card — the names, families, dates, times and venues the family types in.
- A guest's RSVP — the name they give, whether they're coming, how many people, which events and an optional message.
- A guest's WhatsApp number, only if they choose to give it and tick “The family can message me about the wedding”. Only the family who made the card can see it. We don't message guests ourselves.
Usage counts
- We count things like “a surprise was made”, “a card was saved as an image” or “a link was copied” to see how Tap for Her is doing. These counts contain no names, emails, numbers or messages.
What we don't do
- No advertising, no ad or social-media trackers, no analytics that follow you across sites, no selling or renting data.
- No passwords — sign-in is by an emailed link.
To keep the service safe, our servers briefly keep the IP address of each request in memory to stop abuse (rate limiting), and our hosting provider keeps short-lived technical logs. These are not used to profile anyone.
Why we use it
To provide the service you asked for: building your surprise, showing it to the person you send it to, letting friends add wishes, and telling you when she opens it (performing our agreement with you). To keep the service secure and working (our legitimate interest). If you sign in, to email you sign-in links.
Where it lives
- Vultr (The Constant Company, LLC) hosts our server in Tokyo, Japan. The website, the database, uploaded files and sign-in accounts all live on that server, with backups.
- Email delivery: sign-in links and notifications are sent from our own mailbox (hello@tapforher.com) through our email provider, Spacemail.
- Paddle (Paddle.com), our reseller and Merchant of Record, runs checkout when you buy an upgrade. Paddle collects your email, country and payment details under its own privacy notice; we never see or store your card details. We receive the order number, what was bought and for which surprise or wedding.
These providers process data only on our instructions. Because they operate outside Pakistan, your data may be transferred internationally; they use industry-standard safeguards (including Standard Contractual Clauses where required).
WhatsApp and other share buttons simply open your own app with a message pre-filled — we don't send anything to WhatsApp ourselves, and what happens there is covered by that app's own privacy policy.
Who can see a surprise
- Links are unlisted, not secret-proof. A surprise isn't searchable or listed anywhere, and we ask search engines not to index it — but anyone who has the link can open it. Share it only with the people you mean to.
- Friend invite links let whoever has them add a wish to that surprise's wall. They can't see or edit anything else.
- Uploaded photos and audio are served from public web addresses that are long and unguessable, so they can be shown inside the surprise.
- The sender can see the recipient's reply and friends' wishes; the sender can remove any friend's wish.
How long we keep it
- Surprises — kept until the sender deletes them (from My surprises). Deleting a surprise also deletes its replies, friends' wishes and coupon history.
- Your account — until you delete it on your account page. That removes your sign-in, every surprise you own and the files in them.
- Guests' WhatsApp numbers — removed automatically 30 days after the wedding's last event. Deleting a wedding card deletes all its RSVPs straight away.
- Surprises made without signing in can be deleted by whoever holds the edit key (the browser that made it). If you've lost it, email us from a way we can verify and we'll help.
Cookies and browser storage
- One sign-in cookie, only if you sign in, to keep you signed in. It's strictly necessary, so there's no banner.
- Your browser's local storage keeps your unfinished draft and the list of surprises you've made on this device (with their edit keys). It never leaves your device unless you save or sign in.
- No advertising or tracking cookies.
Children
Tap for Her is for people aged 13 or older. We don't knowingly collect data from children under 13. If you believe a child has used the service, email hello@tapforher.com and we'll delete it.
Your rights
You can see, correct, download or delete your data, and object to or restrict how we use it. Most of this you can do yourself in My surprises and on your account page. For anything else — including if you're a recipient or friend who wants something removed from a surprise — email hello@tapforher.com and we'll reply within 30 days. If you're in the EU/UK you can also complain to your local data protection authority.
Security
Everything travels over HTTPS. The database is locked so the public website can't read it directly; all access goes through our server with its own private keys. No system is perfect, but we'll tell affected users promptly if something goes wrong.
Changes
If we change this policy in a meaningful way we'll update the date above and, if you've signed in, let you know by email before it takes effect.
See also our Terms.