1. Who is responsible for your information?
This Privacy Policy covers the TagTeam website and Android app operated by Juan Julyan in South Africa. TagTeam helps two connected parents coordinate their family information. The operator is the responsible party for the personal information it determines how and why to process.
- Operator
- Juan Julyan
- Trading name
- TagTeam
- Address
- Cape Town, South Africa
- juan@tagteam.co.za
Contact Juan Julyan at juan@tagteam.co.za with questions, access requests, corrections or deletion requests. This policy describes TagTeam Public 2.0.0. The public service uses new parent accounts and family records. It does not automatically import information from earlier private TagTeam installations.
2. Information TagTeam handles
- Parent accounts and family connections: names, email addresses, account identifiers, email-bound connection invitations, email verification and authentication records, accepted policy versions, trial dates and the relationship between the two connected accounts.
- Children and care: names, dates of birth, recurring morning and evening routines, events, dates, descriptions, uploaded event files and proposed or confirmed changes.
- Expenses: receipt images, amounts, expense categories and reasons, the uploading parent, dates, split ratios, payment due dates, payment notes and confirmation records. TagTeam records payment status; it does not move money between parents.
- Medical records and documents: child selections, medical categories, descriptions, dates, attachments, birth certificates, medical aid documents and other files you choose to upload.
- Activity and technical records: who added, amended, confirmed or requested deletion of a record, timestamps, device-side settings, queued changes and technical information necessary for security and service operation.
- Subscriptions: trial and paid-access dates, a hash of your normalised email to prevent repeat trials, checkout references, Payfast payment and subscription identifiers, amounts, payment status and cancellation records. An email hash is still treated as personal information. Payment details are entered at Payfast; TagTeam does not receive your full card number or banking password.
- Optional weather location: your last chosen approximate location, rounded before being saved on your phone and used to request a forecast. It is not part of the shared family record.
- Website and in-app enquiries: your name or account email, enquiry topic, message and consent to use those details to respond. The in-app form also uses your account identifier for access and abuse controls. Hosting and email providers may process IP addresses, browser information and delivery logs.
We do not need your banking password, full payment-card details, private messages unrelated to the app or a child’s identity number to answer an ordinary support enquiry. Please keep sensitive family information out of website and in-app support enquiries.
3. Children’s information and medical records
TagTeam accounts are intended for adults aged 18 or older. Children do not create accounts in the current app. A parent or guardian must have lawful authority to provide a child’s information and obtain any consent required from a competent person under POPIA. Health information also needs an applicable lawful basis for its processing.
Upload only information needed for shared care. Connecting another adult to a family gives that adult access to its shared records. Confirm their identity and authority before connecting. Tell us promptly if authority changes, sharing becomes inappropriate or a child’s information has been included without proper authority.
An in-app confirmation records a parent’s response to a proposal. It does not independently establish legal guardianship, verify consent for every use of the information or replace a medical professional’s assessment.
4. Why information is used
Information is used to provide accounts, connect the intended parents, synchronise family records, calculate expense shares, support confirmations, keep an activity history, show reminders, manage trials and subscriptions, prevent repeat-trial or payment abuse, answer enquiries and protect service integrity. Processing relies on the basis relevant to the activity, including providing the requested service, consent where required, legitimate interests where lawful, and legal obligations.
Receipt text recognition runs on the phone in the current Android app. You review the detected total before saving it. The receipt and saved details are then shared through your family’s connected service. TagTeam does not make automated legal, healthcare or parenting decisions about your family.
Weather is optional. TagTeam first asks for your consent, then asks Android for permission to obtain your approximate location while using the app. The last selected location is stored on your phone and sent through the TagTeam service to Open-Meteo for forecasts. It is not stored in family database tables or shared with your co-parent. TagTeam does not request precise or background location tracking. You can decline and continue using the other features, update the saved location when you travel, or remove it in Family and revoke Android permission.
5. Who can access information?
The other connected parent: family records, receipts, documents, events, medical proposals and relevant activity are shared between the two parent accounts. A confirmed medical deletion removes the record from normal views but may leave proposal history, attachments and audit information retained by the service.
Service providers: providers receive information needed for their role. The public service is designed to use the following providers:
| Provider | Purpose |
|---|---|
| Supabase | Parent authentication, family database records, access rules, trial eligibility and subscription metadata. Uploaded file contents are stored in Azure rather than Supabase Storage. |
| Microsoft Azure | The TagTeam API and private storage for receipts, documents, event files and medical attachments. File access is checked against the signed-in account and family. |
| Payfast | Payment checkout, authorised recurring subscription charges, payment confirmations and cancellation. Payment details are handled through Payfast. |
| Vercel | Website hosting, request handling and the contact endpoint. |
| Resend and the operator’s email provider | Delivering website and in-app support enquiries to juan@tagteam.co.za, authentication emails through the configured sender, and handling replies. |
| Open-Meteo | Forecasts for the approximate coordinates you choose to provide, requested through the TagTeam service, with normal network request data. |
| Cloudflare Turnstile, if enabled | Contact-form abuse prevention using a security challenge and related technical data. |
Authorised administrators may access information when necessary for support, maintenance, security or lawful requests. We do not sell family information or provide it to advertising networks. We may disclose information when required by law, to protect rights or respond to a security incident, with safeguards appropriate to the circumstances.
Some providers may process information outside South Africa. Where POPIA applies, international transfers must use an appropriate lawful basis and protections. Ask us about the providers and hosting arrangements for your connected service.
6. Storage, device access and security
TagTeam uses encrypted network connections, database access rules that restrict shared records to their family, and private Azure file storage. File upload and retrieval require the service to check the signed-in account, family, active access and associated record. Files do not use public download links. Sessions, cached records, receipts, documents and attachments are encrypted in account-specific app storage using Android Keystore-backed protection. The app blocks screenshots; camera and PDF processing may use short-lived private cache files. We do not describe TagTeam as end-to-end encrypted. Authorised service operators and processors can handle information for the purposes described above.
The Documents section uses your phone’s screen lock to unlock access. TagTeam does not receive your fingerprint or face template. Keep your phone locked, secure your account and install updates. Avoid sharing an unlocked phone or your sign-in credentials.
Documents, PDF reports and backups you explicitly download or export are ordinary unencrypted files outside the app’s protected storage. The other parent may also retain lawful copies. Removing a record or closing an account cannot automatically erase files already exported to another device, email account or backup.
No system is completely secure. If a security compromise affects personal information, we will assess it and provide notices to the Information Regulator and affected people as required by applicable law.
7. Keeping and deleting records
Active family information is retained while needed to provide the shared service. Confirmations, amendments, payment activity and deleted-record history may be needed to explain changes, resolve disputes or satisfy legal obligations. An in-app archive or deletion approval is different from a privacy erasure request. Trial-eligibility hashes and payment records may be retained where necessary to prevent abuse, reconcile payments and meet lawful record-keeping duties; they are not used to make family records public.
Our retention targets are to review resolved website enquiries for deletion after 12 months, and to complete approved closed-account deletion requests within 90 days. Backup copies may remain for up to 90 further days under the relevant provider’s backup cycle. These targets can be extended where a lawful retention obligation, dispute, security incident or another person’s rights require it.
Subscription expiry stops new server access for that account but does not automatically delete family records or copies already received on a device. The other parent’s own active account is unaffected. Account deletion and export requests are handled by contacting us; support remains available after access expires. We may need to verify your identity and consider the other parent’s and children’s rights before changing shared records. We will explain any information that must be retained and why. Download the records you lawfully need before removing the app or requesting account closure.
8. Your choices and rights
Subject to applicable law, you can request access, correction or deletion, object to certain processing, and withdraw consent for future consent-based processing. Some requests may affect our ability to provide the service. You can control Android notification permissions, decline or remove the saved weather location, and cancel subscription renewal in Family → Subscription. We may need reasonable identity verification and will explain any applicable limits.
Email juan@tagteam.co.za with “TagTeam privacy request” in the subject. You may also complain to South Africa’s Information Regulator. Contacting us first is helpful but is not a condition of that right.
9. Website cookies and marketing
This website does not include advertising trackers or optional analytics. Fonts and imagery are served with the website. Hosting and contact-form security services may use strictly necessary technical information or cookies. If optional tracking is introduced, this policy and the relevant consent controls must be updated first.
Submitting an enquiry is not a newsletter subscription. Your contact details will be used to respond to the enquiry, with further marketing only where there is an appropriate permission or other lawful basis.
10. Policy changes
We may update this policy as TagTeam changes. The effective date at the top identifies the current version. Material changes affecting how family information is handled will be communicated through an appropriate channel before they take effect where required.