Privacy Policy

Effective October 4, 2026

This policy explains what information Tagback, Inc. ("Tagback", "we", "us") collects through the Tagback iPhone app and tagback.io (together, the "Service"), how we use it, and the choices you have. If you have questions, email support@tagback.io.

Tagback recognizes faces on your iPhone. The face prints it uses to match people never leave your phone.
A photo leaves your phone only after you confirm who is in it, so it can be shared with them. The one exception is a few small images of your own face, explained below.
Your phone number is used to sign you in and to connect you with people who share photos with you. We send text messages only for sign-in codes, never marketing.
We don't sell your information, show ads, or use advertising or analytics trackers.

Information we collect

Your account

When you sign up, we collect your mobile phone number, which we verify by text message, and the name you choose to show to the people you share with. You can also add a profile photo.

Photos you tag

Tagback looks through the photo library you give it access to and suggests who appears in each photo. Suggestions stay on your phone. When you confirm that someone is in a photo, we upload:

the photo itself, as it appears in your library, including its metadata, which can include the date, time and location it was taken, plus smaller copies for display;
who you tagged, where their face is in the photo, and when you tagged it.

Photos you haven't tagged anyone in are not uploaded. If you remove a tag, or delete the photo from your library, the tag is removed from our servers, and the photo is deleted once nobody is tagged in it.

People you tag

To tag someone, you pick them from your Contacts or type in a name. Tagback reads your Contacts on your phone so you can choose people; we do not upload your address book. For each person you tag, we receive the name you use for them and one mobile number from their contact card. The number lets us recognize the same person whoever tags them, so that their photos can reach them if they join Tagback. For someone added by name only, usually a child, we receive just the name.

Faces and face recognition

To find people in your photos, the app computes a numerical description of each face (a "face print") on your iPhone. Face prints are stored only on your phone, are never sent to us, and are deleted when you delete the app.

So that people you share photos with can find you in their own photos and share them back, the app uploads up to 20 small images of your own face, taken from your profile photo and from photos you have tagged yourself in. Only people you have shared photos with can download them; their phone uses them to make face prints on that phone and then discards them. We never compute or store face prints on our servers.

Photos shared with you

When someone tags you, or a child you are a parent of, we make those photos available to you. By default the app saves them to your photo library; you can turn this off in the app's settings.

Technical information

Our service providers keep standard records of requests to our servers, such as IP address, time and the type of request, which we use to run and secure the Service. The app does not include advertising or third-party analytics software.

How we use information

To sign you in and keep your account secure.
To store and deliver the photos you tag to the people in them, and to show you photos others have tagged you in.
To respond to your messages and provide support.
To keep the Service working, prevent abuse and meet our legal obligations.

We do not sell or rent your information, use it for advertising, or use your photos to train machine learning models.

Text messages

We use your mobile number to send one-time sign-in codes when you sign in, through our messaging provider, Twilio. We do not send marketing or promotional text messages. Invitations to join Tagback are sent from your own Messages app, by you, not by us.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Message and data rates may apply. Reply STOP to stop receiving messages, or HELP for help.

Who can see your information

People you share with. The people you tag can see the photos you tagged them in, along with your name and profile photo. Anyone you give a share link to can see the photos it covers, so share links only with people you trust.
Parents. Photos tagged of a child go to the child's parents in Tagback.
Service providers that run the Service for us under contract and may use information only to provide it: Supabase (accounts and database), Cloudflare (photo storage and this website) and Twilio (sign-in text messages). Your information is stored in the United States.
Legal reasons. When we believe in good faith that the law requires it, or to protect the safety and rights of our users and others.
Business transfers. If Tagback is involved in a merger, acquisition or sale of assets, your information may be transferred as part of it, subject to this policy.

Your choices

You decide which photos the app can see in your iPhone's settings, and you can remove its access to Photos or Contacts at any time.
You can remove any tag you made, which removes it from our servers.
You can ask us for a copy of your information, to correct it, or to delete your account and the photos you uploaded, by emailing support@tagback.io. We'll respond within 30 days.
If you were tagged by someone else and want a photo removed, ask them to remove the tag, or contact us.

Retention

We keep your information while your account is open. Tagged photos are kept while someone is tagged in them. When you delete your account, we delete your account information and the photos you uploaded within 30 days, except where we must keep something to meet a legal obligation.

Children

You must be at least 13 to create a Tagback account. A parent or guardian can add their child to Tagback by name, without a phone number, so that photos of the child reach them; the child has no account and the parent controls the child's profile. We don't knowingly collect information from children under 13 except as provided by a parent in this way. If you believe a child has given us information without a parent's involvement, contact us and we'll delete it.

Security

Photos are kept in private storage and can be viewed only through short-lived links issued after checking who is asking. Information is encrypted in transit. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we make material changes, we'll update the date above and let you know in the app before they take effect.

Contact

Tagback, Inc.
support@tagback.io