Privacy Policy
Effective October 27, 2026
TapRoll helps teachers take attendance with NFC tags. This policy explains what information TapRoll collects, how it’s used and the choices you have. It applies to TapRoll at taprolleducation.com.
The short version
- Teachers and school staff create TapRoll accounts. Students don’t have accounts.
- We collect only what TapRoll needs: your account details and the classes, students and attendance you add.
- We never sell personal information, never show ads and never use student information for anything except running TapRoll for your school.
- You can download your attendance, delete students and classes yourself, and ask us to delete your account.
Information we collect
Your account
When you create an account, we collect your name, email address and password, plus your school’s name if you add it. Passwords are stored only in hashed form, which can’t be turned back into the password.
If you sign in with Google, Google shares your name, email address and profile picture with TapRoll. We never receive your Google password, and TapRoll can’t see your email, files, contacts or anything else in your Google account.
Classes, students and attendance
To take attendance, you add your class periods (course, period number, room and bell times) and your students. For each student, TapRoll keeps:
- Name
- First and last name, so you can see who checked in.
Ada Lovelace - Class periods
- The periods the student is in, so a tap counts for the right class.
P2 · Chemistry - Tag details
- The random code on the student’s tag and the tag’s serial number, so TapRoll can recognize the tag.
k7m2q9x4w8bp04:A1:B2:C3:D4:E5:F6 - Attendance
- Present, tardy, absent or excused, the time of each check-in, and whether it came from a tag, a USB reader or a teacher.
Tardy · 9:01 AM · NFC tag
TapRoll doesn’t ask for student ID numbers, birthdates, addresses, photos, grades or health information. Please don’t enter that kind of information into TapRoll.
NFC tags
A tag written by TapRoll holds a random code, saved as a link so a phone can open TapRoll when the tag is tapped. This is everything stored on a typical TapRoll tag:
https://taprolleducation.com/#tag-k7m2q9x4w8bp
Tags don’t hold a student’s name or any other personal information, and they can’t track location. Anyone who taps a tag with a phone sees only the random code, which reveals nothing about the student unless they’re signed in to TapRoll as the student’s teacher. TapRoll also reads each tag’s built-in serial number so it can recognize the tag later.
Information from your browser
TapRoll saves a few things in your browser so it works smoothly: your sign-in, settings such as whether scans beep, and a copy of your classes so TapRoll keeps working when you’re offline.
When your browser loads TapRoll, the services that deliver it receive standard technical information, such as your IP address and browser type. These services are GitHub, which hosts the website; Google Fonts; jsDelivr, which delivers the sign-in code; and Google Firebase, which runs sign-in and storage.
TapRoll doesn’t use analytics, advertising or tracking cookies.
How we use information
We use information only to:
- run TapRoll: sign you in, record attendance and keep your classes in sync across your devices
- keep TapRoll secure and fix problems
- answer you when you contact us
- meet our legal obligations
Our promises about student information
We will never:
- sell student information
- use student information for advertising of any kind, including targeted ads
- build a profile of a student for any purpose other than running TapRoll for their school
Google user data
TapRoll uses the name and email address that Google shares only to create your account, sign you in and show who is signed in. TapRoll’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We don’t share Google user data with anyone except the service providers that run TapRoll, and we never use it for advertising.
How information is shared
We share information only in these cases:
- Service providers. Google Firebase provides TapRoll’s sign-in and database, and GitHub hosts the website. They handle information only to provide their services to us.
- Legal requirements and safety. We may share information when the law requires it, such as to respond to a valid court order, or when it’s needed to protect the safety of students or others.
- A change of ownership. If TapRoll is merged with or sold to another company, information may move to the new owner, who must keep the promises in this policy.
Where information is stored and how it’s protected
Your account and classes are stored with Google Firebase on Google Cloud. Information is encrypted while it travels and while it’s stored. Each teacher’s classes are kept in a separate space that only that teacher’s account can open, and only the TapRoll team can access the database, when needed to run and support TapRoll.
The example classroom on the sign-in page uses made-up students and is saved only in your browser. Nothing in it is sent to TapRoll.
No system is perfectly secure, so we can’t promise that information will never be accessed without permission. If we learn of a security breach that affects your information, we’ll notify affected users and schools as the law requires.
How long we keep information
We keep your account and classes until you delete them or ask us to delete your account.
- When you remove a student, TapRoll deletes their name and tag details.
- When you remove a class period, TapRoll deletes it, along with students who were only in that period.
- Start fresh in Settings deletes all of your classes, students and attendance records.
- To delete your account and everything in it, email us. We’ll delete it within 30 days.
Deleted information can remain in our providers’ systems for a short time before it’s fully erased. If a school stops using TapRoll, we’ll delete its student information when the school asks.
Your choices
- See and change your information. Your account details and classes are always visible in TapRoll. You can change your name, school and classes at any time.
- Download it. Settings lets you download your attendance as a spreadsheet (CSV) and a full backup.
- Delete it. Remove students and classes in TapRoll, use Start fresh, or email us to delete your account.
Depending on where you live, you may have other privacy rights, such as asking for a copy of your information. Email us to use them. We won’t treat you differently for doing so.
For parents and students
Student information in TapRoll is added by a teacher and controlled by the school. To see, correct or delete a student’s information, please contact the school, and we’ll help the school respond. You can also email us, and we’ll work with the school.
Children and schools
TapRoll is made for teachers and school staff, not for children. Students don’t create accounts or sign in, and we don’t knowingly collect personal information directly from children. If you believe a child has given us personal information, email us and we’ll delete it.
Student information comes from schools and teachers. Schools are responsible for making sure they’re allowed to share it and for giving any notices and getting any consents the law requires. In the United States, student records are protected by the Family Educational Rights and Privacy Act (FERPA). We treat student information as belonging to the school, use it only to provide TapRoll to the school, and follow the school’s direction about it.
If your school or district needs a student data privacy agreement, email us.
Changes to this policy
If we change this policy, we’ll post the new version here and update the date at the top. If a change is significant, we’ll let you know before it takes effect, for example by email or with a notice in TapRoll.
Contact us
Questions or requests about privacy: support@taprolleducation.com