Privacy Policy

• Account: name, email, role (coach, player, parent), and age confirmation (13+). A player’s age on the team roster is used for younger-teen safety features (see Young athletes).
• Team: membership, player profiles, games, training and replies (RSVPs), stats, Player of the Day and MVP picks, photos you choose to upload, locker room and album posts, and human DMs between team members. For DMs we also store when a message was read, so coach–parent chats can show “Seen”.
• Doc: voice and text you send for transcription and coaching replies, processed through our secure proxy to AI providers such as Groq. To answer about your team, Doc’s requests also include the team context it needs: names, roles, stats, game and training schedules, team goals, and active injury notes the coach has logged. The weekly team summary is written the same way from team stats. Spoken Doc replies use on-device text-to-speech (Apple / expo-speech) — not a third-party TTS cloud.
• Live media: camera and microphone when you start or join team live streams or group calls (LiveKit).
• Location: location to show event venues on the map and related routing and weather helpers. Live location, if you turn it on, is shared only with your linked family (a player and their confirmed parents) and it expires. The team never sees where you are, except an opt-in tournament share that ends after 8 hours. Arriving at a training or a game can notify that linked family. For a player under 16, that arrival is told only to their linked parents. We do not store a location trail.
• Optional Health: if you connect on the Health screen, we read steps, heart rate, resting heart rate, sleep, and active energy from Apple Health or Health Connect. Your latest snapshot is saved to your private health record in our backend, and a history of your recent syncs (used for your weekly charts) stays on your phone. We use it to work out a readiness score: it needs at least 2 of sleep, heart rate, and steps, and a sync older than 48 hours is shown as your last score, dated — not a current one.
• Subscriptions: purchase and entitlement status for coach team subscriptions (processed by Apple, Google Play, and RevenueCat).
• Team sign-ups: if your team takes online sign-ups, the details you submit go only to that team’s coaches and are deleted after 90 days.
• Technical: push token if you enable notifications; crash and diagnostic data (device model, OS version, stack traces) sent to Sentry for stability monitoring when enabled in the production build (sendDefaultPii: false, so your name and email aren’t sent as your Sentry identity).
• Optional App Lock: Face ID / biometrics / device passcode can protect Settings, Health, and VIP on this device only.

Team members see content by role: coaches manage the roster; players see their team; parents, and coaches who have confirmed a link to a player, see that linked child’s profile.

Health sharing is off until you turn it on. While it’s off, only you can see your numbers. When you turn sharing on (Health screen), these people can see your latest heart rate, resting heart rate, steps, sleep, and active energy, plus your readiness score — but not your full Health history:

• coaches on your team;
• your confirmed linked parent or linked coach;
• if you are a parent or coach, your confirmed linked child.

Other players and parents on the team can’t see your health numbers. You can turn sharing off at any time.

Doc and health: Doc is only told a readiness score (or, for an old sync, your last score and its date, marked as not current) — never the raw numbers behind it. When you ask Doc about a linked child or linked parent/coach, it gets their score only if they share. Those scores go through our proxy to the AI provider along with your question.

Readiness race: if you and your linked parent, linked coach, or linked child both share and both have a fresh score, TAPATAHI may send a push notification when one of you overtakes the other. It never includes the numbers, and it’s not sent overnight (9pm–7am NZ time).

Service providers process data only to run the service (cloud backend/auth/storage via Firebase; payments via Apple, Google Play Billing, and RevenueCat; AI via proxied Groq; maps and weather helpers; live media via LiveKit; crash diagnostics via Sentry when enabled; on-device TTS via the OS), under our instructions and not for their own marketing. Some of these providers store or process data outside New Zealand, mainly in the United States (our Firebase database is hosted in the US).

Your first team as a coach is free. VIP features and creating additional teams use a single auto-renewable yearly team subscription (tapatahi_vip_yearly, NZ$59.99/yr, price shown in-app and may vary by region) through Apple or Google Play that unlocks Doc, Health, the team switcher, backgrounds and unlimited teams owned by the subscribing coach. Players and parents join free with a team code. Subscription status is verified on our servers so team cosmetics stay tied to an active subscription. Billing is handled by Apple or Google Play; we do not store full payment card numbers.

TAPATAHI is for users 13 and older. Under-13s should use a parent/guardian account instead of creating their own. School and club teams often include teens — coaches and parents should supervise accounts and use in-app Report and Block on messages, locker posts, and album photos. Automated safeguards can alert coaches and parents when harmful language is detected in Doc.

Parent copies for under-16s: when someone sends a direct message to a player under 16 who has a linked parent, the parent gets a copy of that message in their own chat with the sender. Both sides of the chat see a notice saying so. Messages the player sends aren’t copied. On the map, a player’s live location is only ever shared with their linked parents. The team does not see it. For a player under 16, an arrival at training or a game is told only to those parents.

Read receipts: “Seen” only shows in chats between a coach and a parent. It doesn’t show in chats with players.

Turn off push notifications. Decline mic, camera, location, or Health permissions (some features will be limited). Turn health sharing on or off at any time on the Health screen. Manage or cancel a team subscription in iOS Settings → Subscriptions, or in Google Play → Payments & subscriptions, or restore purchases in the app. Export your data from Settings. Delete your account to remove your profile, photos, logs, synced health record, and on-device Doc memories (how to delete your account).

Your rights (New Zealand): under the Privacy Act 2020 you can ask us for a copy of your personal information and ask us to correct it — contact us at tapatahi2026@gmail.com. If you’re not happy with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

Account and team content are kept while your account or team exists; account deletion removes your profile, personal logs, synced health record, photos under your user path, and device Doc memories (head-coach teams optionally deleted with you). Short-lived items expire automatically (DM videos and live location shares with an expiry, stale live/call sessions after several hours, on-device crash diagnostics after about 14 days). Your on-phone health sync history keeps your most recent syncs only and is removed if you delete the app. Cloud backups, server logs, Sentry diagnostics, and App Store / Google Play / RevenueCat billing history follow those providers’ windows.