Privacy policy
Last updated 6 September 2026
KueTap is operated by Belmont General LLC, trading as Belmont Labs
("we", "us"). KueTap is a TowFi product. This policy explains what the
app and the website at kuetap.com collect, why, and what
you can do about it.
Two things to understand before you make a card.
First, a KueTap card is public. Anyone holding your sticker, or anyone who is sent its link, can open your card and save your details. There is no password on it. Put nothing on a card you would not hand to a stranger.
Second, we log every tap, including the IP address of the person who tapped. If you hand out a KueTap sticker, you are causing us to collect a small amount of information about people you give it to. Section 4 covers exactly what and why.
1. Information you put on a card
You choose every field. Depending on the card, that may include your first and last name, job title, company, mobile and office numbers, email address, website, street address, city, region, postal code, country, a short note, and links to social profiles.
We store this so it can be shown to anyone who taps your sticker. That is the entire purpose of the product, and it is why this data is public rather than private.
2. Photos and logos
If you upload a photo or a company logo, we store it and serve it on your card. Two things happen to every image before it is saved:
- It is resized. A display copy at 640 pixels and, for photos, a small square copy at 320 pixels that gets embedded in the contact file.
- Its metadata is stripped. Photographs taken on a phone routinely carry EXIF data including the GPS coordinates of where the picture was taken. Re-encoding the image removes this. We do this deliberately so your home address does not travel inside your headshot.
Images are served from our own server. We do not use a third-party image host or CDN.
3. Your account
KueTap signs you in using your TowFi account. We hold the account identifier that links your cards and stickers to you. Your password is never stored by KueTap; authentication is handled by the TowFi platform under the same operator.
4. Tap logs — including other people's data
Every time a card is opened or a contact file is downloaded, we record:
| What | Why |
|---|---|
| Which tag was tapped | So you can see which sticker is working |
| Date and time | Same |
| Whether it was the page or the contact file | To distinguish a look from a save |
| The outcome | To spot a revoked or unknown sticker being probed |
| IP address | Rate limiting and abuse prevention |
| Browser user agent | Diagnosing rendering problems |
We do not set cookies on the card page, run analytics scripts, embed tracking pixels, or attempt to identify the person tapping. We do not build profiles of them, and we do not link a tap to any individual.
We keep an IP address because without one we cannot stop somebody hammering the service, and because a run of failed lookups is how we would notice someone guessing at tag addresses. It is not used for anything else.
As the cardholder, you can see the tap count and recent tap times for your own stickers. You cannot see who tapped. We do not show you IP addresses, and we will not provide them to you on request.
5. What we do not do
- We do not sell, rent, or trade your information.
- We do not show advertising, and we do not let anyone pay to appear on a card.
- We do not use your card content or images to train machine learning models.
- We do not share your data with marketing or data-broker companies.
- We do not track you across other apps or websites.
6. Who else sees your data
Only where necessary to run the service:
- Our hosting provider (DigitalOcean) operates the server your data sits on, in the United States.
- Apple, if you obtained the app from the App Store, under its own terms.
- Law enforcement or a court, where we are legally required.
We may disclose information to protect the rights, property, or safety of our users or the public where we believe in good faith that disclosure is necessary.
7. Where your data lives
On servers in the United States. If you are outside the US, using KueTap means your information is transferred to and processed there, where privacy law may differ from your own.
8. How long we keep things
| Card content and images | Until you delete the card or your account |
|---|---|
| Tag records | Retained after revocation, so a retired sticker still resolves to an explanation rather than a broken page |
| Tap logs | Retained while the tag exists; removed with the tag |
| Account link | Until you delete your account |
9. Your rights
Whatever jurisdiction you are in, you may ask us to:
- Show you everything we hold about you.
- Export it in a portable format.
- Correct it — though for card content you can simply edit it.
- Delete it, including your account and every card and tag.
Email support@kuetap.com. We aim to respond within 30 days and will not charge you or degrade your service for asking.
If you are in California
Under the CCPA and CPRA you have the rights above, plus the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined, so there is no opt-out to offer you.
If you are in the EEA or UK
Our lawful basis is performance of a contract for your card content and account, and legitimate interests for tap logging — specifically keeping the service available and free from abuse. You have the rights above plus the right to object to processing and to lodge a complaint with your supervisory authority.
10. Revoking a sticker
You can revoke any tag at any time from the app. Its page and contact file stop working immediately for everyone. You do not need the physical sticker back.
We cannot recall a contact already saved into somebody's address book. Once a person has saved your card, that copy is theirs and outside our reach.
11. Children
KueTap is not directed at children and is not intended for anyone under 13. We do not knowingly collect information from children under 13. If you believe a child has given us information, email us and we will delete it.
12. Security
Traffic is encrypted with TLS. Account access uses signed tokens rather than stored passwords. Card and sticker records are scoped to their owner, and one account cannot read or edit another's. Tag addresses use 128 bits of randomness so they cannot be guessed or enumerated.
None of this makes a public card private. Anyone with the link can read it.
13. Changes
If we change this policy we will update the date at the top and, for anything material, notify you in the app before it takes effect.
14. Contact
Belmont General LLC, trading as Belmont Labs
support@kuetap.com