Privacy Policy
Last updated: July 14, 2026
1. What we collect
- Account info: name, email, password hash, business name.
- Coach page content: logos, photos, bios, services, availability.
- Family info: parent name/email, athlete first name, age or grade, position.
- Booking data: sessions booked, cancellations, refunds.
- Payment data: processed by PayPal. We store non-sensitive references (PayPal order and capture IDs). We never see or store card numbers.
- Usage & device data: IP, browser, pages viewed, error logs.
2. How we use it
To operate the Service: run coach pages, process bookings and payments, send transactional email (confirmations, reminders, receipts, password resets), prevent fraud and abuse, and improve the product. We do not sell personal data.
3. Who we share it with
- The Coach you book with: Families' contact info and booking details are shared with the Coach so they can deliver the session.
- Service providers: PayPal (session payments), Paddle (coach subscription billing), our email delivery provider, and our hosting/database provider — each under contracts that require them to protect your data.
- Legal: when required by law or to protect users.
4. Children
Whistl accounts are held by adults. Parents/guardians create athlete profiles for minors and provide only the info needed to book (first name, age or grade, position). We do not knowingly collect data directly from children under 13.
5. Text messages (SMS)
If you opt in, Whistl sends transactional text messages related to your sessions: booking confirmations, session reminders, cancellation notices, payment confirmations, and schedule change alerts. You opt in by creating an account and providing your mobile number during signup or booking, by checking the consent box on our SMS sign-up page, or by texting START to our number.
We do not sell, rent, or share mobile phone numbers or SMS consent with third parties or affiliates for marketing or promotional purposes. Mobile numbers are shared only with our SMS delivery provider solely to transmit the messages you requested. No mobile information is shared with third parties for their own marketing.
Message frequency varies based on your booking activity (typically about 2–8 messages per month). Message and data rates may apply. Reply STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT at any time to opt out of text messages; reply START, UNSTOP, or YES to opt back in; reply HELP or INFO for help. Opting out of SMS does not affect email notifications or your account. Carriers are not liable for delayed or undelivered messages.
6. Your choices
- Edit or delete your profile from your dashboard.
- Unsubscribe from marketing via the link in any marketing email. Transactional emails (receipts, security, session reminders) will still be sent.
- Request account deletion by emailing support@joinwhistl.com.
7. Retention
We keep account and booking records for as long as your account is active, plus a reasonable period for legal, tax, and dispute purposes.
8. Security
We use encryption in transit, hashed passwords, and role-based access controls. No system is 100% secure — please use a strong, unique password.
9. International users
The Service is operated from the United States. By using it you consent to processing your data there.
10. Changes
We'll post updates here and, for material changes, notify you by email.
11. Contact
Privacy questions: support@joinwhistl.com.