Privacy & Data

Your data is yours. We export it on request, we soft-delete instead of hard-delete (so accidents are recoverable), and we don't share with third parties.

What we collect

  • Practice data: launch monitor CSV imports and the per-shot metrics extracted from them.
  • Round data: sessions, shots, hole scores, GPS breadcrumbs, course information.
  • Account data: email, name, handedness, subscription status. Authentication via Supabase (email, Google, or Apple Sign In).
  • AI agent runs: the inputs and outputs of every post-round recap call (text, model, cost, latency). We use this internally for cost tracking and quality auditing. None of it is shared externally.
  • Anonymous usage telemetry via Mixpanel and error reporting via Sentry. Standard product analytics.

How we use it

  • To run the product (your data powers your analytics, your AI coach, your handicap).
  • To debug crashes and performance issues (Sentry).
  • To understand what features people use (Mixpanel, anonymous, no per-shot data).
  • To improve the AI coach prompts (using internal agent_runs, never your data identifiably).

We do not sell or rent your data. We do not use it for advertising. There is no advertising in the product.

How deletion actually works

When you delete a round in the iOS app, the round disappears from your view and stops counting toward your handicap, recent practice stats, and any other user-facing aggregates. It's a soft delete: we mark the row as deleted and stop showing it to you, but we don't immediately purge the underlying data.

This is intentional, for two reasons:

  • Recoverability. Accidents happen. A future Trash / Restore UI will let you bring back deleted rounds for a window of ~30 days. After that window we still don't show them to you, but the underlying data sticks around for a while.
  • Internal metrics. Cost tracking on the AI coach calls and prompt-quality audits need to keep working even after you delete a round. Deleting a round shouldn't make the inference cost we already paid disappear from our books.

If you want a true permanent deletion (e.g. for a GDPR-style data deletion request), email hello@wandering.golf and we'll handle it manually. We don't expose hard-delete in the app, by design.

Exporting your data

We commit to keeping your data exportable in standard formats. Today, all your launch monitor sessions are stored alongside the original CSV files (you can re-download them from the import view). On-course rounds and shot data are available via the MCP server in JSON; an in-app "export everything" feature is on the roadmap.

You can also use the MCP server to extract any subset of your data via your own AI tools, in any format you want.

Where the data lives

All persistent data is stored in Supabase (Postgres, Auth, Storage). Hosted in the U.S. AI inference goes through Anthropic for the post-round recap. Anthropic's standard API policy is that calls are not used for model training; we don't opt into anything that would change that.

Related