Privacy
This page says what Tagzil holds about you, why, how long it is kept, and who can see it. Tagzil is run by Vionter Labs Pte. Ltd., a Singapore company, UEN 202626182D, which is responsible for your data and is "Tagzil" and "we" on this page.
What Tagzil holds about you
Your account. Your email address, your mobile number, the name you show, the country you live in, and the way you log in: an email address and password, Google or Apple. Your password is kept by our sign-in service in a form nobody can read back, Tagzil included.
What Google gives us, if you log in with Google. Your name, your email address, whether Google has verified that address, and the number Google uses to recognise your Google account. Google also passes a link to your profile picture, which Tagzil never shows or uses. Nothing else: not your contacts, not your files, not your activity.
What Apple gives us, if you log in with Apple. Your name if you choose to share it, your email address or the private relay address Apple makes for you, and the number Apple uses to recognise your Apple account.
Your tags. The tag codes you activate, the name and purpose you give each tag, the people you share a tag with, and each tag's history.
Your threads. The messages you send and receive on Tagzil, as an owner or as a finder, and the alerts sent to you about them.
Support. What you tell us when you ask for help, and any photograph you add to a support case.
Consent. Which version of these pages and of the Terms you accepted, and when.
What Tagzil never collects
No location, ever. Not from a scan, not from the app, not from a finder. No passive tracking of any kind. A finder who scans a tag leaves nothing but a scrambled form of their connection's address, kept for 7 days to stop abuse.
Why Tagzil holds it
To let a finder reach you about a tag and you reach them back, without either of you seeing the other's mobile number or email address. To make sure every message comes from a verified sender, which is why a mobile number is verified on every account. To send you alerts, one-time codes and the emails your account needs. To stop spam and abuse, to answer support cases, and to meet the law.
Tagzil sends your mobile number a one-time code and nothing else: never an alert, never a message from anyone.
What each side sees
The finder never sees your name, your number, or anything else about you unless you choose to share it in the thread. You see the name the finder gave, that their mobile number is verified, and which country their number is registered in, which is not where they are.
The company that sells tags in your country sees how many tags were activated from its stock, per seller and per month. It never sees who activated them.
Who handles your data for Tagzil
Google, through Google Cloud and Firebase, runs our servers, our database and our sign-in. Twilio sends one-time codes by text message. Apple and Google deliver notifications to your phone. The service that sends our emails delivers alerts and one-time codes by email. Each handles your data on our instructions and for no purpose of its own. If you log in with Google or Apple, that company also knows you use Tagzil, under its own privacy terms.
Where your data is kept
Your data is held in the United States.
How long it is kept
Message bodies: 90 days after a thread closes.
Relay records and alert records: 12 months.
A finder's scrambled connection address: 7 days.
The photograph of the card and the receipt on a support case: deleted when the case closes.
Any other photograph on a support case: 12 months after the case closes.
A copy of your data you asked for: 7 days from when it is ready.
Consent records: 3 years after you delete your account.
Your account and your tags: until you delete your account.
A report on a thread pauses its clock until the report is reviewed.
Who Tagzil tells
Nobody at Tagzil looks up your number. Nothing is ever disclosed on a telephone call. Tagzil answers lawful requests from authorities: a court order, or a written request from a named police officer citing the legal power, sent to the Data Protection Officer, is answered by the Data Protection Officer alone and is recorded. Every other request for your details is answered by passing the requester's message to you, never with your details.
How Tagzil measures
Tagzil does not measure visits to this site or use of the app. If that changes, you will be asked first, and this page will name the service and what it counts.
Your rights
You can ask for a copy of the data Tagzil holds about you, ask for anything wrong to be corrected, and ask for your account to be deleted. Write to the Data Protection Officer at the address below.
When an account is deleted, you are sent a one-time code to your verified email to confirm it, and you have 48 hours to change your mind. Then your tags are revoked, your threads are deleted as far as the retention above allows, any number you shared in a thread is removed from it, and your account is gone. A text message to your mobile number says when it is done.
You get a first reply within 5 business days, and your request is answered within 30 days, sooner where the law requires. If you are not satisfied with the answer, you can complain to the Personal Data Protection Commission of Singapore.
Contact the Data Protection Officer
Email admin@vionter.ai, or write to Vionter Labs Pte. Ltd., 160 Robinson Road, #14-04 Singapore Business Federation Center, Singapore 068914.
There is no telephone line. Nothing about any person or any tag can be given out on a call, so everything happens in writing. This is not a way to reach a tag's owner: to reach an owner, scan the tag and write to them.
Changes to this page
When this page changes, the new version is posted here with its date. This version is dated 27 September 2026.