Tactivo

Legal

Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data Tactivo collects, why we collect it, how long we keep it and how you can get it deleted. It applies to the Tactivo mobile app, the Tactivo web app and this website.

The data controller is Tactivo Limited, 63 Carlton Road, Erith, DA8 1DX, United Kingdom. For anything on this page, write to info@tactivo.co.uk.

1. Information we collect

  • Account details. Your name, email address and password, stored securely; we never see it. If you sign in with Google or Apple, we receive your name and email address from them; we never receive your password.
  • Coaching profile. The display name and username you choose, and anything optional you add: a photo, a short bio, a location, a phone number, coaching role, qualification and years of experience. If you answer it, how you heard about Tactivo.
  • Coach group. If you choose to join the group of coaches who help shape Tactivo, the name and WhatsApp number you give us. We use them only to message you on WhatsApp about Tactivo, and we never show your number to other coaches.
  • Content you create. Session plans, drills, ratings, saved items, and the private notes you leave after a session.
  • Sessions you send to another coach. If you use “Send to a coach”, we create a page holding an outline of that session, and your first name unless you turn that off. Section 3a explains what is on it and how to stop it.
  • Activity. When you open the app, when you sign in, and at a few points during first set-up, we record the moment, whether it was the iPhone app, the Android app or the web, a random identifier for this install, and, once you have one, which account. The install identifier is not stored next to your account in our own database.
  • How you use the app. The screens you open, what you plan and play, and any crash, recorded by PostHog on our behalf and linked to your account once you sign in. On the phone app we also keep a short recording of your screen, with photos and sign-in fields hidden.
  • Problem reports. If a 3D drill fails to load, the app sends a problem report naming the fault, the drill, and your account if you are signed in. It contains nothing you wrote, and we use it only to fix the fault.
  • Technical data. Our hosting provider records the IP address your device connects from, which is needed to serve the app and to block abuse.

Beyond that, Tactivo has no advertising and no tracking across other apps or websites: we do not collect location data, contacts, health data, advertising identifiers or payment card details. We do not use your data for advertising, and there are no third-party ad networks in the app.

2. Why we hold it, and on what basis

To give you the account and the app you asked for — creating and securing your account, building session plans that match your age group, team size and time, understanding a brief you type in your own words, showing your library and your season, and sending you sign-in codes, password resets and messages about your own sessions. That is our contract with you, and you have to give us an email address for it; everything else is optional.

Coaching tips and news, and phone notifications, go out on your consent, which you can withdraw at any time in Settings without losing anything else. So does the coach group: reply STOP on WhatsApp or email us, and we delete your number.

We rely on our legitimate interests for the small record of activity above, how you use the app, the problem reports, fixing bugs, preventing abuse, and measuring whether our messages work. Keeping your data secure is our legal obligation.

Which of our messages you get is chosen automatically from how you have used the app, but no computer decides anything about you that has a legal or similarly significant effect on you.

3. Who we share it with

We never sell your personal data. Apart from a session you choose to send to another coach, which section 3a covers, we share it with the service providers needed to run Tactivo, each under a data-processing agreement that binds them to protect it as this policy describes:

  • Supabase. Database, authentication and file storage, hosted in Ireland.
  • Apple and Google. Only if you choose to sign in with your Apple or Google account, and for distributing the app through their stores.
  • Resend. Sends our email — sign-in codes, messages about your own sessions and, if you ticked the box, coaching tips and news. Hosted in the United States.
  • Cloudflare. Serves the page a session link opens. Cloudflare sees only what is on that page; it holds no account data.
  • PostHog. Records how the app and this website are used, so we can fix and improve it. Its data is kept in Frankfurt, Germany, in the EU.
  • OpenRouter. When you describe a session in your own words, that sentence is sent to OpenRouter, which runs a Google Gemini model, so we can work out which training focuses you mean. See section 4 below.

Supabase holds the database in Ireland. Resend, Cloudflare and OpenRouter handle data in the United States or, for Cloudflare, wherever the reader is; each works under the standard contract clauses approved for transfers out of the UK and the EEA, and every supplier is bound by contract to protect it as this policy describes. If you join the coach group, we message you on WhatsApp, which Meta runs under its own privacy policy rather than ours. We will also disclose data where the law requires it.

3a. Sending a session to another coach

Tactivo lets you send a session, or a single drill, to another coach. We make a link and hand it to you to send on. Anyone with the link can read it, with no account and no password. It is not listed anywhere and we ask search engines not to index it, but it is not a secret, so send it to the people you mean to.

The page shows the session title, the age group, how long it runs and how many drills are in it, plus your first name unless you turn on “Share without my name”. The drills travel only as references to our own drill library: a drill you wrote yourself is never sent, and nor is anything you typed on a library drill. Your email address, username, photo, notes and ratings never travel with a link.

Stop sharing on the session, or on the drill, takes back every link you have made for it, as does deleting the session or your account. A link you have stopped may still load for up to a minute afterwards. Every shared page has a “Report this link” line that emails us, and we take down links that are reported for good reason.

4. The one thing we send to an AI service

The planner lets you describe a session in your own words, for example “midfield gets overrun”. That sentence is sent to OpenRouter, which runs a Google Gemini model, and its only job is to tell us which training focuses you meant.

We send the sentence and nothing else: not your name, not your email address, not your saved sessions, and nothing that identifies your account. We keep the sentence and the answer with PostHog, linked to your account, to check the answers are right.

It never chooses your drills. Sessions are assembled on your own device from the drill library built into the app, and if the service is unavailable your session is still built.

5. Where your data is stored, and for how long

Data is stored on encrypted servers in Ireland, encrypted in transit and at rest. We keep it for as long as your account is open. Deleting your account removes it and everything in it — your profile, photo, sessions, drills and notes — from our live systems immediately, and stops every link to a session. Encrypted backups age out within 30 days. We keep only what the law requires us to, such as accounting records. There is no recovery, so export anything you want to keep first.

6. Your rights

Under UK and EU data protection law you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or have it moved to another service. Where we rely on your consent you can withdraw it at any time, and you can tell us to stop marketing to you at any time. You can switch usage data off in Settings.

You can delete your account and all its data at any time from Settings → Delete account in the app, which takes effect immediately. You can also ask us through our account deletion page, and we will act within 30 days.

To exercise any other right, email info@tactivo.co.uk. If you are unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk.

7. Children

Tactivo is a tool for adult coaches. You must be at least 16 years old to create an account, and the app is not directed at children. We do not knowingly collect data from anyone under 16; if we learn that we have, we delete it. Coaches must not enter the personal details of the children they coach into Tactivo, because session plans do not require player names.

8. Cookies, and the email we send

This website uses no advertising or tracking cookies. The app keeps a sign-in token on your own device so you stay signed in; it is not used to track you. How the app is used is recorded by PostHog, as described in section 1, and you can switch usage data off in Settings. This website loads its typeface from Google Fonts, so Google receives your IP address when a page loads, as with any file fetched from the web. PostHog counts visits to this website without cookies and without storing anything on your device: the page you opened, the site that sent you, your browser and device type, your rough location worked out from your IP address, and whether you tapped an App Store or Google Play button. A session link page sets no cookies and runs no analytics; we count how many times a link has been opened, and nothing about who opened it.

We do send email, through Resend, our email provider: sign-in codes and messages about your own sessions to every coach, and coaching tips and news only to coaches who ticked the box — untick it in Settings, or unsubscribe from any of those emails. For every email we record that it was sent, whether it arrived and whether a link in it was tapped. For tips and news only, we also record whether it was opened — a tiny image in the email tells us. We keep your time zone and country so it arrives at a sensible local hour. The same goes for phone notifications if you turn them on. We use this to decide which messages are worth sending.

9. Changes to this policy

If we change this policy we will update the date at the top and, for anything significant, tell you in the app before the change takes effect.

10. Contact

Tactivo Limited
63 Carlton Road, Erith, DA8 1DX, United Kingdom
info@tactivo.co.uk