Last Updated: October 8, 2026
Tactic IQ (Google Play: com.tacticiq.app) — Privacy Policy
1. INTRODUCTION
TacticIQ ("we", "us", "our") provides the Tactic IQ mobile application, website and related services. This Policy explains how we collect, use, disclose and protect personal information when you use our services.
2. INFORMATION WE COLLECT
We may process: account and authentication data (such as email, user ID, display name, OAuth identifiers handled by our auth providers); usage, diagnostics and device data (including IP address, device model, OS, language, push tokens, advertising identifiers where permitted); prediction, leaderboard and gameplay activity; chat messages and moderation records; and purchase metadata (product IDs, transaction references, entitlement status, timestamps). We do not receive your full payment card number — payments are processed by Apple or Google.
3. PURPOSES AND LEGAL BASES (SUMMARY)
We use data to provide and improve the service, authenticate users, operate chat and community features, prevent fraud and abuse, comply with law, and send transactional or (where permitted) promotional communications. Legal bases under GDPR may include contract, legitimate interests and consent depending on the processing.
3A. IN-APP USAGE ANALYTICS (FIRST-PARTY — SUMMARY)
We operate a first-party usage analytics system running on our own servers: it collects app open and screen view events, session duration, a randomly generated install identifier, platform and app version. IP addresses are NOT stored with these events; no advertising identifier is used in this first-party system. Separately, if your analytics preference is on, the mobile app uses Google LLC's Firebase Analytics for ad measurement (to measure which of our ads brought you to TacticIQ; the app does not show ads), processing events such as app open, sign-up and predictions together with the device/advertising identifier; Google may process this data outside your country, including in the United States. On iOS the advertising identifier is used only if you grant App Tracking Transparency (ATT) permission. Events are linked to your account only while your in-app analytics preference is on (you can turn it off in Settings). Raw records are deleted within 90 days at the latest. Legal bases: de-identified measurement under legitimate interest (KVKK Art. 5/2-f; GDPR Art. 6/1-f), account-linked measurement under consent (KVKK Art. 5/1; GDPR Art. 6/1-a). Details: full Privacy Policy Section 3A.
4. REVENUECAT AND IN-APP PURCHASES
We use RevenueCat as a processor to validate purchases, manage entitlements and sync events across platforms. RevenueCat may process app user IDs, receipt/transaction data and product identifiers as described at https://www.revenuecat.com/privacy. Our servers may receive webhooks from RevenueCat to update your in-app entitlements (for example chat credit balances). RevenueCat must not use your data for its own marketing on our behalf.
5. SHARING AND INTERNATIONAL TRANSFERS
We share data with service providers (hosting, authentication such as Supabase, chat infrastructure, email delivery, analytics/crash tooling as configured, RevenueCat, push networks) who are bound by contract to safeguard information. Providers may be located outside your country; where required we use safeguards such as Standard Contractual Clauses. Turkish users: certain transfers may rely on explicit consent under KVKK.
CHAT (STREAM, INC. — USA): Live match chat is delivered through Stream, Inc. (United States). Your message text, display name and the identifiers required for delivery are processed by Stream as an international transfer; email and payment data are not sent to Stream. This transfer relies on your explicit consent; giving it is not mandatory — you can create an account without it, only the chat feature stays closed, and you can withdraw your consent at any time. Your message text is also sent to an AI service (Google Gemini — USA) for moderation; the dictionary and violence filters run on our own servers, so that step involves no third-party provider. Our copy of chat messages is deleted automatically 48 hours after the match ends.
LEGACY ACCOUNTS: This explicit consent step was added to the sign-up flow later. Accounts created in earlier versions, before the step existed, may have no consent record; their chat access is not restricted. These accounts are asked for consent once, in the new version of the app; they are not asked on the website. If consent is not given, that decision is recorded and the chat feature stays unavailable until consent is given; other features are not affected. To withdraw your consent or ask about your record, write to kvkk@tacticiq.app.
6. RETENTION AND SECURITY
We retain information as long as needed to provide the service and meet legal obligations. Chat content may be deleted automatically after a limited period as described in our Community Rules. We implement technical and organisational security measures; no method of transmission is completely secure.
6A. TURKEY — LAW NO. 5651 (SUMMARY)
Internet Law No. 5651 may impose access/traffic logging and BTK-related duties on certain regulated roles. TacticIQ maintains mainly application-layer audit and moderation records and encrypted backups; full network-edge traffic logging may require separate legal and technical design. Qualified Turkish counsel should confirm classification and any additional measures.
7. YOUR RIGHTS AND REGIONAL NOTICES
Rights vary by jurisdiction. Turkey (KVKK): contact kvkk@tacticiq.app. EU/UK: GDPR rights including access, rectification, erasure, restriction, portability and objection. USA: COPPA protections for children; California residents may have rights to limit sale/sharing of personal information. Brazil (LGPD) and Nigeria (NDPA): DPO kvkk@tacticiq.app.
8. CHILDREN
The Service is not directed to children. Account registration requires you to be at least 18. We do not knowingly collect personal information from children under 13 without verifiable parental consent where required. The app includes age gating.
9. CHANGES
We may update this Policy; the "Last Updated" date will change and we will provide additional notice where required by law.
9A. GEOGRAPHIC SCOPE (DATA RESIDENCY)
TacticIQ does not warrant that consumer use is lawful in every jurisdiction that mandates domestic-only hosting or refuses cross-border processing as described here (for example PRC-style data localization or Russian Federation 152-FZ localization as an exclusive model). If your local law conflicts with our international processing and you cannot lawfully consent, do not use the Service.
9B. RATINGS DATA TRANSPARENCY
Vote data (user scores) collected to compute player and coach ratings is processed only for aggregated/anonymous statistics. Rating calculation is performed by an automatic weekly algorithm with no staff intervention. Individual raw scores are kept private inside the app and are not shared with or sold to third parties; votes detected as manipulation may be excluded from the calculation.
10. CONTACT
kvkk@tacticiq.app | support@tacticiq.app | legal@tacticiq.app