Privacy Policy

Effective date: June 4, 2026  ·  Last updated: September 24, 2026

1. Who We Are

WeYouth is a nonprofit organization dedicated to helping young people ages 12–24 build real connections and thrive. Our legal entity is Weyo, a 501(c)(3) nonprofit (EIN: 87-4828512), headquartered at 1010 N 500 E Suite 340, North Salt Lake, UT 84054.

This Privacy Policy applies to our website at weyouth.org, our online store, our coaching programs (including Mental Performance Connection Coaching, or MPCC), our therapy intake processes, and any other service that links to this policy.

2. Information We Collect

Information you give us directly

• Contact information: name, email address, phone number, and mailing address when you fill out a contact form, book an appointment, or enroll in a program.
• Consent and signature records: before an athlete joins MPCC, a parent or guardian completes a consent form through Dropbox Sign. The form collects the parent's name, email, and phone number, the parent's signature, and the athlete's name, email, and team or sport. Dropbox Sign also records technical details of the signing (such as IP address, browser, and time) to create a secure audit trail. We also use Dropbox Sign for NDAs and participation agreements.
• Learning platform information: athletes, coaches, and parents access lessons through our learning platform, LearnWorlds. We collect name, username, email, which lessons have been started and completed, and any answers typed into lesson exercises or reflection questions.
• Live session recordings: some coaching sessions take place over Google Meet. Certain sessions, such as captain check-ins and team sessions, may be video recorded when the participant (and, for a minor, their parent or guardian) has agreed to recording in the consent form. Recordings are used only internally, for athlete safety, coach training, and program improvement, and are not shared publicly.
• Payment information: purchases through our store are processed by Squarespace's payment processor. We do not store full credit card numbers.
• Therapy intake information: information shared during therapy onboarding, which may include health information (see Section 8).
• Feedback and survey responses: responses submitted through our feedback form or surveys we send.

Information collected automatically

• Usage data: pages visited, time on page, referral source, browser type, and device information.
• IP address and cookies: collected by our website host and the platforms we use, including the cookies LearnWorlds needs to keep users logged in. See Section 4.

Information we do not ask for

We do not collect Social Security numbers or government ID numbers. Our MPCC coaching program does not ask for dates of birth, grades, test scores, disability or IEP/504 information, or medical and health information. MPCC is an educational program, not therapy, and we encourage athletes not to share health information in lesson exercises.

3. How We Use Your Information

• Enroll participants and deliver coaching, therapy, and educational services
• Send program messages such as enrollment links, session reminders, and updates to athletes, parents, and coaches
• Support participant safety and train our coaches
• Process payments and send receipts
• Respond to inquiries and schedule appointments
• Improve our website, content, and services
• Measure program outcomes and prepare impact reports for donors and funders, using aggregated, de-identified data only
• Comply with legal obligations, including mandatory reporting of suspected child abuse or risk of harm

We do not sell your personal information. We do not use participant information for advertising, and we do not build profiles of athletes or families for any purpose other than delivering our programs.

4. Cookies and Tracking Technologies

• Squarespace analytics: our website platform collects visitor analytics such as page views, session duration, and device type.
• HubSpot: our website uses HubSpot's tracking script to understand how visitors use the site. HubSpot may set cookies in your browser. Learn more at legal.hubspot.com/privacy-policy.
• Google Analytics: we may use Google Analytics to understand site traffic. You can opt out at tools.google.com/dlpage/gaoptout.
• Learning platform: LearnWorlds uses cookies needed to run the platform and keep users signed in. We have not enabled advertising or marketing pixels (such as Meta Pixel) on our learning platform.

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

5. Third-Party Services We Use

We share information with service providers only as needed to operate our services. Each is required to protect the information, and none may sell it.

• Dropbox Sign: consent forms, participation agreements, and NDAs (sign.dropbox.com)
• Google Workspace: email (Gmail), secure document storage (Google Drive), live sessions (Google Meet), calendar, and an internal automation that sends enrollment links after consent is signed (workspace.google.com)
• LearnWorlds: online lessons for athletes, coaches, and parents (learnworlds.com)
• Squarespace: website hosting and online store (squarespace.com)
• Squarespace Payments / Stripe: payment processing
• Google Voice: phone communications
• HubSpot: website analytics and contact management

We may also share information with a participant's own coach, team, school, or parent as part of delivering the program (for example, general participation updates), when required by law, or with your permission. We do not share personal information with sponsors, donors, or anyone for marketing purposes. If we add or change a service provider that handles student information, we will update this list and notify our partner schools.

6. Schools and School Districts

When WeYouth provides services under an agreement with a school or district:

• We act as a "school official" under the Family Educational Rights and Privacy Act (FERPA). Student data remains the property of, and under the control of, the school or district.
• We use student data only to deliver the program described in that agreement.
• We comply with the Utah Student Data Protection Act (Utah Code 53E-9) and the Utah Student Data Privacy Agreement we sign with each district.
• Parental consent: the school decides whether its own annual notice to families covers our program or whether our consent form should be used, and we follow its direction. For club teams and programs we run directly, a parent or guardian signs our consent form before an athlete's account is created.
• If a parent contacts us about their child's records from a school program, we will refer them to the school, which handles those requests under FERPA.
• We delete student data within 60 days of a school's written request, or when our agreement ends.
• We notify the school within 72 hours of confirming any data breach involving its students' data.

7. AI-Assisted Features

Some lessons in our learning platform use AI-assisted features, such as automated feedback on a written answer. When a lesson uses one, it is clearly labeled. These features are used only to support learning, are never used for advertising, and are not used to make decisions about a participant.

8. Children's Privacy (COPPA)

• We do not create an account for, or collect personal information from, a child under 13 without verifiable parental consent, given through our consent form or through the child's school.
• Parents and guardians may review, correct, or delete their child's information, or stop further collection, at any time by contacting info@weyouth.org.
• If we learn we have collected information from a child under 13 without consent, we will promptly delete it.

9. Health Information and Therapy Services (HIPAA)

WeYouth offers therapy services provided by licensed clinicians. Health information collected as part of therapy may be Protected Health Information (PHI) under HIPAA. Therapy clients receive a separate Notice of Privacy Practices (NPP), which governs their health information and takes precedence over this policy.

Coaching services (such as MPCC and Connection Coaching) are not therapy and are not governed by HIPAA. We still treat all information shared in coaching with the same care and confidentiality.

10. Data Retention

• Consent forms and learning platform accounts: reviewed at the end of each program season and deleted when no longer needed, or sooner on request.
• School and district student data: handled according to our agreement with that school, including deletion within 60 days of a written request or when the agreement ends.
• Other contact and enrollment records: kept for the duration of the service relationship plus 3 years.
• Therapy and clinical records: kept as required by Utah law and HIPAA (generally 7 years for adults; longer for minors).
• Payment records: kept as required by tax and accounting rules (typically 7 years).
• Website analytics: kept per each platform's default settings.

When data is no longer needed, we securely delete or de-identify it.

11. Your Rights

• Access: request a copy of the information we hold about you or your child.
• Correction: ask us to fix inaccurate or incomplete information.
• Deletion: ask us to delete your information, subject to legal retention requirements.
• Withdraw consent: withdraw consent for your child's participation at any time.
• Opt out of emails: use the unsubscribe link in any email, or contact us.
• Portability: request your data in a portable format where feasible.

Contact info@weyouth.org to make a request. We respond within 30 days. For school or district programs, requests about student records go through the school (see Section 6).

Utah residents: the Utah Consumer Privacy Act may provide additional rights. Contact us at the address below to submit a request.

12. Data Security

We use encrypted connections (HTTPS), limit access to team members who need it, require each person to use their own account, and require staff and coaches who handle participant information to sign a confidentiality agreement. We review our privacy and security practices each year and keep a written data breach response plan. No system is 100% secure. If you believe your information has been compromised, please contact us immediately.

13. Links to Other Websites

Our website may link to third-party sites. We are not responsible for their privacy practices and encourage you to review their policies.

14. Changes to This Policy

When we make material changes, we will update the "Last updated" date above. If a change affects partner schools, we will notify them directly.

Questions About This Policy?

WeYouth (Weyo)
1010 N 500 E Suite 340
North Salt Lake, UT 84054
info@weyouth.org
(414) 939-6884

WeYouth is operated by Weyo, a registered 501(c)(3) nonprofit organization, EIN 87-4828512.

WeYouth Alexa Skill

The WeYouth Alexa Skill is informational only and does not collect, store, or share any personal information. It does not require an account, store voice recordings, display advertising, allow purchases, or target children under 13. All responses are static information about WeYouth, such as our mission, programs, and contact details. Amazon's own privacy practices govern how Alexa processes voice data; see amazon.com/privacy.