Privacy policy

West Michigan Armored Combat runs a members-only web app at wmac.club for club business: training events and RSVPs, the club armory and loans, the member roster, and training progression. Access is by invitation from a club admin. This policy explains what the app stores about you and how it is used.

• Sign-in details. Your email address, and if you sign in with Google, the name, email address, and profile picture that Google shares with us. We request only the email and profile scopes.
• Profile. The display name you choose, and optionally a phone number, a Messenger handle, and a photo.
• Private details you choose to add. Emergency contact name and phone, and body measurements used for armor fitting. Measurements stay private unless you choose to share them with the club, so the quartermaster can find loaner kit that fits.
• Club activity. Event RSVPs, armory loans, the curriculum lessons you tick off, and an activity log of changes made in the app. Comments you post on a trusted armorer are shown to other members with your name and the time. Admins may keep notes about members.
• Dues. Whether you pay dues by the month or for each practice, and the payments the treasurer records for you: the amount, the date, and whether you paid in cash, by Venmo or another way. You pay the treasurer in person, and the app only records it.
• Rehab plans. If you start a rehab plan, we store the shoulder, elbow or wrist that hurts, your answers to the screening questions, the plan you are on, and every session you log, including the exercises you tick and your pain ratings. This is health information. You can delete a plan, and every session on it, whenever you like.
• Technical data. A session cookie that keeps you signed in, and standard server logs (such as IP address and browser type) kept briefly by our hosting providers.

We use this information only to run the club app: to sign you in, show the roster and events to members, manage armory loans, track training, run your rehab plans, and reach you or your emergency contact when needed. We do not sell your information, use it for advertising, or share it outside the club except with the service providers below.

When you sign in with Google we receive your name, email address, and profile picture. We use them to create and identify your member account and for nothing else. We do not access any other Google data. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Other club members can see your display name, photo and roles, your phone number and Messenger handle if you add them, your event RSVPs, the kit you have borrowed, the lessons you have ticked off, and your measurements if you choose to share them. Emergency contact details are visible only to you, coaches, captains and admins, so they can act in an emergency. Notes admins keep about members are visible only to admins. The treasurer keeps a record of dues payments, and only the treasurer and admins can see it. Your rehab plans are visible only to you. Other members, coaches, captains and admins cannot see them in the app, and the admin export leaves them out. The developer of the app has admin access so they can build and support it, and the roster shows them as Dev. Nobody outside the club can see member data.

The app runs on Vercel (hosting) and Supabase (database, sign-in, and photo storage), both in the United States. They process data on our behalf under their own privacy terms and do not use it for their own purposes.

We keep your information while you are a club member. When you leave, an admin can deactivate your account, and you can ask us to delete your profile and private details by emailing matthewtibbit@googlemail.com. Loan history may be kept in anonymised form for club records.

The app sets only the cookies needed to keep you signed in. There are no advertising or tracking cookies.

The app is for club members and is not directed at children under 13.

If this policy changes we will update this page and the effective date above. Questions go to matthewtibbit@googlemail.com.