ComTac is a professional tactical communication client. It is provided to organisations under contract and requires an operator account issued by ComTac or by your organisation. It is not a consumer product and collects no data for advertising or analytics purposes.
ComTac is provided by Mentors and Tacticians F.Z.E, a Free Zone Establishment registered in Ajman Free Zone, United Arab Emirates under licence 53654, with its registered address at B.C. 1307218, Ajman Free Zone C1 Building, Ajman, United Arab Emirates. That entity is the controller of the personal data described below. Full company details are on the company information page.
Account and operator profile. When your organisation enrols you as an operator, we store the operator profile information provided during onboarding, including contact details and organisational role. Authentication is handled by our backend provider (Supabase); it stores your email address, a cryptographic hash of your password (never the password itself), and standard session records (sign-in timestamps, IP address, device user-agent) for security purposes.
Hardware assignment. We maintain an inventory of ComTac radio hardware (device identifiers, radio MAC addresses, Bluetooth names) and which operator each device is assigned to, for provisioning, support, and incident response (for example, key rotation after a lost device).
Location data. With your permission, the app reads your device's GPS position in order to display it to other authorised operators of your deployment and to share it over your deployment's encrypted radio mesh network. Position data, messages, and map markers are exchanged within your deployment's radio network and relay infrastructure. Depending on your organisation's deployment configuration, this traffic may transit relay infrastructure operated by ComTac or by your organisation; in both cases it is encrypted in transit. ComTac does not collect position or message content into its central systems, does not use it for any purpose other than operating the service, and never shares it with third parties.
Messages. Text messages are exchanged encrypted between devices on your deployment's network and stored locally on the receiving devices. ComTac's central systems do not store your message content.
The app contains no advertising, no analytics SDKs, no crash-reporting telemetry, and no tracking of any kind. We do not sell or rent any data, and we do not share data with third parties except the infrastructure providers strictly necessary to operate the service (our database/authentication provider), acting on our instructions.
The app requests only the permissions needed to function: Bluetooth (to connect to your assigned ComTac radio node), Location (required by Android for Bluetooth scanning, and to share your position with your deployment when enabled), and optionally Camera (to scan QR codes during device pairing). Location sharing over the network is visible in-app and operates according to your deployment's configuration.
Operator profiles and hardware records are retained for the duration of your organisation's contract and deleted or anonymised when the contract ends, or earlier on request from your organisation. You may request access to, correction of, or deletion of your personal data at any time by contacting contact@comtac.xyz; where your data is managed under an organisational contract we may redirect the request to your organisation's administrator. Authentication session records are retained for security auditing and expire automatically.
Network traffic is encrypted (pre-shared-key encryption on the radio mesh; TLS on relay and backend connections). Access to backend data is restricted by row-level security and service-role separation. Operator access can be revoked immediately by your organisation's administrator.
ComTac is a professional tool provided to organisations and their authorised adult personnel. It is not directed at, and may not be used by, anyone under 18.
We will post any changes to this policy at this address and update the effective date above. Material changes will be communicated to contracting organisations directly.