Terms of Service

Last updated: 18 June 2026

These Terms of Service ("Terms") form a legally binding agreement between you ("you", "your", "Operator") and Nicklas Sharma, trading as Tapcarry ("Tapcarry", "we", "us", "our"), governing your access to and use of the Tapcarry platform and services.

By creating an account, clicking "I agree", or otherwise using Tapcarry, you confirm that you have read, understood, and agreed to these Terms. If you do not agree, do not use the service.

These Terms apply to B2B customers only. Tapcarry is a business-to-business platform. If you are accessing Tapcarry on behalf of a company or organisation, you represent that you have authority to bind that entity to these Terms.

1. Definitions

Term	Meaning
Service	The Tapcarry SaaS platform, including the admin dashboard, employee dashboard, Apple Wallet pass generation, and all related features
Operator	You — the business, sole trader, or organisation that has registered for a Tapcarry account
End-customer	A consumer of the Operator's business who receives a digital stamp card via Apple Wallet through the Service
Pass	A digital loyalty stamp card delivered to an End-customer via Apple Wallet
Subscription	A paid plan (Grow, Scale, or Brand) granting access to specific features and usage limits
Paddle	Paddle.com Market Limited, our Merchant of Record, which handles all billing and payment processing
Content	Any data, text, logos, images, or other material the Operator uploads to or creates within the Service
DPA	The Data Processing Agreement set out in Schedule A of these Terms

2. The Service

Tapcarry provides brick-and-mortar businesses with a platform to create and operate digital stamp-card loyalty programmes delivered to customers via Apple Wallet, with no app download required. The Service includes:

Admin dashboard for creating and managing loyalty programmes
Employee dashboard for issuing and managing stamps
Apple Wallet pass generation and delivery
Push notifications to End-customers (paid plans only)
Analytics and reporting
Customer management tools

We reserve the right to add, modify, or discontinue features at any time, subject to the notice obligations in Section 14.

3. Account Registration

3.1 Eligibility

You must be at least 18 years old and have the legal authority to enter into contracts in your jurisdiction to create a Tapcarry account. By registering, you represent that you meet these requirements.

3.2 Account information

You agree to provide accurate, current, and complete information when registering and to keep it up to date. You are responsible for ensuring that the email address and business details associated with your account are correct.

3.3 Account security

You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. You must notify us immediately at support@tapcarry.com if you become aware of any unauthorised access.

3.4 Team access

If you invite employees or team members to access your account via the employee dashboard, you remain solely responsible for their actions within the Service. Each invited user must comply with these Terms.

4. Subscription Plans and Billing

4.1 Plans

Tapcarry offers the following plans:

Plan	Monthly	Annual (save 2 months)	Active passes	Stamps	Push notifications	Employee logins
Sprout	Free	Free	5	20 / month	None	1
Grow	€29	€290	50	Unlimited	1 / week	2
Scale	€59	€590	200	Unlimited	2 / week	5
Brand	€129	€1,290	Unlimited	Unlimited	Unlimited (24 hr cooldown)	Unlimited

Regional pricing. The prices above apply to billing in Euros (EUR), British Pounds (GBP), and US Dollars (USD) — the numeric price is the same across all three currencies (for example, the Grow plan is €29, £29, or $29 per month, depending on your billing currency). Your billing currency is determined by Paddle based on your location at checkout.

Customers billing in Indian Rupees (INR) are charged the following regional prices instead:

Plan	Monthly	Annual (save 2 months)
Sprout	Free	Free
Grow	₹1,499	₹14,990
Scale	₹2,999	₹29,990
Brand	₹5,999	₹59,990

We may introduce or adjust regional pricing for additional currencies or markets at any time. The price applicable to you is the one shown at checkout in your billing currency.

All plans include: custom card branding, dashboard and analytics, and activity page. Grow, Scale, and Brand plans include priority support. Passes are paused (not deleted) when an account reaches its active pass limit.

How usage limits are measured: Monthly stamp limits reset at 00:00 UTC on the 1st of each calendar month; stamps added in any given month (whether by employee scan or admin manual adjustment) count toward that month's total. Push notification limits are enforced on a rolling 7-day window — the count reflects notifications sent in the 7 days immediately preceding each send attempt, not a fixed weekly calendar period.

All prices are inclusive of applicable taxes. Paddle calculates and remits the applicable taxes (including VAT/GST) from the displayed price as Merchant of Record. Business customers with a valid VAT number may be exempt from VAT under the reverse charge mechanism — provide accurate billing details at checkout to ensure correct tax treatment.

4.2 Merchant of Record

All billing, invoicing, payment processing, and tax collection is handled exclusively by Paddle.com Market Limited, which acts as the Merchant of Record for all Tapcarry subscriptions. When you purchase a subscription, your legal purchase agreement for the payment transaction is with Paddle, not with Tapcarry. Paddle's own Terms of Service and Privacy Policy apply to the payment transaction.

4.3 Billing cycle

Subscriptions are billed monthly in advance. Your billing date is the date you first activated your paid subscription. Subscriptions renew automatically at the end of each billing period unless cancelled in accordance with Section 10.

4.4 Price changes

We may change subscription prices at any time. We will give you at least 30 days' written notice by email before a price change takes effect. If you do not cancel before the new price takes effect, you will be deemed to have accepted the new price.

4.5 Taxes

All displayed prices are inclusive of applicable taxes. Paddle is responsible for calculating and remitting taxes (including VAT/GST) as Merchant of Record — the price shown is the price charged. Business customers with a valid VAT number may qualify for VAT exemption under the reverse charge mechanism. Provide accurate billing details to ensure correct tax treatment.

4.6 Failed payments

If a payment fails, Paddle will attempt to retry the charge. If payment remains unsuccessful after reasonable retry attempts, your account may be downgraded to the Sprout plan or suspended until payment is resolved.

4.7 Plan changes

You may upgrade or downgrade your plan at any time from your account settings. Plan changes take effect immediately and are billed using Paddle's prorated_immediately mode — proration is calculated to the minute based on the time remaining in your current billing period.

Upgrade — the prorated difference between your old and new plan is charged immediately via Paddle. You will receive an email receipt confirming the charge.
Downgrade — the prorated value of unused time on your current plan is credited immediately to your Paddle account balance. You will receive an email confirming the credit. This balance is automatically applied against your next invoice, reducing the amount charged at your next renewal.

Proration calculations are performed automatically by Paddle as Merchant of Record. For full details of how Paddle calculates prorated amounts, see Paddle's proration documentation.

5. Free Tier (Sprout Plan)

The Sprout plan is provided free of charge and is subject to the following limitations:

Maximum of 5 active passes
Maximum of 20 stamps per month
Push notifications are not available on the Sprout plan
Maximum of 1 employee login
No priority support

We reserve the right to modify the features and limits of the Sprout plan at any time with 14 days' notice. Continued use of the Sprout plan after changes take effect constitutes acceptance of the revised limitations.

The Sprout plan is intended for individual businesses testing the platform. We reserve the right to terminate Sprout accounts that appear to be used for bulk, automated, or commercial resale purposes.

6. Acceptable Use

6.1 Permitted use

You may use the Service only for lawful business purposes in connection with operating a genuine customer loyalty programme for your business.

6.2 Prohibited use

You must not use the Service to:

Violate any applicable law or regulation, including GDPR and Austrian data protection law
Collect or process personal data of End-customers without a lawful basis under GDPR
Send unsolicited commercial messages (spam) to End-customers
Operate loyalty programmes on behalf of third-party businesses without our written consent
Resell, sublicense, or white-label the Service without our written consent
Reverse engineer, decompile, or attempt to extract source code from the Service
Upload malicious code, conduct security attacks, or interfere with the Service's infrastructure
Impersonate any person or entity or misrepresent your affiliation
Create multiple free accounts to circumvent Sprout plan limits
Operate a loyalty programme for businesses in the following categories: gambling or betting services, adult or pornographic content, weapons or firearms, tobacco or tobacco-related products, or any product or service that is illegal under Austrian law

6.3 End-customer communications

You are solely responsible for all communications sent to your End-customers via the Service, including push notifications and pass content. You must comply with all applicable laws governing marketing communications and obtain any required consents before sending push notifications.

6.4 Enforcement

We reserve the right to suspend or terminate your account immediately and without notice if we reasonably believe you are in material breach of this Section.

7. Intellectual Property

7.1 Tapcarry IP

The Service, including its software, design, features, trademarks, and all content we create, is owned by Nicklas Sharma (trading as Tapcarry) or its licensors and is protected by Austrian and international intellectual property law. Nothing in these Terms grants you any ownership right in the Service.

We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Service during your subscription for its intended purpose.

7.2 Your content

You retain full ownership of all Content you upload to the Service (logos, business names, reward descriptions, etc.). By uploading Content, you grant Tapcarry a limited, royalty-free licence to host, display, and process that Content solely to provide the Service to you.

You represent and warrant that you own or have the necessary rights to all Content you upload, and that it does not infringe any third party's intellectual property rights.

7.3 Feedback

If you provide feedback, suggestions, or ideas about the Service, you grant us a perpetual, irrevocable, royalty-free licence to use that feedback for any purpose, including improving the Service, without compensation to you.

8. Apple Wallet

The Service uses Apple Wallet for pass delivery. You acknowledge that:

Apple Wallet is a third-party service governed by Apple's own Terms of Service and developer guidelines
Tapcarry is not responsible for the availability, accuracy, or functionality of Apple Wallet
Pass delivery depends on End-customers' devices and iOS version; we cannot guarantee delivery to all devices
Apple may change its Wallet platform at any time, which may affect the Service

9. Your Obligations as a Data Controller

Where you use the Service to collect and process personal data of your End-customers, you are the data controller for that data under GDPR. You agree to:

Maintain a lawful basis for collecting your End-customers' personal data
Inform your End-customers about your data processing activities in accordance with GDPR Articles 13 and 14
Respond to data subject requests from your End-customers within the statutory timeframes
Ensure that your use of the Service complies with all applicable data protection laws
Enter into the Data Processing Agreement set out in Schedule A of these Terms, which governs how Tapcarry processes your End-customers' data on your behalf

By accepting these Terms, you also accept the terms of Schedule A.

10. Cancellation and Termination

10.1 Cancellation by you

You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of the current billing period. You will not receive a refund for any unused portion of a paid period, except as required by applicable law or as set out in our Refund Policy.

After cancellation your account will be downgraded to the Sprout plan (subject to its limitations). Your data will not be deleted on cancellation. To permanently delete your account and all associated data, you must use the Delete Account function in your account settings.

10.2 Termination by Tapcarry

We may suspend or terminate your account with immediate effect and without prior notice if:

You materially breach these Terms and (where the breach is remediable) fail to remedy it within 7 days of written notice
You fail to pay any amounts due and fail to resolve the payment within 14 days
We are required to do so by law or a court order
We reasonably believe your use of the Service creates legal or reputational risk to Tapcarry

We may terminate your account with 30 days' notice if we decide to discontinue the Service in whole or in part.

10.3 Effect of termination

On termination, your right to access the Service ceases immediately. We will retain your data in accordance with our Privacy Policy and the DPA in Schedule A. You may request deletion of your account and data at any time by contacting support@tapcarry.com.

11. Warranties and Disclaimers

The Service is provided "as is" and "as available". To the fullest extent permitted by Austrian law, we disclaim all warranties, express or implied, including:

That the Service will be uninterrupted, error-free, or secure
That the Service will meet your specific business requirements
That data or pass delivery will be error-free or timely
Any implied warranties of merchantability or fitness for a particular purpose

We do not warrant the accuracy, completeness, or reliability of any analytics data provided by the Service.

12. Limitation of Liability

12.1 Exclusion of certain damages

To the fullest extent permitted by Austrian law, Tapcarry (and Nicklas Sharma as the sole operator) shall not be liable for any:

Loss of profits or revenue
Loss of business or contracts
Loss of anticipated savings
Loss or corruption of data
Indirect, incidental, special, or consequential loss of any kind

12.2 Liability cap

Our total aggregate liability to you for any claims arising under or in connection with these Terms, whether in contract, tort, or otherwise, shall not exceed the total fees paid by you to Tapcarry in the 12 months immediately preceding the event giving rise to the claim, or €100, whichever is greater.

12.3 Exceptions

Nothing in these Terms limits or excludes liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited under Austrian law.

13. Indemnification

You agree to indemnify, defend, and hold harmless Nicklas Sharma (trading as Tapcarry) from and against any claims, losses, damages, costs, and expenses (including reasonable legal fees) arising out of or related to:

Your use of the Service in violation of these Terms
Your Content and any claim that it infringes a third party's rights
Your processing of End-customer personal data in breach of GDPR or applicable law
Your End-customer communications, loyalty programme content, or business operations

14. Changes to These Terms and the Service

14.1 Changes to Terms

We may update these Terms at any time. For material changes (changes that affect your rights or obligations), we will give at least 14 days' written notice by email. For minor changes (corrections, clarifications), we will update the "Last updated" date and notify you in the dashboard.

Your continued use of the Service after the effective date of updated Terms constitutes your acceptance of them.

14.2 Changes to the Service

We may add, modify, or remove features at any time. For changes that materially reduce the core functionality of your current paid plan, we will give at least 14 days' notice and offer you the option to cancel and receive a pro-rata refund for the unused portion of your billing period.

15. Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the laws of Austria, without regard to its conflict of law provisions.

Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the competent courts of Salzburg, Austria.

If you are based outside Austria, mandatory consumer protection laws of your country of residence may also apply, but since Tapcarry is a B2B service, the consumer protection provisions of the Austrian Konsumentenschutzgesetz (KSchG) do not apply to this agreement.

16. General

16.1 Entire agreement

These Terms, together with our Privacy Policy and the DPA in Schedule A, constitute the entire agreement between you and Tapcarry regarding the Service and supersede all prior agreements or understandings.

16.2 Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions will continue in full force and effect.

16.3 No waiver

Our failure to enforce any right or provision of these Terms will not be considered a waiver of that right or provision.

16.4 Assignment

You may not assign or transfer your rights under these Terms without our prior written consent. We may assign our rights and obligations to a successor in connection with a merger, acquisition, or sale of assets.

16.5 Force majeure

We will not be liable for any failure or delay in performance due to causes beyond our reasonable control, including internet outages, third-party service failures (Apple, Supabase, Paddle), natural disasters, or changes in law.

17. Contact

Nicklas Sharma, Holzmeisterstrasse 24, Top 93, 5071 Salzburg, Austria — support@tapcarry.com

Schedule A — Data Processing Agreement (DPA)

This Data Processing Agreement ("DPA") forms part of the Terms of Service between the Operator ("Controller") and Nicklas Sharma trading as Tapcarry ("Processor"). It governs the processing of personal data by Tapcarry on behalf of the Operator as required by Article 28 of the GDPR.

A1. Subject Matter and Duration

The Processor provides the Tapcarry loyalty platform to the Controller. In doing so, the Processor processes personal data of the Controller's End-customers on behalf of the Controller. This DPA applies for as long as the Operator holds a Tapcarry account.

A2. Nature and Purpose of Processing

Item	Detail
Purpose	Operating digital stamp-card loyalty programmes on behalf of the Controller
Nature	Collection, storage, retrieval, update, transmission (Apple Wallet), and deletion of End-customer data
Types of personal data	Name, email address, stamp card activity, Apple Wallet pass delivery tokens
Categories of data subjects	End-customers of the Controller (consumers who receive loyalty stamp cards)

A3. Obligations of the Controller (Operator)

The Controller shall:

Ensure it has a valid lawful basis under GDPR to share End-customer personal data with the Processor
Provide End-customers with a privacy notice compliant with GDPR Articles 13/14 before their data is shared with Tapcarry
Promptly notify Tapcarry if it receives a data subject request relating to data processed by Tapcarry
Ensure that any instructions it gives to the Processor comply with applicable data protection law

A4. Obligations of the Processor (Tapcarry)

Tapcarry shall:

Process End-customer personal data only on documented instructions from the Controller, and solely for the purpose of providing the Service
Ensure that all personnel with access to End-customer data are bound by appropriate confidentiality obligations
Implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised access (see Section A6)
Not engage additional sub-processors without prior written consent from the Controller, except as listed in Section A5
Assist the Controller in responding to data subject requests within the applicable statutory timeframes
Notify the Controller without undue delay (and in any event within 72 hours) upon becoming aware of a personal data breach affecting End-customer data
At the Controller's choice, delete or return all End-customer personal data upon termination of the account, and delete existing copies unless retention is required by law

A5. Approved Sub-processors

The Controller grants general authorisation for Tapcarry to engage the following sub-processors:

Sub-processor	Role	Location
Supabase, Inc.	Database hosting and storage	eu-west-3, Frankfurt, Germany
Vercel Inc.	Platform hosting	EU servers (US-headquartered)
Apple Inc.	Apple Wallet pass delivery	USA

Tapcarry will inform the Controller of any intended changes to this list (additions or replacements) with at least 14 days' notice, giving the Controller the opportunity to object. If the Controller objects and the parties cannot resolve the disagreement, either party may terminate the affected services.

A6. Security Measures

Tapcarry implements the following technical and organisational security measures:

Encryption of data in transit (TLS 1.2+) and at rest
Row-level security (RLS) enforced at database level via Supabase
Access controls and role-based permissions limiting data access to authorised personnel
Regular dependency and security updates
Supabase authentication for all admin and employee access

A7. Data Subject Requests

If Tapcarry receives a data subject request directly from an End-customer relating to data controlled by the Operator, Tapcarry will forward the request to the Operator within 5 business days and will not respond directly to the data subject without the Controller's authorisation.

A8. Data Breach Notification

In the event of a confirmed personal data breach affecting End-customer data, Tapcarry will:

Notify the Controller without undue delay and no later than 72 hours after becoming aware of the breach
Provide the Controller with sufficient information to enable it to meet its own GDPR notification obligations
Co-operate with the Controller in investigating and mitigating the breach

A9. Transfers Outside the EEA

Where personal data is transferred to sub-processors outside the EEA (e.g. Vercel, Apple), Tapcarry shall ensure appropriate safeguards are in place, specifically the Standard Contractual Clauses (SCCs) approved by the European Commission.

A10. Audit Rights

The Controller may, at its own cost and with reasonable prior notice (at least 30 days), request information from Tapcarry sufficient to demonstrate compliance with this DPA. Tapcarry may satisfy this obligation by providing relevant certifications, documentation, or completing a written questionnaire rather than permitting on-site audits, given the solo-operator nature of the business.