Privacy Policy

1. Who are we?

The Taka mobile application ("the Application") is published by DUCLOTDEV, a French simplified joint-stock company with a sole shareholder (SASU) with share capital of EUR 100, whose registered office is at 1 Allée des Hêtres, 74600 Annecy, France, registered with the Annecy Trade and Companies Register under number 108 739 459, represented by its President Mr Aymeric Duclot — support@takafg.com, hereinafter "the Publisher".

The Publisher is the data controller within the meaning of Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act.

2. The short version

Taka works with an account and a server: your matches, progression and friends are saved to your account so they follow you from one device to the next. In return, our commitments are clear:

• no advertising and no ad trackers; no third-party analytics SDK in the app;
• your data is never sold or rented to anyone;
• geolocation is approximate, strictly optional and never collected in the background;
• you can export your data and permanently delete your account, directly in the Application (Settings → Privacy).

3. Data processed and purposes

Tip: your nickname and username are visible to other players — prefer a nickname to your full name.

4. Guest mode

Guest mode creates an anonymous technical account, with no e-mail address. It lets you play and record matches; some social features (including "players around you") require a full account. A guest account can be converted into a full account at any time.

5. What we do not do

The Application displays no advertising, sets no advertising trackers and embeds no third-party analytics or ad-network SDK. The only third-party services embedded in the Application are OneSignal, used exclusively to deliver push notifications — which are relayed by the push services of Google (on Android) and Apple (on iOS) — and Expo, used to deliver the Application's updates. We never sell or rent your data. The Application processes no payment data.

6. Geolocation: approximate and optional

The "players around you" feature is off by default. When you enable it: your position is requested only while the Application is open (foreground), never in the background; the Application asks the system for the lowest accuracy available; and the server always rounds the received position to a grid of about 500 metres before storing anything — your exact position is never stored. You can stop being visible at any time, and the system permission can be revoked in your phone's settings. Your visibility is time-limited (15 minutes to 2 hours, as you choose): when it expires, the stored position is deleted automatically. This feature is reserved for players who are, or will turn, at least 16 during the current calendar year, based on their birth year (see section 13). Players who may still be under 18, based on their birth year, are only ever shown to their accepted friends in this feature, and only ever see their accepted friends — never strangers. Adults choose their visibility.

7. Push notifications

Push notifications (match invitations, friends' activity, progression, weekly digest of your friends' activity) are sent through OneSignal, acting as a processor, which relays them through the push service of your device's platform: Google (Firebase Cloud Messaging) on Android and Apple (Apple Push Notification service) on iOS. These services receive the device's push token and the notification content needed to deliver it. Notifications require your system permission and can be tuned category by category in the Application, or disabled entirely in your phone's settings.

8. Processors and hosting

The Service's data is hosted with Amazon Web Services; the database is operated by Neon. The Application downloads its own updates through Expo (Expo Application Services, operated by 650 Industries, Inc., United States); Expo's update server receives only the technical data needed to serve the update (application version, platform, an anonymous installation identifier, IP address) and no account data. We use the following processors:

9. Transfers outside the European Union

Some of these providers are US companies or may process data outside the European Union (in particular OneSignal, Google and Apple for push notifications, Expo for the Application's updates, Resend for e-mail — whose data is stored in the United States — and, for iPhone beta testers, Apple via TestFlight). These transfers are covered by appropriate safeguards within the meaning of the GDPR, such as the European Commission's standard contractual clauses or an applicable adequacy decision. You can contact us for more information about these safeguards.

10. Retention periods

Your account data is kept for as long as your account is active. If you request deletion, the account enters a pending-deletion state for a grace period of about one month (27 days by default), during which you can cancel by signing back in; once the period ends, the account's data is deleted or irreversibly anonymised. An account with no activity at all for 3 years receives a warning e-mail; if you still have not signed in 30 days later, the ordinary deletion procedure described above begins, with the same grace period, which signing in cancels. A guest account (with no e-mail address) that has not been used for 12 months is deleted.

Some technical data is purged automatically on short cycles by our storage-limitation engine (for example, offline-sync data is kept from 24 hours to a few days, and sync traces for at most 90 days). Scorecards of matches played with other players are kept after account deletion in anonymised form ("deleted player"), because they are also those other players' history.

Other periods: your data export file is deleted 7 days after it is prepared; the position shared through "players around you" is deleted as soon as your visibility expires (2 hours at most); session information (IP address, device) is kept while the session is valid (it expires after 30 days without use) and then purged; the presence signal is cleared within 48 hours; security logs (a record of sensitive actions such as a deletion or export request, with no profile data) are kept for 12 months and then deleted, except for the entries that serve as evidence — account deletion requests, requests to exercise data protection rights handled by our team, moderation decisions and security incidents — which are kept for 5 years and then deleted; beta waitlist sign-ups are kept until you withdraw your consent or delete your account, after which only a pseudonymised record of the consent is kept. If you signed in with Apple, TakaFG's access to your Apple ID is revoked with Apple when the account is erased.

Matches recorded offline stay on your device until they are synced to your account.

Feedback and user research: individual questionnaire responses and research feedback are retained only for as long as necessary for their analysis and for improving the Service. They may then be deleted or anonymised. Aggregated results and statistics that no longer allow a person to be identified may be retained in order to monitor the evolution of the Service and document its performance.

11. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability.

Directly in the Application (Settings → Privacy): you can request a full export of your data (once it is prepared, a personal download link valid for 7 days is sent to your e-mail address; the file can also be downloaded in the Application during that time) and request the permanent deletion of your account. Your profile information can be edited at any time.

For any other request: support@takafg.com. You may also lodge a complaint with the CNIL (www.cnil.fr).

How to delete your account, with or without the app →

12. Security

Traffic between the Application and the server is encrypted (HTTPS). Profile photos are stored in a private, non-public space and served through time-limited signed links. Access to production data is restricted. Data on your device is protected by the isolation mechanisms of iOS and Android; the security of the device itself (passcode, biometrics) is the user's responsibility.

13. Minors

The Application is a game for all audiences. Use of the online features (account, social features, geolocation) is reserved for people aged 15 and over, or under 15 with joint consent of the holders of parental responsibility, in accordance with Article 45 of the French Data Protection Act. The birth year we may ask for serves only as an age attestation; we never collect a full date of birth. The "players around you" feature applies a stricter rule: since only the birth year is known, it opens only from the calendar year of your 16th birthday — which guarantees the age-15 threshold whatever your birthday — and stays closed until a birth year is provided. In addition, players who may still be under 18, based on their birth year, are visible there only to their accepted friends and see only them, never strangers; adults choose their visibility.

14. Content sharing

Sharing features (match summaries, score cards) use your phone's share menu: you choose the recipient (WhatsApp, social networks…). Shared content is then governed by the terms of the receiving service.

15. Changes to this policy

Any substantial change will be notified in the Application before it takes effect, with the update date at the top of the document. This version (2.4, 10 October 2026) replaces version 2.3 of 25 September 2026. It sets the retention periods for security logs and the deletion of inactive accounts, adds the friends-only rule for under-18s in "players around you", and names the providers involved in push notifications and updates (Google, Apple, Expo).

16. Contact

For any question about this policy or your data: support@takafg.com — DUCLOTDEV, 1 Allée des Hêtres, 74600 Annecy, France.