Data Controller: Tacktiq is a mobile application developed and operated by Gybe Digital LLC, a Massachusetts limited liability company ("we," "us," or "our"). Gybe Digital LLC acts as the data controller for personal data collected through the Tacktiq app.
This Privacy Policy explains how we collect, use, and protect information when you use the Tacktiq iOS and Android applications and associated services. For all privacy matters, data requests, or complaints, contact us at support@gybedigital.co.
We have not appointed a formal EU/UK representative under Article 27 GDPR at this time. EU and UK residents may contact us directly at the email above to exercise their rights.
For users in the EU and UK, we rely on the following legal bases under Article 6 of the UK/EU GDPR:
| Purpose | Lawful basis | Details |
|---|---|---|
| Providing core app features (recording, analysis, polar tuning) | Contract — Art. 6(1)(b) | Necessary to perform the service you signed up for |
| Cloud sync across devices | Contract — Art. 6(1)(b) | Necessary to deliver the service |
| Processing subscription payments via RevenueCat / Apple | Contract — Art. 6(1)(b) | Necessary to process your purchase |
| Verifying your phone number via SMS one-time passcode (Twilio) | Contract — Art. 6(1)(b) | Necessary to verify your account at sign-up; not used for marketing |
| AI Assistance responses via Anthropic Claude API | Contract — Art. 6(1)(b) | Pro feature delivery; only aggregated session data sent |
| Performance milestone & weekly summary notifications | Legitimate Interests — Art. 6(1)(f) | Reasonable user engagement; you can opt out at any time |
| Improving the app using aggregated, anonymised usage patterns | Legitimate Interests — Art. 6(1)(f) | Anonymised aggregate data only; no individual profiling |
| Complying with legal obligations | Legal Obligation — Art. 6(1)(c) | e.g. retaining transaction records as required by law |
We do not: sell your data to third parties, use your data for advertising, share your personal information with other users, or use your sailing data to train AI models.
During sign-up you may provide your mobile phone number to verify your identity. When you submit your number, we send a one-time passcode (OTP) by SMS that you enter in the app to complete verification.
For details on how phone-number opt-in is collected, see our SMS Consent & Opt-In page.
Tacktiq requests access to your device's location to record GPS tracks during sailing sessions. Location access is used exclusively for:
To keep recording an accurate track while the screen is off or the app is in the background during a session, Tacktiq requests "Always" location permission. Location is only collected while a session recording is active — we do not track your location at other times, and we do not use location data for advertising. You can change or disable location access at any time — on iOS via Settings → Privacy & Security → Location Services → Tacktiq, or on Android via Settings → Location → App permissions → Tacktiq — though this will limit GPS tracking features.
When you use the Tacktiq Coach feature, the following data is sent to Anthropic's Claude API:
This data is processed by Anthropic to generate coaching responses. We do not send personally identifiable information (name, email, exact GPS coordinates) to the Claude API. Please review Anthropic's Privacy Policy for details on how they handle API data.
Your data is stored in two places:
If you are located in the EU, UK, Canada, or Australia, your personal data will be transferred to and processed in the United States. We rely on the following mechanisms to lawfully make these transfers:
You may request a copy of the relevant transfer safeguards by contacting us at support@gybedigital.co.
We implement reasonable security measures including encrypted connections (HTTPS/TLS), row-level security policies, and authenticated API access. However, no method of electronic transmission is 100% secure, and we cannot guarantee absolute security.
We retain your personal data for as long as your account is active. More specifically:
You can delete individual sessions from within the app at any time, or request complete deletion of your account and all associated data by emailing support@gybedigital.co. Upon account deletion, we will delete your personal data from our active systems within 30 days; backups may retain data for up to an additional 90 days before being purged.
Depending on where you are located, you have the following rights over your personal data.
You have the right to access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing based on legitimate interests, and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority — in the EU, your national Data Protection Authority; in the UK, the Information Commissioner's Office (ICO) at ico.org.uk. We will respond to rights requests within 30 days, extendable by a further two months for complex or numerous requests, in which case we will notify you.
To exercise your California rights, contact us at support@gybedigital.co. We will respond within 45 days (extendable by a further 45 days with notice).
Canadian residents have the right to access personal information we hold about you and to challenge its accuracy. You may also withdraw consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions. We transfer data to the United States for processing under contractual protections (Standard Contractual Clauses).
We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Australian residents have the right to access and request correction of personal information we hold. We may transfer personal information to overseas recipients (United States) under contractual arrangements that require equivalent privacy protections. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
To exercise any of the above rights, email us at support@gybedigital.co with your request. We may need to verify your identity before processing it.
Tacktiq is not directed at children. The minimum age to create an account is 13 (or 16 for residents of EU member states that have set the digital consent age at 16). We do not knowingly collect personal information from children below the applicable minimum age. If you believe a child has provided us with personal information, please contact us at support@gybedigital.co and we will delete it promptly.
Tacktiq may send push notifications for performance milestones, weekly summaries, and session confirmations. You can control notification preferences at a granular level in the app's Profile screen, or disable all notifications via your device settings (iOS Settings, or Android Settings → Apps → Tacktiq → Notifications). Withdrawing notification consent does not affect your ability to use any core app features.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above and sending an in-app notification at least 14 days before changes take effect. For changes that materially affect how we process your personal data, we will seek your explicit acknowledgement where required by applicable law. Continued use of Tacktiq after the effective date constitutes acceptance of non-material changes.
For privacy questions, data requests, or to report a concern:
Gybe Digital LLC
Email: support@gybedigital.co
Boston, Massachusetts, USA