Privacy Policy

Effective date: September 18, 2026

1. Who we are

Tacto is a sports social platform operated by Core Mentors LLC ("Tacto", "we", "us"). This policy explains what personal data we process when you use the Tacto apps and websites, and the choices you have. For privacy questions or requests, contact support@netcoresports.com.

2. Who this policy covers

Tacto serves several kinds of users, and what we process depends on your role:

  • Athletes / players — profile details, sports played, match participation, scores, rankings, statistics and performance data, posts and media.
  • Coaches — professional profile, credentials and experience you provide, your coaching relationships with athletes (including managed or minor athletes), session and schedule data.
  • Clubs and organizers — organization details, staff accounts, member rosters, venues, event and booking data, payment and payout information.
  • Visitors — people who view public pages (profiles, events, standings, club sites) without an account.

3. Data we collect

You provide it

  • Account data: name, email address, password (stored hashed), or phone number for SMS sign-in.
  • Profile data: photo, sports, skill level, club and team affiliations, bio.
  • Content you create: posts, comments, messages, photos and videos, event entries.
  • Role-specific data as described in section 2.

Created while you use Tacto

  • Match, booking, ranking, and attendance records tied to your account.
  • Live-stream and recording data (see section 5).
  • Technical data: device and app version, IP address, log and diagnostic events.

From third parties

  • Google sign-in: your name, email and Google account identifier, when you choose it.
  • Payment status from our payment processor (we never receive full card numbers).
  • Workout summaries from a fitness service you connect — Apple Health, Health Connect or Garmin Connect — only as described in section 6.

4. Children and parental consent

We ask every athlete and coach for their date of birth once, when they join. We use it to check the minimum age, to apply age-appropriate defaults and to place athletes in competition categories. It is never shown on a profile or to other users, and only you and our support team can see it.

Athletes under 13 (or under the age of digital consent in their country, where that is higher) can only get a Tacto account through a parent or guardian invitation: the parent creates and controls the account, accepts these policies on the minor's behalf, and can review or delete the minor's data at any time via support@netcoresports.com. If someone below that age tries to open their own account, we refuse it and delete what was entered. Athletes between 13 and 17 who hold their own account are treated as minors: their profile starts private to connections, they are hidden from searches and suggestions by people they do not know, and tags need their approval. Coaches and clubs that work with minors on Tacto are required to use managed accounts for children rather than collecting minors' data in their own profiles.

5. Live streams and recordings

Clubs and organizers can stream matches and events through Tacto (including venue-installed cameras) and keep recordings ("VOD"). If you take part in a streamed match — as a player, coach, or attendee near the court — your image, movement, and voice may appear in the stream and its recording.

  • The club or organizer running the event is responsible for telling participants and spectators that streaming is happening and for having the right to stream that venue and event.
  • Where the platform requests an explicit on-platform streaming consent from a player (or from a parent for a managed minor account), we record who granted it, for what scope, and when.
  • Streams and recordings may be visible to other users or publicly, depending on how the organizer publishes them. Recordings are retained while the organizer keeps them published, subject to section 9.
  • To ask for removal of a recording you appear in, contact the organizer, or write to support@netcoresports.com and we will coordinate a review.

6. Fitness and health data (Apple Health, Health Connect, Garmin)

Athletes and coaches can post an Achievement based on a workout recorded by a fitness service: Apple Health on iPhone, Health Connect on Android, or Garmin Connect. This is optional — nothing is read until you connect a service, and you choose each workout you share, one at a time.

  • What we read. Only completed workouts: the activity type, start time, duration and distance (pace is derived from those). We do not read heart rate, calories, sleep, body measurements, routes or any other health metric, and the app only asks the platform for workout permissions.
  • Apple Health and Health Connect are read on your phone. The app reads workouts only when you open the activity picker, and nothing leaves your phone until you pick one workout and post it. Only that workout's summary is then stored with your post. Workouts you do not post are never sent to us.
  • Garmin Connect is connected through our servers. When you connect Garmin, Garmin sends us summaries of your activities (including the previous 30 days) so you can pick from them; we store only the fields above. We keep the access tokens encrypted and use them for nothing else.
  • Purpose. Fitness data is used solely to let you share an achievement you chose, and to show it on your profile and in the feed to the audience you set on that post. We do not use health or fitness data for advertising, marketing profiles, analytics about you, data mining, automated decisions or any other purpose; we never sell it, never share it with data brokers or advertisers, and share it with no one other than the hosting processors in section 8 that run our service.
  • Where it lives. On our servers, never in iCloud or other device backups by us. We follow Apple's HealthKit guidelines, Google's Health Connect developer policies and the Garmin Connect Developer Program terms.
  • Your control. Disconnect a service any time in the app under Manage activity sources: for Apple Health and Health Connect this revokes the app's permission (you can also do it in the Health app or Health Connect settings); for Garmin it deregisters the connection with Garmin and deletes our tokens. Deleting an achievement post deletes the workout summary stored with it; Garmin activity summaries are kept while the connection exists and deleted with your account. Raw deliveries from Garmin are deleted within 30 days of processing.
  • Minors. The same rules as section 4 apply: a managed (parent-controlled) account connects a fitness service only through the parent.

7. How we use data

  • Provide the service: accounts, profiles, matchmaking, events, bookings, messaging, streams.
  • Show sport activity: scores, standings, rankings, highlights, statistics, and the achievements you choose to post.
  • Process payments and payouts (section 8).
  • Send service notifications (and marketing only with your consent, which you can withdraw).
  • Keep the platform safe: abuse prevention, moderation, security logging.
  • Comply with legal obligations.

8. How data is shared

  • Within the platform: your profile and sport activity are visible to other users per your settings; clubs see data of their members and event participants; coaches see data of the athletes they coach; public profiles, events, standings, and club sites are visible to anyone.
  • Processors working for us: payment processing (Stripe), real-time video and streaming infrastructure, cloud hosting and storage, email/SMS delivery, and error monitoring. They process data under contract and only for our instructions.
  • Stripe: when a club onboards for payouts, Stripe collects identity and banking data as an independent controller under its own privacy policy.
  • Fitness services: Apple, Google and Garmin process the data held in Apple Health, Health Connect and Garmin Connect under their own privacy policies; we only receive what section 6 describes, and we send them nothing about you.
  • Legal: when required by law, or to protect the rights and safety of users and the platform. We do not sell personal data.

9. Retention and deletion

We keep personal data while your account exists and as needed for the purposes above. You can delete your account in the app or by writing to support@netcoresports.com; we then delete or anonymize your data within a reasonable period, except what we must keep for legal, accounting, or dispute purposes. Match results and standings may persist in anonymized or de-linked form because they are also other participants' records. Recordings follow section 5; fitness data follows section 6.

10. International transfers

Our infrastructure runs on cloud providers that may store or process data outside your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for those transfers.

11. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, object to, or delete your personal data, and to withdraw consent where processing is based on it. Exercise them by writing to support@netcoresports.com. You can also complain to your local data-protection authority.

12. Security

We protect data with measures including encryption in transit, hashed passwords, access controls, and network isolation of our systems. No system is perfectly secure; report any concern to support@netcoresports.com.

13. Changes to this policy

We will post any material change here and update the effective date, and where the change significantly affects you we will notify you in the app or by email.

14. Contact

Core Mentors LLC — privacy and data requests: support@netcoresports.com; general contact: tacto@netcoresports.com. Governing jurisdiction: State of Texas, United States.