Privacy Policy
Tactora collects only what it needs to build and store your drills. It never sells your data or shows ads.
Who is responsible
Robert Croll, self-employed (autónomo), NIE Y2200726P, Carrer Miguel Barceló 4, Apt 223, 07180 Santa Ponsa (Calvià), Illes Balears, Spain, is the data controller. Contact: privacy@tactora.app.
What we collect and why
- Email, password (stored encrypted by our provider), display name
- Why:
- Create and secure your account
- Legal basis (GDPR):
- Performance of a contract (Art. 6(1)(b) GDPR)
- How long:
- Until you delete your account; backups are deleted within 30 days
- Club name, badge, colours
- Why:
- Personalise the app and your shared boards
- Legal basis (GDPR):
- Performance of a contract (Art. 6(1)(b) GDPR)
- How long:
- Until you change them or delete your account; backups are deleted within 30 days
- Drill descriptions, sketch photos, boards, notes, progressions
- Why:
- Create, save and share your drills
- Legal basis (GDPR):
- Performance of a contract (Art. 6(1)(b) GDPR)
- How long:
- Until you delete the drill or your account; backups are deleted within 30 days
- Daily count of AI requests
- Why:
- Fair-use limits and abuse prevention
- Legal basis (GDPR):
- Legitimate interest (Art. 6(1)(f) GDPR): preventing abuse and keeping the service secure
- How long:
- Up to 12 months
- Technical logs (IP address, device, errors)
- Why:
- Keep the service secure and working
- Legal basis (GDPR):
- Legitimate interest (Art. 6(1)(f) GDPR): preventing abuse and keeping the service secure
- How long:
- As set by our hosting providers, usually a few weeks
Required data
Your email is needed to create your account. You can sign in with Google or with email and password. Everything else is optional.
Automated decisions
We do not make automated decisions with legal effects on you or create profiles. AI is only used to draw and write up your drills.
Voice input
Speech is turned into text by your phone or browser, not by Tactora; Tactora only receives the text. Your browser's provider (e.g. Google on Chrome, Apple on Safari) may process the audio under its own privacy terms.
AI processing
To build a board, your drill text and any sketch photo are sent to an AI model (Google Gemini, through Lovable's AI service). The result is saved to your account. Tactora does not use your drills to train AI models.
Players and children
Tactora is for coaches aged 16 and over. Tactora does not store players' names. Players are shown by shirt number only (positions such as GK are fine). If a name is spoken or typed, the app replaces it with a number before saving. Please do not upload photos in which players can be identified.
Sharing
New drills are private. When you share a drill, anyone with the link can see it, with your club name and badge. You can stop sharing at any time; the old link then stops working.
Who processes data for us
Bound by data processing agreements:
- Lovable: app hosting and the AI service
- Supabase: database, sign-in and file storage
- Google: the AI model that reads drills and sketches
Some may process data outside the EEA; transfers are protected by EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Cookies and local storage
Only what the app needs: keeping you signed in, saving unsent drafts, remembering your language. No advertising or tracking cookies.
Security
Each coach can only access their own drills; files are stored privately; connections are encrypted; AI keys never reach your device.
Your rights
You can exercise your rights of access, rectification, erasure, restriction, data portability and objection free of charge. Email privacy@tactora.app; we reply within one month. You can also delete your account and download your data in Settings. Complaints: Spanish Data Protection Agency (https://www.aepd.es).
Changes
We'll tell you in the app before important changes apply. Last updated 2026-09-28.