KandiTag Privacy Policy

Last updated: June 29, 2026

KandiTag is operated by KandiWooks LLC ("KandiWooks", "we", "us"). KandiTag turns NFC kandi tags into a shared "passport" of memories. This policy explains what we collect, how we use it, and the choices you have. By using the KandiTag app or website (the "Service") you agree to this policy.

Information we collect

• Account information — if you create an account, your email address (or the Apple/Google identifier you sign in with), a display handle, and any optional profile details you add (bio, home city, social handles, profile photo).
• Content you submit — the content you create through the Service, such as photos, videos, captions, reactions, comments, and other text, together with the show or venue you tag it with. You can also post anonymously without an account, using a temporary device alias.
• Location — if you grant permission, we use your device location to suggest the festival or venue you're at when you post. We only store location data when you choose to add a place that isn't yet in our list (its approximate coordinates).
• Device & technical data — a device identifier and, if you enable notifications, a push token, so we can deliver alerts about your tags; and limited technical and diagnostic data (such as app version, device type, and log data) used to operate, secure, and improve the Service.
• Tag activity — which tags you've tapped, posted to, or own, to build the tag's trail and your passport.

How we use your information

• Operate the Service — show tag pages, trails, passports, and your posts.
• Authenticate you and keep your post history tied to your account.
• Suggest nearby shows and stamp your passport.
• Send notifications you opt into.
• Keep the community safe — moderate content, and respond to reports and blocks.

We do not sell your personal information, and we do not use it for third-party advertising.

How we share information

• Other users — your handle, profile details, and the content you share are visible on the tags you contribute to and on your public profile. Anonymous contributions are shown without your identity.
• Service providers — we use Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Messaging) to host data and run the app, and Apple / Google for sign-in. Their handling of data is governed by their own privacy policies.
• Legal — we may disclose information if required by law or to protect the safety of our users.

Your choices & rights

• Delete your account — in the app, go to Account → Delete account. This permanently removes your account, your posts, and frees any tags you own. You can also email us to request deletion.
• Location and notifications are optional — manage them in iOS Settings at any time.
• Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have rights to access, correct, or delete your data. Contact us to exercise them.

Data retention

We keep your information while your account is active. When you delete your account we remove your profile, posts, and media. Some records may persist briefly in backups before they expire.

Children

KandiTag is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we'll delete it.

Security

Data is transmitted over HTTPS and stored with our cloud provider's standard protections. No method of transmission or storage is 100% secure.

Changes

We may update this policy; we'll revise the "Last updated" date and, for material changes, provide additional notice.

Contact

Questions or requests: kandiwooks@gmail.com