Tap2Pay ("we", "our", "the app") is a payment acceptance platform operated by Browne Ink for small businesses in St. Kitts & Nevis and the Caribbean. This policy explains what information we collect, why, and the choices you have.
1. Information we collect
Account information — email address, password (handled by Firebase Authentication, never visible to us), business name, business type, island, and phone number.
Verification (KYC) documents — profile photo, government-issued ID photos, ID expiry date, and bank/payout account details submitted for merchant verification.
Transaction data — amounts, currency, timestamps, descriptions, line items, card brand and last four digits, cardholder name and expiry month/year, and the device used. Full card numbers and security codes are never stored by Tap2Pay — they are transmitted directly to our payment processor over encrypted connections.
Location data — the device location at the time a charge is made, recorded for fraud review and audit purposes.
Device information — device name, model, OS version, and app version, used for device authorization and fraud prevention.
Support communications — messages you send through in-app support tickets.
2. How we use information
To process payments and issue receipts;
To verify merchants and pay out funds;
To prevent fraud, enforce limits, and keep an audit trail of account and payment activity;
To provide customer support;
To comply with legal, tax, banking, and payment-processor obligations.
3. Who we share it with
Payment processor (JAD) — receives card details and billing information needed to authorize charges. Card data goes directly to the processor and is never stored on our systems beyond brand, last four digits, cardholder name, and expiry.
Google Firebase — hosts authentication, databases, file storage, and cloud functions that operate the service.
Apple / Google push notification services — deliver transaction and account notifications to your devices.
Customers — receipt details (business name, amount, card brand/last4) are shared with the customer whose card was charged, when a receipt is sent.
We do not sell personal information to anyone.
4. Data retention and deletion
Financial and audit records (transactions, payouts, decline and audit logs) are retained as required for accounting and regulatory purposes, even after an account is closed. You may delete your account at any time from Settings / Profile → Delete Account. Deletion removes your sign-in, personal details, bank details, and uploaded ID documents; anonymized accounting records are retained.
5. Security
Data is transmitted over TLS and stored on Firebase infrastructure with access controls and security rules. Administrative access is limited to authorized Browne Ink personnel and is logged.
6. Children
Tap2Pay is a business tool and is not directed at children under 13.
7. Changes
We may update this policy; the "last updated" date above reflects the current version. Material changes are flagged in-app.
8. Contact
Questions or privacy requests: contact us through the in-app Support tab or at support@browneink.com.