WALKOUT IQ · PRIVACY
Your privacy.
Updated October 22, 2026
Walkout IQ is operated by Daniel Algattas for teams in the United States. This policy covers our website, iPhone, iPad, Android and companion watch apps, accounts, team invitations, pictures, song selections, announcements and related services. Contact daniel@walkoutiq.com with privacy questions or requests.
The information we use
Account information includes your name, email, password hash when password sign-in is used, verification status, account identifiers and sign-in records. We do not need your Apple Account password. A rostered player can be different from the person operating the account.
Team information includes names, jersey numbers, nicknames, pronunciation text, roster positions, permissions, parent/player connections, invitations and approval decisions. You or an authorized team administrator may provide this information.
Music information includes the searches needed to find songs, selected song identifiers and versions, clip timing, playlists and song-change requests. We process announcement text and generated voice audio. Connecting Apple Music does not by itself give us your entire listening history or library.
When you import music from Files on iPhone, Walkout IQ stores a private copy on that phone, scoped to your signed-in account and selected player or introduction. These imported files and their local timing choices are not uploaded to our server, shared with teammates, or included in the app’s device backup. Signing out removes the app’s imported copies; your original files are unchanged. Apple Music manages its own downloads separately.
Player pictures, playlist artwork and team logos are optional. We create display versions and remove embedded camera and location metadata. The application does not retain the upload original.
When you prepare Game Day, the iPhone stores an account-scoped copy of the lineup, song choices and announcement recordings. Current apps retain prepared access for an active team using the last verified account, device and team permissions, without a daily expiry. The app checks current access whenever it reconnects; access changes cannot reach a phone that remains offline. Older app versions may still require a daily access refresh until updated. Apple Music manages its own protected song downloads. We use announcement character counts and team entitlements to administer usage allowances, including when a team is archived.
We also process session and device labels, timestamps, notification delivery tokens, delivery status, security records and limited diagnostics. Hosting and delivery providers may process IP addresses and technical request information. Support includes information you choose to send us. If payments are enabled, we keep transaction references and plan status; payment providers handle card details.
Optional lineup photo reading
When an authorized administrator or DJ chooses Scan lineup and confirms Read lineup, we send their cropped photo to OpenAI to extract the visible batting order. Only share a lineup you are authorized to use. Photos can contain other people’s names and pictures, so crop out unnecessary information. We remove embedded camera and location metadata and do not store the photo in our application. OpenAI processes the image under its API data policy; API data is not used for model training by default, but abuse-monitoring retention may normally last up to 30 days, with policy exceptions. This is not a zero-retention service.
We match the extracted names and numbers against this team’s roster on our server. We do not send the separate roster, account emails, song choices or contact details to OpenAI. You review and correct the draft before saving; recognition does not add people or change permissions. An encrypted draft is retrievable for 15 minutes and scheduled for removal afterward. Request identifiers, keyed photo digests and usage counts are retained for up to 32 days for retry safety and cost control; keyed allowance totals are retained for up to 62 days. We do not log lineup images or extracted names as diagnostics. Ordinary infrastructure backups may retain earlier encrypted records under the backup retention policy.
Beta requests and website measurement
Adult team organizers can request beta access with an email address and an adult-organizer confirmation. We record the confirmation version and submission time to manage beta invitations and related beta-access emails. This does not create an account or subscribe you to a general newsletter. Request removal by emailing daniel@walkoutiq.com. Beta-interest records are scheduled for deletion after 180 days; resubmitting does not extend that period.
The public homepage counts page views, completed demonstrations and new beta requests in daily totals. These counts do not contain visitor identifiers, email addresses or browsing profiles, and we do not set analytics cookies. Security rate limits use keyed digests of connection identifiers. Hosting providers may separately process technical request logs. Aggregate homepage counts are scheduled for removal after 180 days.
Age and parent-managed players
Independent accounts are intended for people 13 and older. A parent or guardian should operate their own account for a younger player. We ask for the account holder’s birthdate before account entry. Visitors under 13 are directed to a parent or guardian before name, email or roster-entry fields are shown. A parent uses their own account and supplies information on the player’s behalf; a younger player must not operate the parent’s account. The application processes that date for the assessment, does not store a birthday in the account, and retains an eligible age band, assessment date and policy version. Temporary sessions help prevent immediate repeat attempts. We do not use a birthday to schedule an automatic account conversion. Someone who becomes eligible can complete a fresh check on a later visit. Parents aged 13–17 follow the same account check and administrator review; reaching age 18 is not treated as proof of parental authority. For child announcements, a confirmed adult parent or guardian can give permission directly. A verified adult team owner or administrator can instead confirm that they have the necessary permission from the listed people, or their parent/legal guardian where required. This does not establish a family relationship.
A team invitation, a parent declaration or an administrator’s approval is not proof of legally verified parental consent. Parents may ask to review, correct or delete their child’s information, or report an unauthorized account, by contacting daniel@walkoutiq.com. We verify identity and authority proportionately. If we learn of prohibited collection directly from a child, we restrict access and address the data under the applicable deletion or consent process.
Why we use information
We use information to provide and recover accounts, assess eligibility, review team access, maintain rosters and songs, apply team preferences, prepare announcements, deliver requested service notifications, administer enabled plans, provide support, diagnose failures and prevent abuse. We do not sell personal information or use player information for targeted advertising. Any optional marketing subscription is separate from service messages.
Who can see it
Team owners and administrators see the records needed to manage their team and review requests. Linked parents and players manage only their authorized player connections. Approved team members can see player labels, pictures and song choices made available by team features. Account email addresses and access-review details are restricted to authorized staff; the invitation flow does not provide a public directory.
Game Day can display or announce player names, numbers and songs to people nearby. Lock Screen and Live Activity content can be visible to someone near the device. Consider this when choosing player labels and pictures. Notification settings can be changed on your device.
Optional diagnostics and workflow measurement
Where available, Account → Privacy & diagnostics lets an eligible account holder choose technical diagnostics and, for adults, separate workflow measurement. Both choices start off. Technical reports contain a limited set of app/build and operating-system versions, error categories, request references, timings, playback connection type and success/failure stages. Workflow measurement helps us improve joining a team, saving a song and getting ready. These records are linked to your signed-in account in our service; we do not describe them as anonymous.
These reports exclude names, email addresses, birthdates, team/player identifiers, song titles and selections, search text, audio, photos, screen recordings, full request URLs and credentials. No advertising, session replay or cross-app tracking is added. A small, temporary buffer of recent technical events stays in the app or browser session, including when automatic sharing is off. You may explicitly share up to 20 events as a support report and receive a reference. Sending a support report does not enable automatic reporting or send an email.
You can change your choices at any time. Switching a choice off pauses optional sending on that device immediately; saving applies the change to your account and invalidates queued optional reports from other devices. Detailed reports in the live Walkout IQ database are scheduled for deletion after 30 days. Account deletion removes reports linked to that account. Cleanup may be delayed during an outage; provider records and backups follow their separate retention and deletion procedures. Essential account security and service-operation records are independent of these optional choices.
If our error-collection integration is enabled after its privacy review, Sentry receives a restricted copy of failure codes, app versions and timings to group technical issues. We omit account identifiers and user context from that copy and send it through our server, rather than a third-party app/browser recorder. Our operations monitor, when configured, checks public service health and worker completion; it does not receive rosters or account activity. Contact us to request the applicable provider-retention details or assistance deleting a report.
Services that help us operate
- Replit: application hosting, database records, private picture and announcement storage, and technical operations.
- Resend: recipient email, service-message content and delivery information.
- Apple: Apple Music and catalog/sample requests, device-side music authorization/playback, and push-notification delivery.
- Google: Android push notification delivery through Firebase Cloud Messaging, including a device registration token and necessary notification data.
- ElevenLabs: requested announcement text, potentially including player/team names, pronunciation and jersey numbers, and generated voice output.
- Payment providers, when enabled: checkout information, transaction references and subscription status.
Before personal details are sent to ElevenLabs, we record permission from the connected eligible player or confirmed adult parent/guardian, or an explicit confirmation by a verified adult owner/administrator that they have the necessary permission for the named roster and introductions. We record the person confirming, the notice version and time. Administrators cannot use this confirmation to override an explicit withdrawal. Manager permission can also come from the connected manager; team-name permission can come from team administration. Permission can be withdrawn from the announcement privacy screen. This recorded choice is not a claim that an age check or parent declaration alone satisfies legally verified parental consent. Generating an announcement does not require sending the voice provider your account password, player picture or contact list. The announcer is a generated voice, not a clone of a child’s voice. Providers process information needed for their services under their applicable terms and privacy practices. When you open another music service, its own policy applies. We may also disclose information as legally required, to address abuse or protect rights, or in a business transfer subject to applicable safeguards and notice.
How long information stays
We keep account and team information while providing the relevant service. Temporary age sessions expire after 24 hours and are removed by maintenance. Email sign-in codes expire after 10 minutes. Joining requests expire after 14 days without completion; declined, canceled and expired request details are scheduled for removal after 30 days. Private drafts on approved requests are cleared after 30 days. Delivered service-email queue records are scheduled for removal after 30 days.
Removed pictures become unavailable through the app promptly. Replaced or removed picture objects normally remain in private storage for at least seven days before cleanup; account-deletion media is prioritized. Physical removal can be delayed by provider failures or application inactivity. Failed cleanup remains queued. Server logs, provider-held information, database backups and manually created recovery exports have separate retention processes. A copy in a backup is not available through your deleted account. Contact us for the current status of a deletion request, including backup handling.
Archiving a team preserves its roster and songs in a read-only state. A team deletion request provides 30 days for its owner to restore it before server records are removed and private media cleanup is queued. Account deletion follows the separate account process below. Prepared audio and lists remain available for an active team without a daily expiry in current apps. Local copies are removed or access is disabled when a connected app learns of a withdrawal, team archive/deletion or access removal, or when you clear downloads or sign out. Signing out removes that account’s prepared files on that device. We cannot remotely erase a copy from a phone that remains offline.
We may retain narrowly necessary information for security, legal obligations or resolving a dispute. Deletion receipts contain the former account identifier and deletion time to support recovery handling. We do not retain information for advertising profiles.
Your choices and account deletion
You can edit your account details and authorized player choices, remove optional pictures, control notifications, and revoke Apple Music access through Apple’s controls. You do not have to enable music or notifications to maintain an account.
Use Account → Delete account in the app or website. We require a fresh email confirmation and explain the affected teams before deletion. Closing an owned team affects its other members; you may instead arrange ownership transfer with support before deleting. If an enabled paid subscription needs cancellation, we explain and process the relevant billing step.
Deleting an account ends its sign-ins, removes account information and requests, and disconnects its player links. Attribution to the deleted account is cleared. Shared roster entries, song choices and other parents’ connections remain available to their authorized team; deleting a parent’s sign-in does not delete their child’s team record. A separate request to remove a child’s roster entry, picture or announcement is handled according to applicable rights; team preferences do not override those rights.
You may contact daniel@walkoutiq.com to request access, correction, a copy or deletion of information, withdraw applicable consent, or raise a privacy concern. We verify requests using only what is necessary and respond within applicable legal periods. We do not penalize people for exercising their rights.
Security and policy updates
We use encrypted connections, access checks, password hashing and private storage to protect information. No service can guarantee complete security. Report suspected unauthorized access to daniel@walkoutiq.com. We publish policy changes here and provide additional notice or seek consent where required.