Privacy Policy

Privacy by design

We designed TAPATAHI around how real teams work — not around harvesting data. That means collecting only what powers schedules, stats, messaging, Doc coaching, live team media, maps/weather helpers, optional health readiness, and coach team subscriptions; keeping coach–Doc chat session-based instead of piling up empty cloud threads; storing Doc memories locally on your device; and enforcing team-scoped access with verified membership records in our backend (not self-assigned team IDs).

What we collect (and why)

• Account: name, email, role (coach, player, parent), and age confirmation (13+).
• Team: membership, player profiles, games, training, stats, photos, locker room, album, human DMs.
• Doc: voice and text you send for transcription and coaching (via our secure proxy to AI providers such as Groq). Spoken Doc replies use on-device text-to-speech (Apple / expo-speech) — not a third-party TTS cloud.
• Live media: camera and microphone when you start or join team live streams or group calls (LiveKit).
• Location: when-in-use location to show event venues on the map and related routing/weather helpers.
• Optional Health: Apple Health or Health Connect steps, heart rate, resting heart rate, sleep, and active energy when you connect on Watch — used for readiness estimates only.
• Subscriptions: purchase and entitlement status for coach team subscriptions (processed by Apple, Google Play, and RevenueCat).
• Technical: push token if you enable notifications; crash and diagnostic data (device model, OS version, stack traces) sent to Sentry for stability monitoring when enabled in the production build (sendDefaultPii: false).
• Optional App Lock: Face ID / biometrics / device passcode can protect Settings, Health, and VIP on this device only.

What we do not do

We do not sell personal data. We do not use your team feed for public discovery. We do not require Health data. We do not write data back to Apple Health or Health Connect. We do not keep coach Doc chat as permanent empty conversation shells in the cloud.

Who can see your data

Team members see content by role: coaches manage the roster; players see their team; parents see a linked child when confirmed. If you connect Apple Health or Health Connect, a readiness summary derived from your synced snapshot may be visible to coaches on your team — not your full Health history. Readiness summaries may be used for Doc coaching context on your device; raw HealthKit / Health Connect vitals (heart rate, sleep hours, steps) are not sent to AI providers. Service providers process data only to run the service (cloud backend/auth/storage via Firebase; payments via Apple, Google Play Billing, and RevenueCat; AI via proxied Groq; maps and weather helpers; live media via LiveKit; on-device TTS via the OS).

Subscriptions

Your first team as a coach is free. VIP features and creating additional teams use a single auto-renewable monthly team subscription (tapatahi_team_monthly, price shown in-app) through Apple or Google Play that unlocks unlimited VIP coach teams plus themes, Game Day, live, and group call. Players and parents join free with a team code. Subscription status is verified on our servers so team cosmetics stay tied to an active subscription. Billing is handled by Apple or Google Play; we do not store full payment card numbers.

Young athletes

TAPATAHI is for users 13 and older. Under-13s should use a parent/guardian account instead of creating their own. School and club teams often include teens — coaches and parents should supervise accounts and use in-app Report and Block on messages, locker posts, and album photos. Automated safeguards can alert adults when harmful language is detected in Doc. For younger teens, certain messages may be visible to a linked parent for safety transparency.

Your controls

Turn off push notifications. Decline mic, camera, location, or Health permissions (some features will be limited). Manage or cancel a team subscription in iOS Settings → Subscriptions, or in Google Play → Payments & subscriptions, or restore purchases in the app. Export your data from Settings. Delete your account to remove your profile, photos, logs, and on-device Doc memories.

Security

Encrypted transport, authenticated access, and team-aware security rules. Use a strong password and log out on shared devices. Security reports: support@tapatahi.com (security.txt).

Retention

Account and team content are kept while your account or team exists; account deletion removes your profile, personal logs, photos under your user path, and device Doc memories (head-coach teams optionally deleted with you). Short-lived items expire automatically (DM videos and live location shares with an expiry, stale live/call sessions after several hours, on-device crash diagnostics after about 14 days). Cloud backups, server logs, Sentry diagnostics, and App Store / Google Play / RevenueCat billing history follow those providers’ windows.

Changes

We may update this policy as the app evolves. The “last updated” date at the top will change when we do. Continued use means you accept the updated policy.

Contact

Questions: support@tapatahi.com