Your data. Your choices.

Privacy notice · September 26, 2026

What TAO collects

• Account details: email, authentication credentials, first and last name, unique username, optional call sign, avatar and account preferences. Password authentication is managed by Supabase.
• Game activity: missions, claims, photos you submit as game evidence, scores, virtual coins, purchases made with virtual coins, friends, teams, invitations and messages.
• Location, when you permit it: device coordinates, accuracy and timestamps used for the supported on-duty map and gameplay features. The current beta sends location while the app is active; it is not a continuous background tracking service.
• Device and support data: notification tokens, session identifiers, reports you submit and technical records needed to operate and protect the service. Apple may provide TestFlight feedback and crash diagnostics.

Why it is used

We use this information to run accounts and missions, deliver messages and alerts, show authorized map information, keep scores, investigate disputes and abuse, answer support requests and improve the beta. We do not sell personal data. This beta does not use advertising trackers or offer cash redemption for game coins.

Who can see what

Your username, call sign, selected avatar portrait and relevant game statistics may be visible to other players on profiles, leaderboards and game messages. Email and real-name fields are not public profile fields. Your messages and claim photos are available to the people authorized for their conversation or mission and to authorized administrators when support, safety or dispute review requires it. Messages are not end-to-end encrypted.

Strangers do not receive your live coordinates. Map sharing depends on your duty mode and friend/team relationship, with reciprocal visibility rules. Evidence markers you deliberately share can reveal their marked location. Turn off duty or revoke location permission to stop new location sharing; previously submitted evidence and game records may remain for review.

Services that help run TAO

Cloudflare hosts the public website and routes domain email to the TAO support inbox. Resend delivers account confirmation and password-reset emails for TAO through Supabase. The public information pages do not use advertising trackers. Account-help pages communicate directly with the TAO Supabase authentication service. Supabase provides accounts, database and media storage. Expo and Apple help build the app and deliver permitted notifications. Apple also operates TestFlight. Website hosting and map services process the network information needed to serve content; map providers may receive your IP address and the map areas requested. Map layers may use Apple Maps, OpenStreetMap, OpenTopoMap or Esri. These providers apply their own privacy terms. Service processing may occur outside your location.

Face ID, permissions and account security

Face ID unlocks the app through iOS. TAO does not receive your facial scan or biometric template. Camera/photo access is used when you choose to submit game evidence or scan a code. Microphone or other permissions are requested only for features that use them. You may refuse optional permissions or change them in iPhone Settings; related features may then be unavailable.

TAO stores a sign-in session on your device to keep you signed in. The website uses browser storage for this purpose. Use Log out on a shared device. We use access controls and private storage, but cannot guarantee that any online service is free of security risk.

Retention and account deletion

We keep account and game data as needed to provide the service and handle support, disputes and security. Inactivity alone does not delete your account or accumulated progress. Not every record has an automatic expiry during this beta.

In the updated beta, open Settings → Support and account privacy → Request permanent account deletion. Type DELETE to submit the request. During the beta, deletion is processed manually within seven days, with confirmation by email. You can cancel a pending request before completion. Deletion removes the account and associated personal data, including submitted messages and photos; account progress and virtual coins cannot be restored. A request is not itself immediate deletion. Records required by law or necessary to resolve an existing legal claim may be retained only for that purpose.

If you cannot access your account or are using an older build without the request screen, contact the email above for assistance. We may need to verify ownership before discussing or changing private data. You may also request access to or correction of your personal information there.

Testing responsibly

Only involve people who have agreed to play. Do not submit private information or photos of uninvolved people. Do not use TAO while driving, trespass, or use real weapons. Report abusive players or content using the app’s private reporting screen or support email.

TAO is not directed to children under 13; this beta is restricted to testers 16 or older. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and remove it.

Updates

We will update this page when data practices change and describe material changes in the app or beta release notes. The date above identifies this version.