Privacy Policy

1. Who we are

PlayTactiq is a coaching content service operated in the United Kingdom. When we say “we”, “us”, or “PlayTactiq”, we mean the operator of this service. Contact us at playtactiq@gmail.com.

2. What data we collect

• Account data — your email address and password (hashed) when you register
• Billing data — payment is handled by Stripe; we do not store card details
• Usage data — when signed-in trial or subscribed coaches open a session or blog, open a drill, or use the tactical player. We use this to improve content and support coaches.
• Device data — browser type, OS, and IP address for security and analytics

3. How we use your data

• To provide and maintain your account
• To process subscription and one-off practice payments via Stripe
• To send you product updates and coaching content (you can unsubscribe at any time)
• To improve the platform based on usage patterns

4. Legal basis (UK GDPR)

We process your data on the basis of contract performance (to deliver the service you signed up for) and legitimate interest (to improve and secure the platform). Where we send marketing emails, we rely on consent.

5. Data sharing

We do not sell your data. We share it only with:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Vercel — website hosting
• Resend — sending our weekly content email (only if you have opted in)
• TikTok — social media publishing (see section 10)

All providers are GDPR-compliant and operate under data processing agreements.

6. Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required by law to retain it.

6a. Content activity

We record first-party use of PlayTactiq content by signed-in coaches only. We do not use this activity for advertising, do not track you across other websites, and do not collect keystrokes, messages or precise location. Access is limited to PlayTactiq administrators for product improvement and coach support. You may ask us to access, delete or object to this processing using the contact details below.

6b. Data security

We protect your data using industry-standard measures: encryption in transit (HTTPS/TLS) and at rest, hashed passwords, access controls limiting personal data to authorised PlayTactiq administrators, and reputable infrastructure providers (Supabase, Stripe, Vercel) that maintain their own security certifications. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information and will notify you and the relevant authority of any personal data breach where required by law.

6c. Children's privacy

PlayTactiq is intended for coaches aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact playtactiq@gmail.com and we will delete it.

6d. International data transfers

Your data may be processed by our providers on servers located outside the United Kingdom. Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (or the UK International Data Transfer Addendum) to ensure an equivalent level of protection.

7. Your rights

Under UK GDPR you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise any of these rights, email playtactiq@gmail.com.

8. Cookies, analytics and storage

Essential. Signing in sets a session cookie so you stay logged in, and we store your cookie choice on your device so we do not ask again. These cannot be turned off, because the site does not work without them.

Optional, and off until you accept. If you accept, we load Google Tag Manager and store a randomly generated visitor ID together with how you arrived (for example, which link or campaign brought you here). We use this to understand which coaching content is worth writing more of. If you reject, none of it loads, the visitor ID is not created, and anything stored from a previous acceptance is deleted.

Always on, but stores nothing on your device. We use Ahrefs Web Analytics for basic page-view counts. It sets no cookie and writes nothing to your browser.

You can change your choice at any time using cookie preferences, or the link in the footer of any page.

9. Changes to this policy

We may update this policy from time to time. We'll notify you of material changes by email or via the platform.

10. TikTok API

PlayTactiq uses TikTok Login and the Content Posting API to let an authorised user review and send original coaching videos to the TikTok account they connect. A video is not sent until the user previews it, edits or accepts its title, chooses the available TikTok settings, confirms the applicable disclosures and expressly selects Confirm & Post.

The following applies to our use of the TikTok API:

• What we access — video.publish retrieves the connected creator's current posting options and sends a video only after confirmation
• What we do not access — we do not access TikTok messages, comments, follower statistics or the user's public-video history through this integration
• Data storage — we securely store the access and refresh tokens needed to maintain the authorised connection, along with the resulting publication identifier and status; these credentials are never displayed publicly or shared
• Data deletion — TikTok API access can be revoked at any time by disconnecting the app at tiktok.com/settings; revoking access removes our ability to publish on your behalf
• Third-party terms — our use of the TikTok API is governed by the TikTok API Terms of Service

Questions about our TikTok integration? Contact playtactiq@gmail.com.