Privacy policy
Last updated 5 October 2026
TapeRule is a measurement book for tailors. This page explains what TapeRule collects, why, where it is kept, and how to delete it. TapeRule is run by Nonso Enenmoh. Questions: [email protected].
Your customers stay on your phone
Your customers' names, phone numbers, measurements and notes are saved on your phone. They leave it only in your backup, which TapeRule encrypts on your phone before saving it to your own iCloud or Google Drive. TapeRule never receives your backup or reads your customers' details.
On iPhone, your book is also included in your phone's own iCloud backup, if you have iCloud Backup turned on. Apple stores and encrypts that backup; TapeRule never receives it.
To let you restore your book on a new phone, our server keeps the key that opens your backup, itself locked with a key that only our server holds. On its own it opens nothing: the backup itself stays in your iCloud or Google Drive.
What we collect and why
| What | Why |
|---|---|
| Your phone number, if you sign in with your phone | To sign you in with a code we text you. Phone sign-in is for Nigerian numbers; the text is sent by Termii. |
| Your email address, if you sign in with email | To sign you in with a code we email you, and to identify your account. The email is sent by Resend. |
| Your brand name, unit (inches or centimetres), and your Instagram or website handle if you add one | To show them on your measurement cards, and to bring them back on a new phone. |
| Your logo, if you add one | To show it on your cards. |
| Your plan and how many of your 50 free measurements you have used (counted by record number, never by content) | To apply the free plan and TapeRule Unlimited. |
| Your subscription, if you buy TapeRule Unlimited | To give you TapeRule Unlimited. Apple or Google takes the payment; RevenueCat confirms it to us. We never see your card details. |
| Device and browser signals, when you ask for a sign-in code | Cloudflare Turnstile checks them to stop automated abuse of our sign-in codes. |
| A scrambled (hashed) form of your phone number | To limit how many sign-in texts one number can ask for. Kept for two days. |
| When you upload a logo or your phone asks for its backup key (the time only) | To limit how often each can happen, so a stolen sign-in can't be abused. |
| Technical logs: your IP address and the time of each request to our server | To keep the service secure and fix problems. Kept by Supabase for a few days. |
| Reports of brand misuse about your account, and what we did about them | To act on impersonation reports under our terms. Kept while your account exists. |
| Your emails to us | To answer you. Kept as long as needed to help you. |
On Android, TapeRule asks Google only for its own private backup folder in your Google Drive. It cannot see your other files.
Why we are allowed to use it
We use your account details to provide TapeRule, the service you sign up for (our contract with you). We use the sign-in checks, limits, logs and misuse reports to keep TapeRule safe and to stop abuse (our legitimate interest in protecting you, other tailors and the service). We keep records the law requires, such as for payments, because we must. Under the Nigeria Data Protection Act 2023 these are lawful bases for processing.
Your customers' details are yours. You decide what to record about them, and TapeRule only gives you the tool to keep them on your phone and in your own backup. Please tell your customers that you keep their measurements and ask before you record anything they would not want kept.
Where it is stored
Your account details above are stored with Supabase, our database and file storage provider, in London, United Kingdom (eu-west-2). Your backups are stored in your own iCloud or Google Drive account.
These service providers handle data for us, only to run TapeRule: Supabase (account and server), Resend (sign-in emails, United States), Termii (sign-in texts, Nigeria), Cloudflare (sign-in checks, our website and our email address), RevenueCat (subscriptions), and Apple and Google (app stores and payments). Some of them work outside your country. When your data leaves Nigeria, it goes only to providers bound by data protection agreements with us, as the Nigeria Data Protection Act 2023 allows.
If a breach ever puts your data at risk, we will tell you and the regulator as the law requires.
What we never do
- We never sell your data or your customers' data.
- There are no ads in TapeRule, and we do not share data with advertisers.
- We never read your customers' details or your backups.
How long we keep it
We keep your account details until you delete your account. Sign-in limit records are deleted after two days. Your backup files stay in your iCloud or Google Drive until you delete them or delete your account.
Deleting your account
In the app: Settings, then Delete account. This deletes your account, your logo and your subscription link from our server, the book on your phone, and your backup files in iCloud or Google Drive when TapeRule can reach them. Any backup files left behind can no longer be opened. If you no longer have the app, see Delete your account.
Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play settings.
Children
TapeRule is a tool for businesses and is not meant for children.
Your rights
You can ask us for a copy of the data we hold about you, to correct it, to delete it, to receive it in a common file format, or to object to or limit how we use it, by writing to [email protected]. Where we rely on your consent, you can withdraw it at any time. We answer within 30 days. These rights come from the Nigeria Data Protection Act 2023 and the data protection laws of the other places below.
If you are not happy with our answer, you can complain to a data protection regulator:
- In Nigeria: the Nigeria Data Protection Commission (NDPC), ndpc.gov.ng.
- In Canada, where TapeRule is run: the Office of the Privacy Commissioner of Canada, priv.gc.ca.
- In the United Kingdom, where your account details are stored: the Information Commissioner's Office (ICO), ico.org.uk.
- In the European Union: the data protection authority in your country.
Changes
If this policy changes, we will update this page and the date at the top.