Privacy Policy
On Tap ("On Tap", "we", "us") helps people 18 and over discover pubs, deals and events, plan nights out, and get home safely in Australia. We respect your privacy and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, and the choices you have.
1. What we collect
- Account & profile: your email, password (stored only as a secure hash), display name, and date of birth — which we use solely to confirm you are 18 or over.
- Taste & activity: the pubs, beers and events you save or follow, your taste preferences, crew connections, and the plans, orders and check-ins you create. We use this to learn what suits you and match you to venues.
- Content you create: crew messages, reviews, reports, and photos you upload (which may show other people). We store these to run the features you use.
- Location: if you grant permission, your device's approximate location, used only to rank nearby pubs and distances. We store it at coarse precision and you can turn it off at any time.
- Venue partners: if you represent a venue, your venue name, role, contact details and liquor licence number.
- Device & usage: basic technical data (device type, app interactions, error logs) to keep On Tap working and improve it.
- Payments: if and when paid features go live, card details are handled directly by our payment processor — we do not store full card numbers.
2. How we use your information
To create and secure your account; confirm you are 18+; match you to the right pubs, deals and events; power PintPilot recommendations; send the notifications and emails you opt into; process orders and plans; keep the service safe; and meet our legal obligations. We do not sell your personal information.
3. You stay anonymous to venues
Venues never see your identity from browsing or matching. They only see anonymous, aggregate demand until you choose to claim an offer, book, order, or accept — and then only the details needed to honour it. Return offers only ever go to a venue's own prior guests, never to strangers.
4. Location data
Location is requested only with your permission and is used for ranking and distance — never shared with venues or advertisers, and never used to track you between sessions. Decline it and On Tap falls back to your chosen suburb.
5. Automated personalisation & AI
PintPilot uses automated processing of your taste and activity to personalise recommendations (which pubs, deals and events to surface). These are suggestions only and do not have legal or similarly significant effects on you. Some features (for example interpreting a free-text night, or reading a tap/menu photo) send non-identifying content to a third-party AI provider that may process it overseas; we don't send your identity, and the provider does not use it to train its models under our API terms.
6. Marketing & notifications
We only contact you about access and the things you opt into, consistent with the Spam Act 2003 (Cth). Every email has an unsubscribe link, and venue return offers are opt-in, capped, explainable, and one-tap muteable. We do not target advertising at anyone under 18.
7. Who we share it with
We share personal information only with service providers who help us run On Tap — for example email delivery, cloud hosting, payment processing and AI processing — under confidentiality obligations and only for those purposes. We may also disclose information where required by law. Some providers may store data overseas; where they do, we take reasonable steps to ensure comparable protection. We do not sell your personal information.
8. Cookies & analytics
We use essential cookies/local storage to keep you signed in and the app working, and limited analytics to understand and improve usage. You can control cookies in your browser settings.
9. Security, retention & data breaches
Data is stored on our own infrastructure with reasonable technical and organisational safeguards (including hashed passwords and access controls). We keep personal information only as long as needed for the purposes above or as required by law, then delete or de-identify it. If an eligible data breach occurs, we will respond and notify affected individuals and the OAIC in line with the Notifiable Data Breaches scheme.
10. Your rights
You can ask us to access or correct your personal information, delete your account and data (including photos you've uploaded), or leave the waitlist, at any time by emailing privacy@ontap.bar. We'll respond within a reasonable time.
11. Age
On Tap is strictly for people aged 18 and over. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.
12. Complaints
If you have a privacy concern, contact us first at privacy@ontap.bar and we'll work to resolve it. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
13. Changes
We may update this policy as On Tap evolves. We'll change the date above and, for material changes, let you know in the app or by email.