Privacy Policy

1. Scope

This Privacy Policy explains how Tech Itch Labs, LLC, a Florida limited liability company(“Tech Itch Labs, LLC”, “we”, “us”) handles information in connection with tintap.app and the TinTap product (together, the “Service”). It forms part of our Terms of Service.

The Service is intended solely for adults aged 21 or over. We do not knowingly collect information from anyone under that age. See Section 10.

2. What we do not do

These statements describe the Service as it operates on the effective date above, and we state them plainly because they are unusual:

• We set no cookies of any kind on this website.
• We run no analytics product. There is no Google Analytics, no pixel, no tag manager, no session recorder and no heatmap tool.
• We embed no third-party trackers, advertising networks, social widgets or fingerprinting scripts.
• We have never sold or shared personal information for money or for cross-context behavioural advertising, and we do not do so.
• The calculators and the self-assessment run entirely in your browser. The figures you type are never transmitted to us. Where a result can be shared as a link, the values are encoded in the URL itself, which means the only way we could ever see them is if you send that link to us.
• There are no user accounts, no passwords and no login.

If any of this changes we will update this policy and the “Last updated” date before the change takes effect.

3. Information we collect

3.1 Information you give us

3.2 Information collected automatically

When you submit the waitlist form we record the date and time, your IP address and your browser’s user-agent string, alongside the submission. We use these to detect and prevent automated abuse of the form and to evidence consent. Our hosting and content-delivery providers also generate standard server logs containing IP addresses and request metadata, which exist for security and reliability purposes.

3.3 Information from the product

The TinTap hardware and its tap log are not yet available. When they launch, tapping the tag will record a timestamp, and this section will be updated before any such data is collected. Because a record of nicotine use may qualify asconsumer health data under the laws of some states, we will seek your separate, informed consent before collecting it, and will publish the additional disclosures those laws require. See Section 8.4.

4. Payment information

We do not collect or store full payment card numbers. Payments are processed by a third-party payment processor that receives your card details directly. We receive only a confirmation, the last four digits, and the billing information necessary to fulfil and account for the order. The processor handles your payment data under its own privacy policy.

5. How we use information

We use the information described above only to:

• notify you when TinTap becomes available;
• respond to your enquiries and provide customer support;
• process, fulfil and account for orders, including refunds;
• secure the Service and prevent fraud, spam and abuse;
• understand, in aggregate, which pages lead people to sign up;
• comply with law and enforce our Terms of Service.

We do not use your information for advertising, do not build behavioural profiles, and do not make decisions about you by solely automated means that produce legal or similarly significant effects.

5.1 Marketing email

Joining the waitlist signs you up for exactly one email: a notification when the product ships. Every marketing message we send carries a working unsubscribe link, and unsubscribing takes effect promptly. We may still send you transactional messages about an order you have placed.

6. Who we share it with

We do not sell your personal information. We do not share it for cross-context behavioural advertising. We disclose it only to the following categories of recipient, and only as necessary:

These providers act as our service providers or processors, are bound to use the information only to perform services for us, and are prohibited from using it for their own purposes.

We may also disclose information where we believe in good faith that it is required to comply with law, legal process or a governmental request; to enforce our Terms; to detect or address fraud, security or technical issues; or to protect the rights, property or safety of Tech Itch Labs, LLC, our users or the public. If we are involved in a merger, acquisition, financing, reorganisation or sale of assets, information may be transferred as part of that transaction, subject to this policy.

7. Retention and security

We keep waitlist entries until the launch notification has been sent and you have had a reasonable opportunity to act on it, or until you ask us to delete your record, whichever comes first. Order records are kept for as long as required by tax, accounting and consumer-protection law. Server logs are kept for a short period for security purposes and then discarded.

We use reasonable administrative, technical and organisational measures to protect information, including encryption in transit, restricted access and a deliberately small data footprint. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security, and you provide information at your own risk.

8. Your rights

You may ask us to access, correct, delete or export your information, or to stop contacting you, by emailing privacy@techitchlabs.com. We will respond within the period required by applicable law. We may need to verify your identity before acting, usually by asking you to confirm from the email address on file. We will not discriminate against you for exercising any of these rights.

8.1 California residents

Under the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing; and to limit the use of sensitive personal information. In the twelve months preceding the effective date of this policy we collected the categories of information described in Section 3, for the purposes in Section 5, and disclosed them only to the service providers listed in Section 6.We have not sold or shared personal information, and we do not use sensitive personal information for any purpose requiring a right to limit. You may designate an authorised agent to make a request on your behalf.

8.2 Other United States residents

Residents of Florida, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights of access, correction, deletion, portability and opt-out, and may appeal a refused request by replying to our response. Use the same contact address above.

8.3 EEA, UK and Swiss residents

Where the GDPR or UK GDPR applies, our legal bases are: consent for the waitlist and marketing email, which you may withdraw at any time;performance of a contract for orders and support; andlegitimate interests for security, fraud prevention and the basic operation of the Service. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with your supervisory authority. Information is processed in the United States; where required we rely on the European Commission’s Standard Contractual Clauses.

8.4 Consumer health data

Some state laws — notably the Washington My Health My Data Act and the Nevada consumer health data law — define “consumer health data” broadly enough that a record of nicotine consumption could fall within it. As described in Section 3.3, we do not collect any such record today. Before we do, we will obtain your separate and specific consent, publish any additional notice those laws require, and honour the associated rights of access and deletion. We will never sell consumer health data.

9. Do Not Track

Because we operate no tracking infrastructure, there is nothing for a Do Not Track or Global Privacy Control signal to disable. We honour such signals by default in the only way available to us: by not tracking anyone.

10. Children

The Service is for adults aged 21 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact privacy@techitchlabs.com and we will delete it promptly.

11. Third-party links

The Service links to external websites and cites third-party research. We do not control those sites and are not responsible for their content or privacy practices. This policy applies only to the Service.

12. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date, and for material changes affecting how we handle information already collected, we will provide prominent notice on the Site and, where legally required, obtain your consent before the change applies to that information.

13. Contact

Privacy questions and rights requests:privacy@techitchlabs.com.

Tech Itch Labs, LLC, a Florida limited liability company
3110 1st Ave N, Ste 2M PMB 1050, St. Petersburg, FL 33713