BestTap tells you which of your credit cards to use so you earn the most rewards. To do that well, it needs to know some things about you. This page lists exactly what those things are, where each one goes, and what never happens to any of them. We never sell your data, we never share it with banks or advertisers, and the app contains no advertising or tracking software.
BestTap is operated by Nadim Bsaibes ("BestTap", "we"). For anything in this policy, contact us at nadim.bsaibes@outlook.com.
Your email address, used to sign you in with a one-time code and to back up your data to your account. You can also use BestTap without an account — see section 6.
When you create an account you provide your first and last name, date of birth, and a username. These identify your account and personalise the app.
The first-time questionnaire asks which cards you hold, your monthly salary bracket, your rough monthly spend, your top spending categories, and your rewards goal. Your salary bracket exists for one reason: UAE banks set minimum-salary requirements, and we use your bracket to make sure we never recommend a card you can't get. Your answers are saved to your account, and a copy is kept in a research dataset we use to understand our users and improve recommendations. That dataset is only ever seen by us — never sold, never shared.
BestTap is built around what you choose to enter: purchases (amount, category, merchant, date, and which card you used), card payments, reward redemptions, reward balances you already hold, and — optionally — a starting cash balance if you want the Budget tab to track your money. The starting balance is entirely optional; skip it and BestTap still tracks your spending and rewards fully.
When you tap the scan button, your current coordinates are sent to Google Places to identify the store you're standing in, so we can recommend the right card for it. That's the only time location is used. BestTap keeps the name of the confirmed merchant on the transaction you log — it does not keep your coordinates and does not build a location history. There is no background location access.
Paul is BestTap's assistant. When you chat with Paul, your messages are processed together with your first name, the cards in your wallet, your monthly spend estimate and top categories, and your rewards goal, so answers reflect your actual situation. Your date of birth and salary are not sent to Paul. Responses are generated by Anthropic's Claude via our own backend; our agreement with Anthropic does not permit your conversations to be used to train AI models.
We do not use your information for advertising, and we do not sell or rent it to anyone.
BestTap runs on a small set of service providers, each receiving only what its job requires:
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Sign-in and encrypted data storage | Your email, account data, and synced app data |
| Cloudflare | Runs our backend services | Paul conversations in transit |
| Anthropic | Generates Paul's answers | Your messages, first name, wallet, spend estimate, categories, and goal — not used for AI training |
| Identifies nearby merchants | Your coordinates at the moment you scan | |
| Expo | Delivers app updates | Standard technical update-check data |
We share data with no one else, and never with banks, card issuers, or advertisers. We would disclose data if validly required to by law.
On your phone, and — if you sign in — in your account's cloud backup. Cloud data is protected by row-level security: your data is readable only by your signed-in account, and by us as the operator of the service. Signing out removes your data from that phone; signing back in restores it from your account.
Choose "Continue without an account" and everything you enter stays on your phone. Nothing is synced, no email is collected, and no onboarding answers reach our research dataset. Paul's assistant and merchant scanning still send the data described above when you use those features. Deleting the app deletes your local data.
We keep your account data for as long as your account exists. To delete your account and everything in it, email nadim.bsaibes@outlook.com from your sign-in address and we will delete it within 30 days; onboarding answers in the research dataset are disconnected from your identity when your account is deleted. In-app account deletion is coming to the app itself.
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, at any time, using the contact address above. If you are in the UAE, you have these rights under the UAE Personal Data Protection Law; residents of other regions have equivalent rights under their local law, and we honour these requests regardless of where you live.
BestTap is about credit cards and is for adults. You must be 18 or older to use it, and we do not knowingly collect data from anyone under 18.
If this policy changes in a way that matters — new data collected, a new provider, a new use — we will update this page, change the effective date at the top, and tell you in the app before the change applies to you.