TacTacGo – Privacy Policy

A note from the developer

Hi. I'm Evan, a parent who built TacTacGo for my own kids' morning routine. Like a lot of families, ours includes kids with very different attention styles and needs.

This policy exists because I care about where my kids' data goes — and I assume you do too.

Most privacy policies describe what an app already does: collect advertising IDs, send crash logs to a vendor, share data with “partners” for analytics. This one is different, because TacTacGo is built different so that:

• No sign-up or personal account. You do not need an email address, phone number, password, or social sign-in to use TacTacGo. Behind the scenes, the App creates an anonymous technical Firebase identity so the service can securely verify protected actions—for example, keeping purchases associated with the right household. It is created automatically, is not a personal account, and is not something you manage.
• No advertising SDK. No analytics SDK. No cookies. No third-party tracker. Zero.
• Almost everything that makes TacTacGo useful to your family stays on your family's own devices. The limited device, household, commissioning, purchase, and entitlement metadata that must reach developer services is described below.
• The cloud copy of your routine content is in your own Google account when Android backup is enabled. Android and Google manage that backup; I cannot browse, download, or read it.
• Your devices pair directly over local Wi-Fi and Bluetooth, using authenticated Bond connections. The family data plane is local; it is not routed through a TacTacGo sync server.
• I do use a few online services where they're genuinely needed: Google Play to process purchases, Android and Google services when you choose backup, and protected household services for setup, security, entitlement checks, and packs. Android apps cannot avoid every online connection, but that does not mean your family's daily life needs to go to the cloud. Exactly what each service receives — and why — is listed below.

The only “We reserve the right to…” clause you'll find in this document is… literally this sentence. That's the only one.

Everything below this note is a plain, honest inventory of exactly what the App and website do today — not a shopping list of data I might want someday. If you find a line in the policy that contradicts a claim in this box, that's a bug and I want to hear about it.

If this feels like a breath of fresh air, please tell another parent. Privacy-respecting kids' software is rarer than it should be, and one parent telling another is how that changes.

Thanks for trusting TacTacGo to help make your family's mornings a little easier.

— Evan

Effective date: August 9, 2026
Last updated: August 9, 2026

TacTacGo is an Android application for family morning routines, alarms, scheduled tasks, rewards, and parent-supervised features. This policy explains what TacTacGo stores on your devices, what your paired devices share with each other, what limited information developer-operated services process, and what information our public website processes when you use its optional tester signup.

Who publishes TacTacGo

TacTacGo is published by twoecom ("we", "us", or "our").

• App: TacTacGo (com.twoecom.tactacgo)
• Email: go@tactacgo.com

Summary

• Most family content stays on your own Android devices.
• Paired TacTacGo devices communicate directly over authenticated local Wi-Fi and Bluetooth connections after pairing ("Bond").
• Limited device, household, security, commissioning, purchase, entitlement, and content-pack information is processed by developer-operated services when required for those features.
• The app does not include advertising, analytics, or crash-reporting SDKs.
• The app does not automatically upload diagnostic logs.
• The public website does not use advertising or behavioral analytics trackers. Its optional tester signup stores the information you submit so we can review applicants and contact them.

Information stored on your devices

TacTacGo stores information locally so it can function without continuous cloud synchronization. Depending on the features you use, this may include:

• family and child profiles, including names or nicknames you enter;
• routines, alarms, schedules, tasks, rewards, favorites, settings, check-ins, and history;
• images that you explicitly save and downloaded reward-content packs; and
• local pairing, household, device, and entitlement state.

Family content primarily remains on the devices belonging to your household. Children may interact with local profiles and routines, so parents and guardians should avoid entering unnecessary personal information in profile names, notes, or other user-created content.

Information shared between your paired devices

After you pair devices, TacTacGo devices may communicate directly using authenticated local connections. Depending on the feature, they may exchange routines, schedules, alarm state, task progress, reward state, household configuration, device role, device availability, and secure pairing information.

These transfers are intended to occur between devices belonging to your household. Local network discovery uses Wi-Fi and mDNS/DNS-SD; other devices on the same network may be able to observe that a TacTacGo service is advertised, as is inherent to local-network discovery.

Information sent to developer-operated services

Some features require communication with services operated by or for twoecom, including household commissioning, entitlement verification, purchase validation, security, fraud prevention, and optional reward-content delivery.

Depending on the feature, these services may process:

• a pseudonymous Firebase Authentication identifier and Firebase App Check or Play Integrity attestation information;
• generated device identifiers, household membership, device role, device model, and paired-device records;
• public-key, certificate, pairing, authorization, and revocation metadata;
• app, Android, request, timestamp, network, and other operational metadata needed to operate or secure the service;
• purchase, entitlement, product, and content-pack request information; and
• commissioning invitation and setup payload data, including short-lived deep-link or setup data needed to authorize pairing.

The developer does not use backend services to synchronize routines, child profiles, scheduled tasks, routine history, reward history, or saved history images. Those remain on your devices unless you choose to share them yourself.

Google Play Billing and content packs

TacTacGo supports a one-time Full Unlock and optional downloadable content packs. Purchases are processed through Google Play. We may receive product, purchase-proof, and entitlement information needed to validate purchases, unlock features, deliver purchased content, prevent fraud, and maintain entitlement records. We do not receive your full payment-card details from Google Play.

When you browse or download an optional pack, we process the pack identifier, version, entitlement state, device/household identifiers, and operational request information needed to authorize and deliver the pack. The app does not upload your routine history or child activities merely because you download content.

Android backup and device transfer

TacTacGo participates in Android backup and device-transfer features. If enabled by the device owner, eligible information may be backed up or transferred, including routines, profiles, settings, favorites, history, entitlement state, downloaded-pack state, and pairing state.

Credentials, purchase proofs, diagnostic logs, caches, and temporary downloaded-content caches are intentionally excluded from applicable backup rules. Android backup and device transfer are provided by Android and Google; their storage, encryption, scheduling, and retention depend on your device, Google account, and Android settings.

Permissions

TacTacGo requests permissions needed for alarms, local device communication, and optional services:

• Internet: entitlement checks, commissioning, security checks, content-pack delivery, and related service requests.
• Notifications: alarms, reminders, approvals, check-ins, and important app notifications.
• Exact alarms: alarms and scheduled routines at the expected time.
• Foreground services: reliable alarm operation and connected-device monitoring while the screen is off.
• Bluetooth: pairing and trusted local connections. Bluetooth is used for connectivity, not to determine location.
• Nearby Wi-Fi and Wi-Fi state: local discovery and communication between paired devices. These permissions are used for connectivity, not to derive location.
• Wake lock, vibration, and audio settings: reliable alarms and alarm behavior.
• Do Not Disturb access: alarm behavior when you explicitly grant notification-policy access.
• Boot completed: restoring scheduled functionality after restart.
• Full-screen alarm access and companion-device support: time-critical alarm presentation and recovery/presence handling for paired devices.

The app does not request location, contacts, SMS, call logs, microphone, or camera permission for normal operation. QR setup uses Google's Code Scanner service and does not require the app to request camera permission.

Diagnostics and feedback

TacTacGo keeps diagnostics on your device by default and does not automatically upload diagnostic logs. If you choose to send feedback, the app may prepare an email draft. Nothing is transmitted until you review and send it.

If you include technical information, the email may contain app and Android version, device model and role, language, timestamps, summarized errors, alarm/routine/connection state, and technical event lines. Your email provider processes the message after you send it.

Third-party services

TacTacGo currently uses platform services where needed for app functionality, including:

• Google Play Billing and Play Integrity;
• Firebase Authentication, App Check, Cloud Functions, and Google Cloud hosting;
• Google Play Code Scanner;
• Android Companion Device services; and
• Android Backup and device-transfer services.

These services operate under their own privacy policies and applicable terms. We do not include advertising SDKs, Firebase Analytics, Crashlytics, Google Analytics, AdMob, or similar behavioral analytics/tracking SDKs in the app.

Children and family use

TacTacGo is intended for parent- or guardian-supervised family use. Children may use profiles, routines, tasks, rewards, and history stored on household devices. Most family content is not sent to developer-operated services.

Limited device, entitlement, purchase, commissioning, and security information may be processed to provide requested app functionality. We do not knowingly use children's data for advertising, cross-app tracking, or behavioral profiling. Parents and guardians control information entered into the app and can remove local information as described below.

Retention and deletion

Local app information

You can generally remove local information by deleting routines or profiles in the app, clearing the app's storage in Android Settings, or uninstalling the app. Images saved outside the app's private storage, such as under Pictures/TacTacGo, may require separate deletion in your gallery or file manager. Each paired device can retain its own copy until you remove it there.

Developer-operated services

Operational records relating to households, devices, purchases, entitlements, security, commissioning, content delivery, or voluntarily submitted support information may be retained as reasonably necessary for service operation, fraud prevention, security, entitlement continuity, customer support, accounting, and legal compliance.

Short-lived commissioning invitation and setup records may be retained until they expire, are resolved, or are cleaned up according to operational processes. Content-pack download URLs are short-lived, while security and infrastructure logs may remain for their configured retention periods.

To ask about developer-held operational information or request deletion where applicable, email go@tactacgo.com. Some records may need to be retained for security, fraud prevention, accounting, entitlement continuity, or legal obligations. Because some service identifiers are pseudonymous, we may need an approximate time, email address, or device/household detail to locate a record.

Website and tester signup

The public TacTacGo websites are served as mostly static pages. The site code does not set cookies and does not use advertising, behavioral analytics, or third-party tracking scripts. The signup flow does use browser localStorage and sessionStorage to resume a form and carry an invitation through the setup flow. Standard web hosting and security systems may process IP address, request time, requested URL, browser/user-agent details, referrer information, and response status.

Some pages load Google Fonts and the signup page loads the QR-code library from jsDelivr. Those providers may receive ordinary request metadata such as IP address and browser information under their own policies.

The Early Tester Signup is a website feature, not part of the App's ordinary family-data path. If you choose to use it, you intentionally send the information you enter to developer-controlled web systems so we can contact you and administer testing.

If you use the optional Early Tester Signup form, we process the information you submit, including:

• first and last name, country, preferred language, and email address;
• whether the email is associated with a Google/Play Store account;
• number of children, optional ages, and optional routine or child notes;
• Android tablet, parent-phone, and alarm-phone availability and optional model/version details;
• Play Store and Wi-Fi availability, willingness to install or provide feedback, testing timing, feedback preferences, and how you heard about TacTacGo;
• optional additional notes, device-check results, and consent choices; and
• form-session, invitation, and device-check data used to resume a signup or connect a device-check result to that signup. Device checks may include the browser's user-agent and client-hint signals, screen dimensions, touch support, detected platform/category/compatibility/version, timestamp, signup token, and device-check role. Invitation tokens may appear in setup URLs and be passed to Google Play as a referrer when you follow an install link.

Please do not enter children's full names. We use signup information to review tester suitability, understand device coverage, administer testing, send requested testing information, and send future updates only where you opt in. Signup records are stored in a developer-controlled database. When email delivery is configured, a submission summary is sent to e@0x2ecom.com and a confirmation is sent to the address you provide through our configured SMTP/email provider.

Drafts, device-check results, and submitted signup records are stored server-side. The current form does not provide an automated unsubscribe link or a self-service deletion control. These records may be retained while we review applicants, administer testing, communicate with participants, maintain records of consent, and meet security or legal obligations. You may ask us to stop future messages or request deletion by emailing go@tactacgo.com; legal, security, or accounting records may need to be retained.

Security

We use reasonable technical and organizational measures designed to protect information processed by TacTacGo and the website. Local app data is protected by Android's application sandbox, cloud traffic uses HTTPS, and content-pack downloads use short-lived authorization. No system can guarantee absolute security.

Protect your devices and Google account with screen locks, strong credentials, current software, and a trusted local network.

International processing

Developer-operated services, website hosting, email providers, Google services, and database providers may process information in jurisdictions different from your own. Provider locations and infrastructure may change over time. Contact us if you need information about a particular processing flow.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information, or to complain to a data-protection authority. You can also uninstall the app, clear local app data, remove paired devices, decline to send feedback, and stop participating in website testing.

Contact go@tactacgo.com for requests concerning information we control. We do not sell personal information or use it for cross-context behavioral advertising.

Changes to this policy

We may update this policy when the app, website, permissions, business model, or service providers change. The current version is published at:

https://tactacgo.com/privacy/

The effective and last-updated dates at the top of this page indicate when the current version was published.

Contact

• Email: go@tactacgo.com
• Publisher: twoecom
• App: TacTacGo (com.twoecom.tactacgo)