Last updated November 13, 2026
WAA Teams is the team communication app for Windermere Athletic Academy ("WAA", "we"). This policy explains what the app collects and how it is used.
What we collect
- The name you choose to show your team (we ask for first name and last initial).
- Your email address and password. Passwords are stored only as a one-way hash; we cannot see them.
- The teams you belong to and your role (coach, player or parent).
- Messages and announcements you post, and any reports or blocks you make.
We do not collect phone numbers, home addresses, birthdates, location, contacts, photos, or health or injury information. The app has no advertising, no analytics or tracking tools, and we never sell or share your data for marketing.
Calendar and address search
If you turn on Add games to my Calendar, the app creates a “WAA Teams” calendar on your phone and keeps your teams’ games in it. It only reads and changes that one calendar, and none of your calendar data is sent to us. Turning the option off, or signing out, removes that calendar.
When a coach searches for an event location, the search text (for example, a gym name) is sent through our server to Photon, an OpenStreetMap-based address search run by komoot. No account or personal information is included.
Notifications
If you allow notifications, your phone gets a notification when you receive a direct message or when someone posts in your team’s chat or announcements. To deliver them, the sender’s name and the first part of the message pass through Expo’s push service and Apple (or Google). We store only an anonymous push token for your phone, and remove it when you sign out or delete your account. You can turn notifications off anytime in your phone’s Settings.
Booking sessions
When you book a lesson or session (on the web or in the app), we collect the name, email, optional phone number and notes you enter, and the time you chose. Academy staff use this only to run the session and contact you about it. The academy administrator gets a phone notification with your name, the session and the time. Paid sessions are paid through Stripe, which handles your card details; we never see or store your card number, only the amount and a Stripe reference. The web booking form may use Cloudflare Turnstile, which checks that a person (not a bot) is booking. To stop spam, the booking form also keeps a one-way fingerprint of your connection (not your IP address itself) for 24 hours. Bookings made in the app are deleted with your account; for web bookings, email us to have yours deleted.
How it is used
Only to run the app: signing you in, showing your posts to your team, and keeping the community safe (reviewing reports and removing content or accounts that break the Community Guidelines).
Who can see it
Only members of your teams can see your name, role and posts. Your email address is never shown to other users. Coaches can delete messages and review reports for their team.
Direct messages
Direct messages are only available between members of the same team: parents can message parents and coaches, players can message players and coaches, and coaches can message anyone on their team. To follow youth-sports safety (SafeSport) guidelines, direct messages between a player and an adult are visible to all coaches on that team and to the academy administrator, and the app shows a notice in those conversations. Player-to-player and parent-to-parent messages are private to the two people, unless one of them reports a message.
Where it is stored
Data is stored with Cloudflare (Workers and D1 database) in the United States and is encrypted in transit.
Keeping and deleting your data
We keep your information while your account exists. You can delete your account at any time in the app (My teams → Delete my account). This immediately and permanently deletes your account, team memberships, and the messages you posted. You can also email info@windermereathleticacademy.com to request deletion.
Children
Player accounts are for athletes 13 and older. Younger athletes are represented by a parent's account. If we learn that a child under 13 has an account without a parent's consent, we will delete it. Parents can contact us at any time about their child's information.
Changes and contact
If this policy changes we will update this page. Questions: info@windermereathleticacademy.com.