# WYG Privacy Policy — School Pilot Draft

**Status:** Public-policy draft; attorney review required  
**Updated:** August 23, 2026  
**Contact:** wygplaybookapp@gmail.com

WYG is a football playbook learning and assessment service for authorized teams. This policy explains the information WYG handles, why it is used, who may receive it, how long it is kept, and how a school, parent, eligible student, or user may exercise rights.

## Information WYG handles

- **Roster and account:** display name or roster identifier, team-scoped username, protected sign-in credential, role, position, optional jersey number, and optional email.
- **School and team:** program name, season, staff and privacy contacts, roster, invitations, playbooks, formations, assignments, and private source files.
- **Testing:** assigned tests, route drawings, answers, scores, completion, timestamps, test/play versions, drawing-review notes, and coach decisions.
- **Security and support:** sessions, failed sign-ins, recovery events, general device class, audit records, support messages, and incident evidence.

WYG does not require athlete email. The pilot is not designed to collect student health, disability, biometric, precise-location, financial, government-identifier, or unrelated academic records.

## Sources

Information comes from authorized school staff, athletes using assigned accounts, and technical events created while the Service operates. Parents and schools may provide information when making a verified privacy request.

## Educational purposes

WYG uses information to enroll authorized users; deliver coach-approved football instruction; administer and grade tests; reveal full concepts after answers; report team readiness; support disputed-drawing review; protect accounts and data; provide support; create school-requested exports; fulfill deletion, legal, and contractual duties; and maintain the Service.

## Uses WYG prohibits

WYG does not sell or rent student information, serve targeted advertising, use student information to create an unrelated commercial profile, require unnecessary athlete information, or use student data to train a general-purpose artificial-intelligence model. Student information is not used for an unrelated commercial purpose.

## Schools and control

For a school-authorized pilot, the School controls the educational purpose and may direct WYG's use and maintenance of education records. Authorized School staff control invitations, roles, access, playbooks, tests, retention settings, exports, and deletion requests. WYG limits its processing and redisclosure to the authorized Service, approved providers, legal requirements, and School instructions.

## Children under 13

When WYG relies on School authorization for a child under 13, WYG limits collection and use to the School-benefit educational context. WYG provides the School notice of its practices, supports review and deletion, and permits the School to stop further use or collection. WYG remains responsible for COPPA duties that apply to WYG.

## Disclosure and service providers

WYG limits access to authorized members of the signed-in program. WYG uses service providers only as necessary to host, secure, maintain, and support the Service and contractually restricts their use. The current provider register is published in WYG's Subprocessor List. WYG may disclose information when legally required, to protect users or the Service, or during a controlled business transaction subject to applicable student-data protections.

## Retention and deletion

The School selects a retention window and may request export or deletion. The signed pilot schedule controls. WYG retains information only as needed for the educational service, security, legal, or contractual purposes and deletes or returns School Data after termination or School instruction. A limited legal hold may delay deletion; held records are access-restricted and deleted when the hold ends.

## Security

WYG uses program-scoped authorization, role controls, hashed credentials and tokens, revocable sessions and invitations, private file access, server-side grading keys, immutable testing evidence, and administrative audit events. No internet service can promise absolute security. Suspected incidents should be reported immediately to wygplaybookapp@gmail.com.

## Access, correction, export, and deletion

Schools, parents, and students may have rights under contract or law. Parent and student requests should ordinarily go to the School so it can verify identity, authority, and School recordkeeping duties. WYG will cooperate with authorized School requests to review, correct, export, restrict, or delete data. Authorized coaches can export program records; program owners can open a reviewed deletion request.

## Changes and contact

WYG will provide notice before materially expanding student-data collection or use. Emergency security changes may be made immediately and documented. Questions, complaints, or requests may be sent to wygplaybookapp@gmail.com or the School privacy contact shown in the WYG workspace.