Privacy Policy

The Data Controller is Minervie Tech Ltda, a Brazilian company, developer and operator of the Tattica Six application for iPhone and Apple Watch and of the website tatticasix.com.

For any privacy question reach out at info@tatticasix.com.

We process strictly what the app needs to run. No data "just in case".

a) GPS location

When you join a session, the app shares your live position with your squad. Position is forwarded by the server and redistributed only within your match room. Transmission stops automatically when you close the app or leave the session.

b) Microphone audio (push-to-talk)

The microphone is active only while you press and hold the PTT button. Audio is relayed in real time to your squad and is not recorded or stored on our servers — the transmission is ephemeral.

c) Motion data (Core Motion)

We use the device's motion sensors (Apple Core Motion) to detect whether you are stationary or in cover, downsample GPS and save battery. This data is processed entirely on your device and never reaches our servers.

d) Session and squad data

Match code, team color, callsign you choose, tactical markers you drop, in-game / eliminated state. Used to run the match and deleted when the session ends.

e) Device identifier

We generate a random session identifier needed to keep the connection alive between app, Apple Watch and server. It is not linked to Apple's IDFA nor to any advertising tooling.

f) Communications

If you email us we keep the content of your message to be able to answer and follow up on any related thread.

• Show your squad on the map in real time.
• Enable push-to-talk voice during a match.
• Sync app and Apple Watch.
• Optimize battery usage by adapting the GPS sampling rate.
• Manage the lifecycle of match rooms (create, join, leave).
• Respond to support requests.
• Comply with legal obligations (e.g. tax obligations on any future in-app purchases).

Legal bases under art. 6 GDPR (and art. 7 LGPD for users in Brazil):

• Performance of a contract (art. 6.1.b GDPR · art. 7.V LGPD): processing your location, PTT voice and session data is necessary to deliver the service you requested.
• Consent (art. 6.1.a GDPR · art. 7.I LGPD): access to location, microphone and motion data requires your explicit consent through iOS permission prompts. You can revoke it at any time in device settings.
• Legitimate interest (art. 6.1.f GDPR): for service security and abuse prevention (e.g. multi-accounting, spam).
• Legal obligation (art. 6.1.c GDPR · art. 7.II LGPD): where Italian, European or Brazilian law requires it.

• Your squad mates: position, markers and voice are visible and audible only to the other members of the room you are in. That is how the app works.
• Apple Inc.: as the software distributor (App Store) and provider of the iOS · watchOS platform. Apple's Privacy Policy applies.
• Vercel Inc. (hosting provider · EU region): processes data on our behalf as a Processor under art. 28 GDPR. See Vercel's Privacy Policy.
• Competent authorities: only when required by a court order or legal provision.

As of today we do not use third-party analytics SDKs, ad networks, or profiling tools. If that ever changes, this policy will be updated before they go live.

Our company is based in Brazil; our production servers are hosted in the European Union. Some data may be accessed by technical staff in Brazil for service operations purposes.

The European Commission has not issued a general adequacy decision for Brazil. We therefore rely on the Standard Contractual Clauses (SCC) adopted by the Commission in decision 2021/914, in addition to supplementary technical measures (encryption in transit and at rest).

For users in Brazil, hosting in the EU is an international transfer under arts. 33–36 LGPD, justified by performance of contract (art. 33.V LGPD) and covered by the same contractual safeguards.

• GPS location, PTT audio: never stored. Transmitted and forgotten.
• Session data (match code, markers, callsign): deleted within 24 hours after the session ends.
• Account: kept for as long as the account is active. Deleted within 30 days from a deletion request.
• Support emails: kept for 24 months from your last interaction, then deleted unless legally required.

As a data subject you can exercise the following rights at any time, free of charge (arts. 15–22 GDPR · arts. 17–22 LGPD):

• Access the data we hold about you.
• Rectification of inaccurate or incomplete data.
• Erasure ("right to be forgotten").
• Restriction of processing.
• Portability of your data in a structured, machine-readable format.
• Objection to processing.
• Withdraw consent at any time, without affecting the lawfulness of processing performed before the withdrawal.

To exercise any of these rights, write to info@tatticasix.com. We'll respond within 30 days.

If you believe the processing of your data infringes the law, you can lodge a complaint with the competent supervisory authority:

• Italy / EU · Garante per la Protezione dei Dati Personali
• Brazil · Autoridade Nacional de Proteção de Dados (ANPD)

• TLS encryption (HTTPS / WSS) for every connection between app and server.
• Data at rest is encrypted on our EU servers.
• System access is restricted to strictly necessary personnel, authenticated and audited.
• Periodic security audits of dependencies.

No system is invulnerable. In case of a breach that may pose a risk to your rights, we will notify you within 72 hours of discovery, as required by art. 34 GDPR.

Tattica Six is meant for airsoft players and restricted to people aged 14 or older. We do not knowingly collect data from anyone under 14. If you are a parent or guardian and believe your child has given us personal data, contact info@tatticasix.com and we will delete it immediately.

We may update this policy to reflect technical or legal changes. Substantial changes will be notified via email or in-app on launch before they become effective. The current version is always available at tatticasix.com/privacy.