TikiTaka App

2.2 Mandatory and verifiable parental authorisation

In accordance with the APPs and the OAIC's guidance on children's privacy, the express and verifiable consent of an Authorised Guardian is required to create a Player account. The verification process includes:

• Prior registration of the Authorised Guardian with a valid identity document (passport, driver's licence or equivalent accepted in Australia).
• Email confirmation with a two-factor activation link.
• Digital signature of the parental consent declaration, stored in accordance with APP 11.
• Where reasonable doubt exists regarding the identity or capacity of the applicant, TikiTaka may request additional documentation before activating the account.

2.3 Responsibilities of the Authorised Guardian

By completing the verification process, the Authorised Guardian:

• Accepts these Terms and Conditions and TikiTaka's Privacy Policy on behalf of the Minor.
• Takes responsibility for actively supervising the Minor's use of the Platform.
• Undertakes to notify TikiTaka immediately of any change in circumstances affecting the consent given.
• Warrants that all registration information provided is true, accurate, and complete.
• Acknowledges that the Minor's account may be suspended if consent is revoked or was obtained through false information.

5.1 Appropriate video content

Challenge Videos must meet the following requirements:

• Focus exclusively and directly on performing the specified sports challenge.
• The Player must wear appropriate, neutral sportswear.
• Recording in open sports spaces (courts, parks, yards) with adequate natural lighting is recommended.

5.2 Information that must NOT appear in videos

For the Minor's safety, videos must NOT show:

• The interior of private rooms in the home.
• School uniforms, ID cards, or any item identifying the Minor's school.
• Identity documents, vehicle plates, or other elements that reveal the exact location or real identity of the Player or others present.
• Private conversations, contact details, or personal information of other people.
• Symbols, clothing, or expressions of violent, discriminatory, or offensive content.

5.4 Sanctions

The following conduct will result in the measures indicated:

6.1 Coach verification process

• Identity verification with an official Australian document.
• Submission and verification of a valid Working with Children Check (WWC Check) issued by the competent authority of the relevant Australian state or territory.
• Statutory declaration of no criminal history related to minors.
• Mandatory training in child safety policies and responsible Platform use before the Coach role is activated.

6.2 Coach obligations

Every authorised Coach on TikiTaka undertakes to:

• Limit their activity on the Platform strictly to the technical evaluation of assigned challenges.
• Not attempt to contact Players or their families outside the Platform's official channels.
• Not download, copy, share, or locally store Challenge Videos.
• Immediately report to TikiTaka any content suggesting a situation of risk for the Minor.
• Keep their WWC Check current and notify TikiTaka of any change in their legal status.

6.3 Sanctions for Coaches

Failure to comply with the obligations set out in section 6.2 will result in immediate suspension of Platform access, possible notification to relevant Australian regulatory authorities, and, where applicable, referral for WWC Check revocation through available legal mechanisms.

8.1 Security measures (APP 11)

TikiTaka implements reasonable technical and organisational measures to protect the Minor's personal information, including:

• Encryption of data in transit (TLS 1.3 or higher) and at rest (AES-256).
• Role-based access controls with multi-factor authentication for Coach access.
• Periodic security audits conducted by independent third parties.
• Minimum necessary access policy: no TikiTaka employee accesses Challenge Videos except under a documented and auditable protocol.
• Mandatory data protection training for all TikiTaka staff.

8.2 Data breach notification (NDB Scheme)

In the event of an eligible data breach under the NDB scheme (Part IIIC, Privacy Act 1988), TikiTaka will:

• Notify the OAIC within 30 days of detecting the breach, using the prescribed form.
• Directly notify affected Authorised Guardians as quickly as possible and in plain language.
• Include in the notification: a description of the breach, the types of information affected, measures taken, and recommendations to mitigate risk.

11.1 Service warranties

TikiTaka provides its service “as is” and makes reasonable efforts to maintain the availability and correct functioning of the Platform, but does not guarantee uninterrupted, error-free, or completely secure availability.

11.2 Exclusions of liability

To the extent permitted by applicable Australian law, TikiTaka is not liable for:

• Indirect, incidental, special, punitive, or consequential damages arising from use of the Platform.
• Physical injuries to the Minor occurring during the performance of sports challenges.
• Loss or damage to data caused by factors outside TikiTaka's reasonable control (force majeure, third-party infrastructure failures, third-party cyber-attacks).

11.3 Authorised Guardian's responsibility for injuries

The Authorised Guardian acknowledges that sports activities carry inherent physical risks and accepts responsibility for ensuring the Minor performs challenges in safe conditions, in appropriate environments, and with suitable clothing and equipment. TikiTaka recommends consulting a medical professional before the Minor undertakes any sports activity if there is any doubt about their physical fitness.

14.2 Internal complaints process

If the Authorised Guardian has a complaint regarding the handling of personal information or the Minor's safety on the Platform, they should first submit it to TikiTaka's Privacy Officer. TikiTaka undertakes to investigate the complaint and issue a reasoned decision within 30 calendar days.