Effective 2026-08-25
This policy explains what information the Wake Devils app collects, how it's used, and who it's shared with. Wake Devils is a wakeboarding club (~300 members); this app is used only by club members and admins, not the general public.
Account: your email address and password (used only to sign you in — see "Third Parties" below for how these are stored).
Profile: your full name, and optionally a profile photo.
Content you post: chat messages (direct messages and group chats), comments on club announcements, and any reports you file about other content or members.
Bookings: which boat sessions you reserve a seat on, and the status of your payment for paid sessions.
Terms acceptance: a record that you agreed to the Club's Terms & Conditions/Liability Waiver, which version, and when.
Push notification token: if you enable push notifications, we store a device token (provided by Apple/Google via Expo's push service) so we can deliver them. This is optional — you can decline notification permission or turn any category off in the app, at any time.
We do not collect your location. We do not use any analytics or crash-reporting service — no usage tracking SDK of any kind is included in this app.
To run the app's core features: showing you announcements and messages you're part of, letting you book and pay for boat sessions, and showing admins what they need to run the club (rosters, reports, moderation).
To send you push notifications you've opted into (new messages, new announcements).
To enforce the Club's rules: reviewing reports, and letting admins remove content or suspend a member for violating the Terms & Conditions.
We do not sell your information, and we do not use it for advertising.
Card payments for boat sessions are handled entirely by Stripe, our payment processor — your card details are entered directly into Stripe's own secure payment screen and never pass through Wake Devils' app or servers. We only ever see Stripe's confirmation that a payment succeeded (or failed), never your card number.
Supabase — our backend provider, which hosts our database, handles sign-in, and stores uploaded photos. Supabase processes this data on our behalf and doesn't use it for its own purposes.
Stripe — processes boat-session payments, as described above.
Expo — relays push notifications to Apple/Google on our behalf, if you've enabled them.
We don't share your information with anyone else, and we don't sell it.
Your name is visible to other signed-in club members. Direct messages are visible only to the people in that conversation; group chat messages are visible only to that group's members. Announcements and comments are visible to members (some announcements are restricted to certain member roles). Reports you file, and any admin-only group rosters, are visible only to club admins.
Profile pictures and any photos attached to announcements are stored in a way that means anyone with the direct image link can view them, even without being signed in — the app itself only shows them to people who could otherwise see that content, but the underlying image file isn't individually access-locked. Don't upload a photo you wouldn't want viewable by someone who obtained a direct link to it.
We keep your information for as long as your account is active. If you delete a message, comment, or your profile picture yourself, that content is actually removed, not just hidden.
You can permanently delete your account at any time from Profile → Delete account. This immediately and permanently removes your account and everything tied to it — profile, messages, comments, posts, bookings, blocks, reports, and notification preferences — and cannot be undone. You can also email us (see Contact, below) to request deletion instead.
Wake Devils membership requires current enrollment as a college student, so we don't knowingly collect information from children under 13.
We rely on Supabase's infrastructure and access controls (Row Level Security policies enforced on every request) to keep your data separated from other members' — for example, another member can't read your direct messages even by trying to query for them directly. No system is perfectly secure, but access to your data is deliberately restricted at the database level, not just hidden by the app's screens.
You can turn push notifications on/off, and toggle individual notification categories, at any time from your profile. You can block another member to stop seeing their messages. You can delete your account yourself at any time from Profile → Delete account, or request deletion by contacting us (see above).
If this policy changes in a meaningful way, we'll update the version date at the top. Continuing to use the app after a change means you accept the updated policy.
Questions about this policy, or requests about your data (including account deletion): asuwakedevils@gmail.com