This Privacy Policy explains how TikiTaka (“we”, “us”, “our”) collects, uses, stores, and protects the personal information of users of the TikiTaka mobile application, with particular care given to the protection of minors aged 8 to 16.
We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the Online Safety Act 2021 (Cth).
By registering on TikiTaka, the parent or legal guardian of the minor (“Authorised Guardian”) consents to the practices described in this policy.
1. WHO WE ARE
TikiTaka is a sports challenge platform designed exclusively for players aged 8 to 16. Coaches evaluate video submissions and provide technical feedback to help players improve their football skills.
Privacy Officer Contact
2. WHAT INFORMATION WE COLLECT
We only collect information that is reasonably necessary to provide our service (APP 3).
2.1 Information about the Authorised Guardian
| Data | Purpose |
|---|---|
| Full name | Identity verification and parental consent |
| Email address | Account communication and notifications |
| Mobile phone number | Two-factor verification |
| Identity document details | Verifying the Authorised Guardian's identity |
2.2 Information about the Minor (Player)
| Data | Purpose |
|---|---|
| Username (alias only, not real name) | In-app identification |
| Age | Confirming eligibility (8–16 years) |
| State or territory of residence | Compliance with local regulations |
| Sports performance data | Progress tracking, scores, badges, challenge stats |
| In-app activity history | Service improvement and technical support |
2.3 Challenge Videos
Challenge Videos are treated as a special category of data due to the audiovisual nature of the content and the involvement of minors. See Section 4 for full details.
2.4 Technical and device data
| Data | Purpose |
|---|---|
| IP address | Security and fraud prevention |
| Device type and operating system | App compatibility and performance |
| App usage data (errors, load times) | Bug fixing and service improvement |
All technical data is collected in anonymised form and cannot be linked back to an individual user.
3. HOW WE USE YOUR INFORMATION
We use personal information only for the purposes for which it was collected:
- To create and manage the Minor's Player account.
- To verify the identity and consent of the Authorised Guardian.
- To allow Coaches to evaluate Challenge Videos and provide feedback.
- To track the Minor's sports progress within the platform.
- To communicate with the Authorised Guardian about account activity, updates, and policy changes.
- To comply with our legal obligations under Australian law.
- To investigate complaints or reports of inappropriate content.
4. CHALLENGE VIDEOS — SPECIAL PROTECTIONS
Challenge Videos receive the highest level of protection we apply to any data on the platform.
4.1 Access
Only the following parties may access a Challenge Video:
- The Coach assigned to that specific challenge, solely to provide a technical rating and feedback.
- TikiTaka technical staff in cases of critical operational support, under a fully audited access protocol.
- Competent Australian authorities where a valid legal order has been issued.
No other person, system, or organisation may access Challenge Videos under any circumstances.
4.2 Deletion timeline
| Event | Action |
|---|---|
| Coach submits rating and Player views feedback | Video deleted immediately |
| 7 business days after rating (if Player has not viewed) | Video deleted automatically |
Deletion is permanent and irreversible. Videos are removed from all servers, backups, and caches.
4.3 What we will never do with videos
- Retain them beyond the deletion timeline above.
- Share, license, or sell them to any third party.
- Use them for advertising, research, or public relations.
- Use them to train artificial intelligence or machine learning models.
- Publish them on social media or any other platform.
6. HOW LONG WE KEEP YOUR INFORMATION
| Data type | Retention period |
|---|---|
| Authorised Guardian account data | While the account is active + 12 months |
| Minor's profile and performance data | While the account is active + 12 months |
| Challenge Videos | Deleted within 7 business days of Coach rating (see Section 4.2) |
| Parental consent records | Duration of account + 7 years (legal obligation) |
| Technical and anonymised usage data | Up to 24 months, then permanently deleted |
| Data breach incident records | 7 years (regulatory requirement) |
When an account is closed or deleted at the request of the Authorised Guardian, all associated personal information is deleted within 30 calendar days, except where retention is required by Australian law.
7. CHILDREN'S PRIVACY
TikiTaka is built specifically for minors aged 8 to 16. Every aspect of our data practices is designed with children's safety as the primary consideration:
- No Player account can be created without verifiable parental consent from an Authorised Guardian.
- Minors cannot agree to these policies on their own — consent must come from the Authorised Guardian.
- We collect the minimum data necessary to provide the service.
- We do not display advertising to minors.
- We do not allow direct contact between Coaches and Minors outside the platform.
- All Coaches must hold a valid Working with Children Check (WWC Check) issued by their Australian state or territory.
9. INTERNATIONAL DATA TRANSFERS (APP 8)
TikiTaka's primary server infrastructure is located in Australia.
Where we engage overseas service providers (for example, for cloud infrastructure or email delivery), we ensure that:
- The provider applies data protection standards substantially equivalent to the Australian APPs.
- A data processing agreement with appropriate contractual safeguards is in place.
- Challenge Videos are never stored on or transferred to servers outside Australia.
Where we cannot guarantee equivalent protection in a destination country, we will obtain the Authorised Guardian's express consent before any transfer takes place, in accordance with APP 8.2(b).
10. YOUR RIGHTS OVER PERSONAL INFORMATION
The Authorised Guardian has the following rights under APPs 12 and 13 regarding the Minor's personal information held by TikiTaka.
10.1 Right of access
You may request a copy of the personal information we hold about the Minor at any time. We will respond within 30 calendar days (extendable by 14 days with prior notice in exceptional cases).
10.2 Right of correction
If any information we hold is inaccurate, incomplete, or out of date, you may request that we correct it. We will take reasonable steps to do so within 30 calendar days.
10.3 Right of deletion
You may request that we delete the Minor's account and all associated personal information. We will complete deletion within 30 calendar days, except where retention is required by law.
10.4 Right to withdraw consent
You may withdraw your consent for us to process the Minor's personal information at any time by requesting account deletion. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
10.5 How to exercise your rights: Send a written request to privacy@tikitakachallenge.com from the email address registered on your account, including a copy of your identity document. We will acknowledge your request within 5 business days.
11. HOW WE PROTECT YOUR INFORMATION (APP 11)
We implement the following technical and organisational security measures:
- Encryption in transit: TLS 1.3 or higher for all data transmitted between the app and our servers.
- Encryption at rest: AES-256 for all stored data.
- Access controls: Role-based permissions with mandatory multi-factor authentication for all Coach accounts.
- Minimum access policy: No TikiTaka employee may access Challenge Videos except under a documented, audited protocol with a specific operational justification.
- Independent security audits: Conducted periodically by third-party security specialists.
- Staff training: All TikiTaka staff complete mandatory data protection training before handling any personal information.
12. DATA BREACH NOTIFICATION (NDB Scheme)
In the event of an eligible data breach under the Notifiable Data Breaches (NDB) scheme (Part IIIC, Privacy Act 1988), we will:
- Notify the OAIC within 30 days of becoming aware of the breach, using the prescribed notification form.
- Directly notify all affected Authorised Guardians as quickly as possible, in plain language.
- Include in our notification:
- A description of the breach and how it occurred.
- The types of personal information affected.
- Steps we have taken to contain and remediate the breach.
- Recommended steps for affected individuals to protect themselves.
13. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law.
For material changes, we will:
- Notify the Authorised Guardian by email at least 30 days before the change takes effect.
- Display a prominent notice in the app.
- Where required, ask for renewed consent before continuing to process personal information.
The version number and date at the top of this document will always reflect the current version. Previous versions are available on request by emailing privacy@tikitakachallenge.com.
14. COMPLAINTS
14.1 Contact TikiTaka first
If you have a concern about how we have handled your personal information, please contact us first:
We take all privacy complaints seriously and will investigate thoroughly.
14.2 Escalate to the OAIC
If you are not satisfied with our response, or if 30 days pass without a resolution, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
14.3 Report harmful content to the eSafety Commissioner
To report online content that is harmful to or involves minors:
15. CONTACT US
For any questions about this Privacy Policy or our data practices:
Privacy Officer — TikiTaka
© 2026 TikiTaka. All rights reserved.