Privacy Policy

This Privacy Policy explains how WalkupAI LLC, a Virginia limited liability company ("WalkUp AI," "we," "us," or "our"), collects, uses, and shares information when you use the WalkUp AI website at walkup.game and our web app (together, the "Service").

Contact: WalkupAI LLC, info@walkup.game.

The Service is intended for users in the United States and Canada. Account holders must be adults. Players on rosters are often minors; see Children and Minors below.

Application-layer encryption. Our servers encrypt the following fields with AES-256-GCM before they are stored in our database: player names, jersey numbers, and fielding positions on roster and game player records; game names, team names, and opponent names on game records; team names; season names; assembled voice intro script text; team chat message text; and your Apple Music user token. The encryption key is derived from a server-side secret and is not sent to the app on your device.

Data that is not encrypted at the application layer. Other information is stored without this extra field-level encryption. Examples include: your account email and display name; email send logs (recipient address, subject, and status); gift and team invite recipient emails; buyer email and subscription records; team chat sender and recipient names; player names that appear in team invites, in-app notifications (for example, "[player] is coming up to bat"), and some walk-up pack assignments; song selections; at-bat results and game stats; audio files such as voice intros, voice recordings, and songs; security audit logs; and analytics and funnel events.

All of this data is protected by access controls (row-level security rules and server-side ownership checks) and by HTTPS/TLS encryption in transit. Authorized WalkupAI LLC administrators can access account data when needed for support, security, billing, and operations. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

• • Account information: email address and display name (from Google sign-in or from you), optional profile picture, and your app settings. Passwords and sign-in sessions are handled by our hosting provider's authentication service.
• • Game details: game name, team name, and opponent name (encrypted), plus game date, score, inning, outs, base runners, lineup, per-game fielding assignments, and game settings.
• • Player information: player names, jersey numbers, and fielding positions (encrypted on roster and game player records; see the exceptions above), batting order, and claim status.
• • Song preferences: song titles, artists, Apple Music identifiers, start and stop times, and audio URLs.
• • Voice intros: assembled announcement scripts (encrypted) and the generated audio files.
• • Voice recordings: when you use the AI voice transform feature, your recording is uploaded to our file storage and sent to ElevenLabs (see Third-Party Services) to generate the transformed audio. The recording stays in our file storage with your voice intro, and in our backups, until it is deleted.
• • Team chat messages: direct and broadcast messages within Team+ teams, including message text (stored encrypted as described in How We Protect Your Data), sender and recipient names, and read status. Messages are stored by us and our hosting provider and are not sent to other third parties. A direct message is visible to its sender and recipient. A broadcast message is visible to its sender, the team owner, and the Player+ members on the team when it was sent. Authorized administrators can also access messages as described above.
• • Guardian-player links: when a parent claims a player via Player+, we store the parent's account identifier on the player record so they can manage that player's walk-up configuration. This link is not encrypted at the application layer.
• • Gift and invite recipient emails: when you gift a Player+ license or invite a parent to a team, we store the recipient's email address (and any player name you enter) to link the license or seat to their account once they register.
• • Subscription and payment information: your plan and tier (Pro, Player+, or Team+), license assignments, renewal and cancellation dates, amounts, buyer email, and payment processor identifiers (such as Stripe customer and subscription IDs). Card numbers are handled by Stripe, Apple, or Google and are not stored on our servers.
• • Apple Music connection: the Apple Music user token issued when you connect, stored encrypted (see Third-Party Services).
• • Game stats: at-bat results, runs batted in, and score snapshots you record.
• • Support and feedback: messages you send to our in-app support assistant, support tickets, and feature requests, along with your email address.
• • Roster import uploads: photos, pasted text, or spreadsheet files you upload to the AI Import Assistant. Uploaded files are stored in our file storage and sent to an AI model to extract player names and jersey numbers (see Third-Party Services).
• • Anonymous demo device identifier: the free demo stores a randomly generated ID (not derived from your device's hardware) in your browser's local storage and in a first-party cookie that lasts up to one year. We count how many free demo AI intros have been generated from that ID to prevent abuse. The counter record contains only the ID and counts. It is visible to our administrative team and is not used by us for advertising. Clearing your browser's site data removes the ID from your browser.
• • Email engagement data: see Email Tracking below.
• • Advertising and analytics data: see Advertising, Analytics & Your Choices below.
• • Security and audit logs: records of certain account actions, including your user ID, the action taken, and when it occurred.

• • We do not collect or store credit or debit card numbers. Payments are processed by Stripe.
• • We do not ask for home addresses, phone numbers, or dates of birth. (Payment processors may collect billing details under their own policies.)
• • We do not store your raw IP address in our application database. To estimate approximate location on marketing pages, your browser retrieves its public IP address from a third-party service (ipify) and sends it to our servers, which look it up with the IP geolocation provider ipinfo.io and keep only country, region, and city. Our hosting provider and this service may log IP addresses under their own policies. We do not send your IP address to advertising platforms.
• • We do not sell personal information for money. We do share limited data with advertising platforms to measure our ads, as described below. Some state privacy laws may treat that as a "sale" or "sharing" of personal information or as targeted advertising.
• • We do not intentionally send player names or roster data to advertising platforms, and we do not build advertising profiles from player data.

Advertising tag (Google). Our website and web app load the Google tag for Google Ads. The tag may set cookies and may collect page visits, conversion events such as sign-up and subscription purchase (including the purchase amount), ad click identifiers, device and browser information, and your IP address.

Reddit conversion reporting. When you sign up or create a demo intro, our server sends Reddit a conversion event that may include a SHA-256 hash of your email address (if you are signed in), your WalkUp AI account ID, your browser's user agent, the Reddit click ID, and the page URL. We do not send your IP address to Reddit. The hashed email is a pseudonymized identifier that lets Reddit match the event to a Reddit account. It is not anonymous.

Google enhanced conversions. Our site may provide the Google tag with a SHA-256 hash of your email address so Google can match conversions to Google accounts. Like the Reddit hash, this is a pseudonymized identifier, not anonymous data.

Reddit and Google receive this data to measure the performance of our ads and attribute sign-ups, demo creations, and purchases to our campaigns. They process it under their own terms and privacy policies, may use it for their own purposes, and we cannot control their downstream use. See Reddit's Privacy Policy and Google's Privacy Policy.

Our own analytics. We record product and acquisition events (for example, landing page views, demo starts, and sign-ups) with a browser session ID, UTM campaign parameters, and approximate location. When you are signed in, these events are linked to your account ID and email. Our hosting provider also collects page-view analytics about how the app is used.

Your choices. You can turn off ad measurement for your account at any time with the Ad Measurement toggle in the app under Settings, Data & Privacy. Turning it off stops the Google tag from loading and stops Reddit conversion events for your account and that browser. You can further limit these tools by blocking third-party cookies or using a content blocker in your browser, and by adjusting your ad settings with Reddit and Google. You can contact us at info@walkup.game with privacy questions or requests.

Some browsers can send a "Do Not Track" (DNT) signal or a Global Privacy Control (GPC) signal. The Service does not currently respond to DNT signals or to GPC signals. The advertising and analytics tools described above load whether or not your browser sends these signals; to turn off ad measurement, use the Ad Measurement toggle in Settings, Data & Privacy.

Your own player stats: When you record at-bat results during games, WalkUp AI stores those results alongside the walk-up songs you selected for each player. This data is used to show your own team's performance trends, such as how individual players perform after different walk-up songs, after you have played multiple games. It is visible to you; to people you give access, such as a delegated game-day operator, the Player+ guardian of a claimed player, and spectators of a game you share (see Spectator Join Code); and to authorized administrators. It is protected by row-level security and server-side ownership checks.

Aggregate song trends: To help all users discover popular walk-up music, WalkUp AI aggregates information about which songs are commonly selected and what start times are typically used on those songs. Only song titles, artists, and start-time offsets are aggregated. No player names, user identities, email addresses, team names, or individual game results are included in the aggregated results. This data is not sold or used for targeted advertising.

Aggregate song performance statistics: WalkUp AI also combines at-bat outcomes across users' games into aggregated totals per walk-up song (total plate appearances and combined on-base percentage). These totals do not include player names, user identities, email addresses, or team names. They are visible only to our administrative team for internal product analytics, are not surfaced to other users, and are not sold or used for targeted advertising. Users who opt out of aggregate song data collection via the Settings toggle are excluded from these combined statistics.

Opt out: You can opt out of aggregate song and start-time data collection at any time via the toggle in the app's Settings screen. Opting out does not affect your ability to use the Service, access your own player stats, or play music.

To understand which of our communications are helpful, emails sent by the Service are logged when sent, and, where included, use two standard measurement tools:

• • Open tracking pixel: a tiny, invisible image embedded in HTML emails. When your email client loads images, the pixel records that the email was opened. Many email clients block images by default, so open counts are approximate.
• • Tracked links: links in our emails point to our own redirect, which counts the click and then takes you to the intended page. We record the click count, time, and destination link.

What we store: your email address, the email type and subject, send status, and open and click counts with timestamps. We do not use email engagement data to track you across other websites or apps, and we do not share it with advertising platforms. Emails are sent through our hosting provider, which processes this data on our behalf. To opt out of non-essential emails (tips and tricks, release notes, feature announcements, and referral offers), use the unsubscribe link at the bottom of any such email or manage your preferences in the app under Settings, Notifications. Essential account and subscription emails (receipts, verification, and billing notices) are still sent.

WalkUp AI is designed for teams of any age level, from youth leagues to adult rec leagues, social leagues, and college clubs. All account holders must be adults; the app does not ask minors to create accounts or provide information themselves. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us directly, contact us so we can delete it.

• • Who enters player information. Player names, jersey numbers, and positions are entered by the account holder (a coach, manager, or parent). A coach or manager who enters, imports, or uploads information about players who are not their own children must have the permission of each player's parent or guardian.
• • AI audio generation. When you generate an AI voice intro or song, the script or prompt, which may include a player's name and jersey number, is sent to ElevenLabs to produce the audio. Roster photos, text, and files you import are sent to an AI model to extract names and numbers.
• • Voice transform recordings. If a recording you submit for voice transformation is of a minor, you must be that minor's parent or guardian or have their parent's or guardian's consent. The recording is sent to ElevenLabs and stored as described in What We Collect.
• • Spectators. If you share a game, spectators can see player names and numbers as described in Spectator Join Code below.
• • Parent requests. A parent or guardian who wants a player's information reviewed or deleted can contact the team's coach or email us at info@walkup.game.

Games are private by default. A 6-character join code is created only when the account holder turns on sharing for a game, and only the account holder can turn sharing on or off. Spectators must sign in to a WalkUp AI account to join, and when a signed-in spectator joins, the account holder receives an in-app notification with the spectator's name.

What spectators can see: the game name, team and opponent names, the batting order with player names and jersey numbers, the live score, inning, outs, and base runners, and at-bat results recorded for that game. To support the live view, the data sent to a spectator's device may also include players' fielding positions and assigned walk-up song details and voice intro audio links. Spectators cannot edit player information or manage music.

How long a code stays active: a code works only while sharing is turned on, the game is not deleted, and the game is not finished — or, if it is finished, it stops working about 24 hours after the game ends. Turning sharing off immediately stops the code from being looked up and stops live score updates and data loads for spectators. Deleted games are permanently removed 30 days after deletion. Share join codes only with people you intend to see this information.

Team join codes work similarly: a coach can create a code that lets Player+ parents find the team by name and request to join.

WalkUp AI uses the following service providers and integrations. Each has its own privacy policy.

• • Base44 (hosting provider): hosts our app, database, file storage, sign-in, and email sending, provides page-view analytics, and provides the AI model access we use for roster import and our in-app assistants. It processes the data described in this policy on our behalf.
• • Google Drive (backups): daily backups of our database and audio files are stored in a Google Drive account controlled by WalkupAI LLC.
• • Apple Music (MusicKit): when you connect Apple Music, Apple shows you a consent screen and, if you approve, issues a Music User Token that lets WalkUp AI make requests to Apple Music on your behalf, such as catalog searches and playback. We store that token on our servers, encrypted with AES-256-GCM, so the app can reconnect, and we delete it when you disconnect Apple Music in the app. Apple receives your requests and information about your use of Apple Music under Apple's Privacy Policy. We do not receive your Apple ID password or payment details.
• • ElevenLabs: generates AI voice announcements, songs, and sound effects. Script text, song prompts, and sound effect descriptions, which may contain player names and numbers, are sent to ElevenLabs; known profanity is filtered first. For AI voice transforms, your voice recording is also sent to ElevenLabs. ElevenLabs processes and may retain this content under its own terms; we have not enabled a zero-retention setting. See ElevenLabs' Prohibited Use Policy and Privacy Policy.
• • AI roster parsing: roster photos, pasted text, and files are processed by a large language model accessed through our hosting provider (Base44) to extract names and jersey numbers. The underlying model provider is selected by Base44. We have not confirmed contractual guarantees about how long that provider retains the content or whether it may be used to train models, so please upload only what is needed to build your roster. The resulting player records are encrypted as described above.
• • In-app AI assistants: messages you send to our support assistant and other in-app AI assistants, along with related account or team information needed to answer, are processed by AI models accessed through Base44.
• • Stripe: processes all payments for subscriptions and credit packs. We receive subscription status, amounts, buyer email, and Stripe identifiers; card details are handled by Stripe.
• • Reddit and Google Ads: advertising measurement, as described in Advertising, Analytics & Your Choices. WalkUp AI is not affiliated with or endorsed by these companies.
• • ipify and ipinfo.io: IP address lookup used to estimate approximate location on marketing pages.
• • Google Sign-In: if you choose Continue with Google, Google shares your name and email address with us to create or sign in to your account.

Paid subscribers can enable Offline Readiness Mode, which downloads a copy of your roster, games, AI voice intros, and Studio songs to your device's browser storage so the Game Time Console can keep playing that content without an internet connection. This cached copy is stored locally on your device; the cached copy itself is not sent back to us or to third parties. Streaming songs (Apple Music) are not cached and still require a live connection. Because browser storage is managed by your device's operating system and browser, WalkUp AI cannot guarantee cached content will persist; your browser may evict stored data under storage pressure, especially on iOS. You can clear the cached content at any time from Settings.

Your data is retained for as long as you have an active account, subject to the options below.

You can manage your data at any time by deleting individual games, players, or roster entries from within the app, or by using the account options in Settings.

• • The specific fields listed in How We Protect Your Data are encrypted with AES-256-GCM at the application layer before storage. Other data is not encrypted at the application layer.
• • The encryption key is derived from a server-side secret and is not transmitted to or stored on your device.
• • Communication between the app and our servers uses HTTPS/TLS encryption in transit.
• • Access to data is restricted by row-level security rules and server-side ownership checks. Authorized administrators and our service providers can access data as needed to operate the Service.

If WalkupAI LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its business or assets, information we hold may be transferred as part of that transaction. Any transferred information will remain subject to this Privacy Policy, or to a policy that is at least as protective, unless you are notified otherwise and given any choices required by law.

We may disclose information if we believe in good faith that doing so is required by law, subpoena, court order, or other legal process, or is necessary to protect the rights, property, or safety of WalkupAI LLC, our users, players, or the public, including to prevent fraud or abuse and to enforce our Terms of Service.

Canada's Anti-Spam Legislation (CASL): We only send commercial electronic messages (tips and tricks emails, release notes, feature announcements, and referral offers) to Canadian users who have expressly opted in via Settings, Notifications. Creating an account is not consent. Every commercial email we send includes an unsubscribe link; account-service emails (receipts, verification, billing notices, and game reminders you have enabled) are transactional and unaffected by marketing preferences.

PIPEDA: We collect personal information for the purposes identified in this policy. Canadian users can review and change their email and privacy choices in Settings, and may request access to, correction of, or deletion of their personal data by contacting info@walkup.game. We respond to such requests within 30 days. Information about younger players on a team (names, jersey numbers, and positions) is entered by adult account holders, not collected directly from children, and is protected as described in How We Protect Your Data. Personal information may be stored and processed in the United States by us and our service providers.

This Privacy Policy is maintained by WalkupAI LLC. You may request access to, correction of, or deletion of your personal data. To make a request or ask questions about this policy, contact us at info@walkup.game. We will respond to your request within 30 days.

We may update this Privacy Policy from time to time. We will post the updated policy here with a new "Last updated" date and will notify you through the app or by email of material changes.