Privacy Policy

1. Who We Are

TactixFlow is a product of Tonalli Labs LLC, a California limited liability company (“we,” “our,” or “us”). This policy describes how we collect, use, and protect information when you use TactixFlow (“the Service”).

Questions about this policy may be directed to: [email protected]

2. Information We Collect

Account information. When you register, we collect your name, email address, and a password (stored as a secure hash). If you sign in with Google, we receive your name, email, and profile photo from Google.

Team and player data. Coaches may enter team rosters, player profiles, match schedules, and contact information for parents and guardians. This information is provided voluntarily and is visible only to authorized users on that team.

Billing information. Subscription payments are processed by Stripe. We store only a Stripe customer ID and subscription status; we never store full card numbers or CVV codes.

Usage data. We collect standard server logs (IP address, browser type, pages visited, timestamps) to maintain and improve the Service.

Communications. If you contact us by email, we retain that correspondence.

3. How We Use Your Information

• To create and manage your account and team data.
• To process subscription payments through Stripe.
• To send transactional emails (account confirmation, password reset, match reminders).
• To detect and prevent fraud, abuse, or security incidents.
• To improve and develop the Service.
• To comply with legal obligations.

We do not sell your personal data to third parties.

4. Third-Party Services

Google OAuth. Sign-in via Google is provided by Google LLC. Your use of Google Sign-In is subject to Google’s Privacy Policy.

Stripe. Payment processing is handled by Stripe, Inc. Card data is collected and stored by Stripe under their Privacy Policy and PCI-DSS compliance program.

Fly.io. The Service is hosted on Fly.io infrastructure. Servers are located in the United States.

5. Affiliate Links & FTC Disclosure

Training Studio includes links to third-party products on Amazon, Soccer.com, Adidas, and other retailers. TactixFlow participates in affiliate programs, which means we may earn a commission at no extra cost to you if you make a purchase through one of these links. Affiliate relationships do not influence our drill or product recommendations.

6. Children’s Privacy

TactixFlow is intended for use by coaches and parents of youth athletes. We do not knowingly collect personal information directly from children under 13. Player profiles are created and managed by coaches or parents. If you believe a child’s data has been collected without appropriate consent, please contact us and we will delete it promptly.

7. Data Retention & Deletion

We retain account and team data for as long as your account is active. You may request deletion of your account and associated data at any time by emailing [email protected]. Billing records may be retained as required by law.

8. Your California Privacy Rights

California residents have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to request deletion, and the right to opt out of sale. We do not sell personal information. To exercise your rights, contact [email protected].

9. Security

We use HTTPS, encrypted passwords (bcrypt), and industry-standard access controls. No transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the Service after an update constitutes acceptance of the revised policy.

11. Governing Law

This Privacy Policy is governed by the laws of the State of California, without regard to conflict-of-law provisions.