0x2ecom / Privacy policy

TacTacGo — Privacy policy

Effective date: 13 October 2026

A note from one parent to another

Hi, I’m Evan. I built Tac Tac Go to help with mornings in my own family. My children have different attention styles and needs, and I wanted something that would support them—and make getting out of the door a little easier for all of us.

But there was something else I wanted to get right: using an app to help my children shouldn’t mean handing over a record of their daily lives.

Your child’s routines, the things they find difficult, their progress and little victories—that’s family life. So I built Tac Tac Go to help you manage it without sending those details to me.

It’s not just a different privacy policy. It’s a different way for the app to work.

Rather than uploading your family’s routines to an online service so it can pass them between devices, Tac Tac Go lets your tablet and the phones you pair with it talk directly to one another.

That connection is powered by BleuWi, the technology behind Tac Tac Go. It uses Wi-Fi and Bluetooth to exchange information directly between your household’s paired devices, without a server carrying your private routine and alarm content between them.

Your children’s profiles, routines, tasks, alarms, schedules, progress and reward history stay on those devices during everyday use and synchronisation. Optional Android backups and anything you choose to send for support are separate, explained below.

The important difference is this: I’m not simply promising to look after a copy of your children’s routines. The app doesn’t send me that copy in the first place.

No sign-up. No tracking.

You don’t need to provide an email address, phone number, password or social login. Behind the scenes, the app creates an automatically generated ID to help secure its online services and keep purchases linked to the right household. There is no personal account for you to create or manage.

There are no advertising networks, analytics tools, cookies or third-party trackers in Tac Tac Go. I don’t collect your children’s routine activity to analyse their behaviour or build a profile of your family.

Some things do use online services—and I want to be clear about those.

Tac Tac Go uses Google Play for purchases, and limited online services for household setup, security checks, confirming what you’ve purchased and providing packs. These services need some technical, device, household and purchase information. That is separate from the private details of your children’s routines.

If Android backup is enabled, a copy of your app data can also be stored in your own Google account. Android and Google manage that backup; I cannot browse, download or read it. And if you deliberately send me information when asking for support, I will receive what you choose to share.

The policy below explains what each service receives and why. Having a few necessary online connections should not mean putting your family’s daily life on our servers.

This policy describes what Tac Tac Go does today—not what I might want to collect someday.

Everything below is an account of how the app and website handle information. If you find something that contradicts what I’ve said here, please tell me. That is something to fix, not explain away.

If this approach matters to you, please tell another parent about Tac Tac Go. I’d like more families to know that software can be built this way.

Thanks for trusting something I made for my own family to help yours.

— Evan

Who is responsible

0x2ecom, an individual entrepreneur, develops TacTacGo and BleuWi and is responsible for the personal information processed through TacTacGo's services and websites. Contact: go@tactacgo.com.

This policy covers the public TacTacGo Android app (com.twoecom.tactacgo) and the TacTacGo websites. Internal or developer builds require their own testing notice. TacTacGo helps families manage routines, alarms, tasks and rewards under a parent or guardian's supervision.

Your family information stays with you

Profiles and nicknames, routines, schedules, alarms, tasks, check-ins, rewards, favorites, settings, progress, history and saved images are handled locally. Paired household devices receive the information needed for their role. Downloaded packs and local purchase, household and pairing state are also stored on your devices.

We do not receive this private family content through our online services to operate or synchronize these features. Parents control what is entered; please avoid unnecessary personal details, especially children's full names or medical information.

BleuWi: direct connections, private by design

BleuWi is a reusable communication technology developed by 0x2ecom. TacTacGo uses it to connect your paired devices directly through local Wi-Fi and Bluetooth Low Energy, with authenticated connections. No cloud relay sits between them.

TacTacGo chooses what to share and how to use it. BleuWi takes care of finding the paired device and delivering the message, without interpreting it as a child's routine or activity. Pairing information, pending messages and delivery records stay in local app storage. Nearby devices can observe Bluetooth discovery signals or a service advertised on the local network; discovery signals are not private routine content.

BleuWi gives TacTacGo a practical privacy advantage: synchronizing your family's day does not require sending it to us. It runs within the app, with no separate BleuWi account or online tracking service. Read the BleuWi privacy policy for its scope, local records and responsibilities when used by other apps.

The limited information used online

TacTacGo creates an automatic Firebase technical identity. It requires no email, password or social sign-in. The identifier is pseudonymous, not a promise that service records are anonymous.

For setup, household authorization, security, purchases and downloads, our services process:

• technical device and household identifiers, device role/model, membership and pairing records; some setup and tablet purchase identifiers use Android's app-scoped Android ID;
• public keys, certificates, authorization/revocation records and temporary setup invitations or links;
• Firebase Authentication, App Check and Play Integrity information, app/Android versions, IP/network information, request times and service logs;
• product, purchase-proof, entitlement and pack identifiers/versions needed to validate purchases and deliver content.

Google Play handles payments. We receive purchase and entitlement information, including relevant purchase-status updates from Google, but not your full payment-card details. These technical records are separate from your routines and history. Without the information needed for a requested online feature, we cannot provide that feature; you do not have to buy packs or send support reports.

Parent messages, without activity tracking

Parents can see announcements, news, offers, review or survey invitations on a parent phone or in the tablet's protected parent area. A child screen may show a neutral message indicator. Alarm phones do not fetch these cards.

Requests use the technical identity, security checks, household certificate, app version and ordinary request metadata. Eligibility, read/dismissed state, snooze and preferences are handled locally, without uploading impression or click analytics. There is no push notification service for these cards. You can hide news and offers in parent controls.

External links open Google Play or another website under its own policy; TacTacGo receives no completion confirmation. Enrolled testers can deliberately submit a message-test report with campaign identifiers, outcome, optional note, app version and language, without uploading the family facts used to select a card.

Backup is your choice

If you enable Android backup, eligible profiles, routines, settings, history and local state can be copied to your Google account. Android and Google manage that copy; we cannot browse or retrieve it. This is separate from BleuWi communication.

Backup rules exclude temporary setup credentials, installation-bound household certificates/enrollment, signed entitlement snapshots, purchase proofs and diagnostic folders. Android 12 and newer backs up selected user-data folders and preferences; older rules cover more app files. Downloaded packs are excluded from cloud backup but may transfer directly to a new device. Backup encryption and retention depend on Android, Google and device settings. Manage or delete backups there; uninstalling TacTacGo does not delete them.

Support only when you ask

Diagnostic logs are never uploaded automatically. Local logs and BleuWi connection reports have size limits and rotation. Temporary diagnostic capture lasts about three days and does not authorize sharing.

• Email feedback: review the draft and any optional logs in your email app, then send it yourself. The recipient is e@0x2ecom.com; your email provider handles delivery.
• Send incident report: the app explains the action before sending that incident's archive to our HTTPS support service. It can retry your requested report when internet access returns and send a related connection-restored timestamp. This does not authorize future reports. An email copy can reach our support mailbox.

Reports can contain device/app versions, roles, technical identifiers, language, timestamps, errors, network details, connection/alarm/routine state and event lines. Direct reports also use Firebase authentication, App Check and request metadata. Redaction reduces exposure but cannot guarantee that every line is free of personal information. Include only what is needed.

We review submitted material, manually or using AI-assisted diagnostic tools, to understand and fix the reported problem. It is not used for advertising or behavioral profiling. Both support routes are optional.

Website visits and optional testing

Our website code sets no cookies and includes no advertising or behavioral analytics trackers. Hosting/security systems process IP addresses, requested pages, time, browser, referrer and response status. Some pages load Google Fonts; signup loads a QR library from jsDelivr. Those providers receive ordinary request metadata. These privacy pages use local styling and system fonts.

The optional testing form collects the adult's name, email, country/language, Google/Play account availability, number of children, optional ages/routine notes, device availability/checks, testing preferences, feedback and consent choices. Please do not enter children's names or sensitive details. Required fields enable application review and contact; optional details can be omitted. An iOS notification request uses your email and the information you submit.

Browser localStorage/sessionStorage supports form resumption and invitations. Drafts, submissions and device checks also reach our database. Checks include browser/device capabilities, screen size, platform, timestamps and session/invitation tokens. Setup-link tokens can be passed to Google Play as an installation referrer. Our email provider sends signup summaries to e@0x2ecom.com and confirmations to applicants. Further updates require your opt-in. Email us to stop messages or request deletion; there is no self-service deletion link.

Why we may process this information

For personal information under our control, the GDPR bases are:

We do not sell personal information or use it for behavioral advertising. Purchase and access checks can automatically accept or reject a request using purchase validity and device authorization; contact us to challenge an error. We do not make decisions about your child through online behavioral profiling.

Providers and international processing

Google provides Play Billing/Integrity, Firebase Authentication/App Check, Cloud Functions, Firestore, Cloud Storage, Cloud hosting, Code Scanner and Install Referrer. Android provides backup, device transfer and companion-device functions. Hosting/database, email and diagnostic-review providers receive information needed for their respective tasks; support material is accessible to the developer and those assisting with the reported issue. Information may also be disclosed when legally required.

Providers can process information outside your country, including outside the European Economic Area. For transfers requiring GDPR safeguards, the relevant framework must be an adequacy decision or appropriate safeguards such as standard contractual clauses. Google describes its transfer frameworks; you can ask us about destinations and obtain a copy of applicable safeguards. See Google's privacy policy and Firebase's privacy information.

Keeping and deleting information

• On your devices: keep information until you remove it, subject to local limits and rotation. Clear app storage or uninstall on each device. Saved images outside app storage, such as Pictures/TacTacGo, and Android backups need separate deletion.
• Household and purchase records: retained while needed to authorize your devices, honor purchases/restoration and resolve payment disputes. Temporary invitations expire; security records remain as needed to investigate abuse or meet legal duties.
• Incident reports: cloud archives and their metadata are configured to expire after 90 days. Cleanup is asynchronous; storage limits can remove them sooner. Email and support working copies are separate and remain only while needed to resolve and verify the issue or meet legal/security duties.
• Message-test reports: expire after 30 days and are removed during administrative cleanup, which can occur later.
• Testing forms and correspondence: retained for application review, participation, requested communications and evidence of consent; remaining legal or security records are kept only for those purposes. This includes abandoned drafts and device checks; they have no promised automatic deletion deadline.

Uninstalling does not erase information already received by our services. Contact us to request deletion of records we control.

Permissions and security

Bluetooth and nearby Wi-Fi permissions support connections, not location tracking. Internet access supports the limited services above. Notification, exact/full-screen alarm, foreground-service, boot, wake-lock, vibration, audio and optional Do Not Disturb permissions support reliable alarms and paired devices. QR setup uses Google Code Scanner. Normal operation requests no location, contacts, SMS, call-log, microphone or camera permission from the app.

Android app storage, authenticated local connections and HTTPS protect different parts of the system. Keep your devices and Google account secure. No software can promise absolute security.

Your choices and rights

Email go@tactacgo.com to request access, correction, deletion or restriction of personal information we control, to object where applicable, or to request portability where the law provides it. You can withdraw consent for optional processing without affecting earlier lawful use. We may ask for limited verification to locate and protect your records. GDPR requests are normally answered within one month; we explain any permitted extension within that time.

You can complain to the CNIL in France or your local data-protection authority. Parents can manage children's local information directly. We cannot retrieve private family content from your devices to answer a request.