Privacy Policy

Effective Date: April 12, 2026 Last Updated: April 12, 2026

WalkOn DJ ("we," "us," or "our") operates the WalkOn DJ mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our App.

By using WalkOn DJ, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Information You Provide Directly

Account Information. When you create an account, we collect your:

• Name
• Email address
• Password (stored in hashed form)

If you sign in with Google or Apple, we receive your name and email address as authorized by you through those services. We do not receive or store your Google or Apple account password.

Team Information. When you create or manage a team, we collect:

• Team name, sport, and season
• Team images/logos you upload

Player Roster Information. When you or a team administrator add players to a roster, the following information may be collected:

• Player name
• Pronunciation hint (phonetic spelling)
• Jersey number and position
• Player photo
• Batting/lineup order

Player roster data is typically entered by coaches, parents, or team administrators — not by the players themselves. Players on youth sports teams may be minors. See Section 7 (Children's Privacy) for details on how we handle minors' data.

Audio Content. We collect audio files you upload (walk-up songs) and text you provide for generating AI announcements, including:

• Song files uploaded from your device
• Announcement templates (e.g., "Now batting, number 7, [name]")
• Voice selection preferences

Access Requests. If you request access to manage a player's profile, we collect the relationship type you select (self, parent, or helper).

1.2 Information Collected Automatically

When you use the App, we automatically collect:

• Device Information: Device platform (iOS or Android)
• Push Notification Token: A device identifier used to deliver push notifications, collected only if you grant notification permission
• Session Data: IP address and user agent string, collected at login for security and session management
• Error and Diagnostic Data: When the App encounters an error or crash, we automatically collect diagnostic information including device type, operating system version, app version, error stack traces, and IP address. We may also collect anonymized screen recordings of app sessions to help diagnose issues; all text, images, and user input are automatically masked in these recordings to protect your privacy. See Section 3 for details on our error reporting provider.

1.3 Information We Do Not Collect

• We do not collect precise geolocation data
• We do not collect device advertising identifiers (IDFA/AAID)
• We do not use third-party advertising or cross-app tracking SDKs
• We do not track you across other apps or websites

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Create and manage your account, teams, rosters, and audio content
• Generate AI Announcements: Send player name, number, and position text to our text-to-speech provider to generate audio announcements (see Section 5)
• Deliver Notifications: Send push notifications about team activity (access requests, member joins, role changes) and in-app notifications
• Enable Music Features: Search the Apple Music catalog on your behalf when you search for walk-up songs
• Store and Deliver Audio: Host uploaded audio files and generated announcements for playback during games
• Manage Access: Process access requests and manage team roles and permissions
• Maintain Security: Detect and prevent unauthorized access using session data
• Improve the Service: Fix bugs and improve app performance using aggregated, non-identifying usage patterns

3. How We Share Your Information

We do not sell, rent, or trade your personal information.

We share information with the following categories of service providers, solely to operate the App:

| Service Provider | Data Shared | Purpose | |-----------------|-------------|---------| | ElevenLabs (AI text-to-speech) | Player name, number, position text from announcement templates | Generate audio announcements | | Apple Music (via server-side proxy) | Search terms you enter | Return song search results | | Expo / Apple Push Notification Service / Firebase Cloud Messaging | Push notification tokens; notification titles and content | Deliver push notifications to your device | | Cloudflare (R2 object storage) | Uploaded images and audio files | Store and deliver media content | | Neon (database hosting) | All account, team, player, and notification data | Database storage and retrieval | | Vercel (API hosting) | All API request/response data in transit | Host and serve the API | | Google / Apple (OAuth sign-in) | Authentication tokens during sign-in | Authenticate your identity | | Sentry (error monitoring) | Crash reports, error stack traces, device info (type, OS, app version), IP address, anonymized session replay screenshots | Identify and fix bugs, improve app stability |

Each service provider processes data only as necessary to perform its function and is bound by its own privacy and security commitments. Sentry processes data on our behalf as a data processor and does not sell or share your data. For more information, see Sentry's Privacy Policy. We require written assurances from service providers that process children's personal information that they will maintain the confidentiality, security, and integrity of such information and will not use it for any unauthorized purpose. We do not share data with service providers for advertising, profiling, or AI model training purposes.

Other Disclosures. We may disclose your information if required by law, legal process, or government request, or to protect the rights, safety, or property of WalkOn DJ, our users, or the public.

4. Apple Music Integration

WalkOn DJ integrates with Apple Music to let you search for and play walk-up songs. This integration works as follows:

• Search queries are sent from your device to our server, which proxies them to the Apple Music API. We do not store your search queries.
• Song playback via Apple Music requires your own Apple Music subscription and is subject to Apple Media Services Terms and Conditions.
• We do not download, cache, or store any Apple Music audio content. Full-track playback occurs through Apple's MusicKit framework on your device.
• Song metadata (title, artist, album art URL) is stored to display your song selections within the App.

5. AI-Generated Content (Text-to-Speech)

WalkOn DJ uses ElevenLabs, a third-party AI text-to-speech service, to generate player walk-up announcements.

What is sent to ElevenLabs:

• The rendered announcement text (e.g., "Now batting, number 7, John Smith")
• Your selected voice preference

What is NOT sent to ElevenLabs:

• Your account information, email, or any data beyond the announcement text and voice selection

The generated audio is returned to our servers and stored in our cloud storage for playback.

In-App Consent: Before generating your first AI announcement, the App will present a clear disclosure identifying ElevenLabs as the third-party AI provider and the specific data that will be shared (player name, number, and position). You must affirmatively consent to this data sharing before any data is transmitted to ElevenLabs. You may use all other App features without consenting to this third-party disclosure.

By using the announcement generation feature, you acknowledge that the text you provide will be processed by ElevenLabs in accordance with ElevenLabs' Privacy Policy.

AI Disclosure: Announcements generated through this feature are created using artificial intelligence. They are not recorded by a human voice.

6. Data Retention

We retain your data as follows:

| Data Type | Retention Period | |-----------|-----------------| | Account information | Until you delete your account | | Team and player data | Until the team is deleted or you delete your account | | Uploaded audio files | Until deleted by you or the team administrator, or upon account deletion | | AI-generated announcements | Until deleted by you or the team administrator, or upon account deletion | | Push notification tokens | Until you sign out, revoke permission, or delete your account | | Session data (IP, user agent) | Duration of active session; cleared on sign-out | | Push receipt tickets | Automatically deleted after 48 hours | | Notifications | Until manually dismissed or account deletion |

We do not retain data indefinitely. When you delete your account, we delete all associated personal data from our database and cloud storage. See Section 8 for details.

7. Children's Privacy

WalkOn DJ is a team management tool designed for use by coaches, parents, and team administrators. The App is not directed to children under 13, and children under 13 should not create accounts.

However, we recognize that player roster data entered by coaches and parents may include the names, photos, and other information of minors, including children under 13.

How We Handle Minors' Data

• Player data is entered by adults (coaches, parents, team administrators) — not by the players themselves
• We collect only what is necessary for the App's core functionality: player name, optional pronunciation hint, optional jersey number, optional position, and optional photo
• Player data is shared with ElevenLabs only when a team administrator or authorized user generates an AI announcement for that player (limited to the player's name, number, and position)
• Player data is visible only to team members with appropriate roles and permissions
• We do not use minors' data for advertising, profiling, or AI model training
• We do not knowingly collect data directly from children under 13
• Under applicable law, children's personal information is classified as sensitive personal information and receives heightened protection

Separate Consent for Third-Party Sharing

Parents may consent to the collection and use of their child's roster information (for team display, lineup, and game-day playback) without consenting to its disclosure to third-party AI services. If a parent or team administrator does not consent to third-party sharing, the player's information will still be stored for roster and lineup purposes, but AI-generated announcements (which require sending data to ElevenLabs) will not be available for that player. The App will present this choice before any player data is sent to a third-party service.

Parental Rights

If you are a parent or legal guardian and believe your child's personal information has been collected through WalkOn DJ (for example, as part of a team roster), you have the right to:

• Review the personal information associated with your child
• Request correction of inaccurate information
• Request deletion of your child's information
• Revoke consent for further collection or use

To exercise these rights, contact us at support@heaters.fm. We will respond within 30 days.

If we learn that we have collected personal information directly from a child under 13 without verifiable parental consent, we will delete that information promptly.

8. Account Deletion

You may delete your account at any time through the App (Settings > Delete Account) or by contacting us at support@heaters.fm.

When you delete your account, we will:

• Delete your account record and profile information (name, email)
• Delete your profile photo from cloud storage
• Remove you from all teams
• Delete all player data you created (where you are the sole administrator)
• Delete all audio files you uploaded from cloud storage
• Delete all AI-generated announcements associated with your players from cloud storage
• Delete your push notification tokens
• Delete your session and notification data
• Revoke your Sign in with Apple token (if applicable)
• Revoke your Google OAuth token (if applicable)

Team data shared with others: If you are a member of a team with other administrators, team data and player records you contributed may persist under the remaining administrators' control. Deleting your account removes your membership and personal data, but does not delete shared team content that other administrators also manage.

You may also request account deletion via a web form at https://heaters.fm/delete-account, which is accessible even after uninstalling the App.

Account deletion is typically completed within 7 days. Some data may be retained for up to 30 days in encrypted backups before being permanently purged.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

California Residents (CCPA/CPRA)

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising purposes. Because we do not engage in these activities, there is no need to submit an opt-out request. If our practices change, we will update this policy and provide an opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information: Children's personal information collected through team rosters is classified as sensitive personal information under CPRA. We use this data only as necessary to provide the App's core functionality.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Other U.S. State Privacy Laws

Residents of states with comprehensive privacy laws — including but not limited to Virginia, Colorado, Connecticut, Utah, Indiana, Iowa, Kentucky, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Delaware, Maryland, and Minnesota — have similar rights to access, correct, delete, and port their data. We will honor valid requests from residents of any state with applicable privacy legislation.

European Economic Area (GDPR)

If you are located in the EEA, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Our legal basis for processing is contract performance (providing the service you signed up for) and legitimate interests (security, service improvement).

To exercise any of these rights, contact us at support@heaters.fm. We will respond within 30 days (45 days if an extension is needed, with notice).

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data in transit is encrypted via HTTPS/TLS
• Passwords are hashed using industry-standard algorithms (never stored in plain text)
• Authentication tokens are stored in encrypted device storage (iOS Keychain / Android Keystore)
• Database access is restricted to authenticated API requests
• File storage uses signed URLs with time-limited access (presigned URLs expire after 4 hours)
• Push notification tokens are automatically cleaned up when devices are no longer registered

We maintain a written information security program that includes designated personnel responsible for data security, periodic risk assessments, and ongoing monitoring of safeguards, in compliance with the Children's Online Privacy Protection Rule.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Breach Notification. In the event of a security breach that results in unauthorized access to your personal information, we will notify affected users in accordance with applicable law. This may include notification by email, in-app notification, or prominent posting within the App. Where required by law, we will also notify relevant regulatory authorities within the applicable timeframe (e.g., 30 days under California law, 72 hours under GDPR). We will provide information about the nature of the breach, the types of data affected, and steps you can take to protect yourself.

11. Data Transfers

Your data is processed and stored using service providers located in the United States and other countries. By using the App, you consent to the transfer of your information to these locations. Our service providers maintain appropriate safeguards for data protection.

12. Third-Party Links and Services

The App may contain links to third-party services (e.g., Apple Music). We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy within the App
• Updating the "Last Updated" date at the top of this policy
• Sending a push notification for significant changes (if you have notifications enabled)

Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about your data, contact us at:

WalkOn DJ Email: support@heaters.fm

For COPPA-related inquiries (children's privacy), please include "Children's Privacy" in the subject line.