Privacy & Data

What we collect

• Practice data: launch monitor CSV imports and the per-shot metrics extracted from them.
• Round data: sessions, shots, hole scores, GPS breadcrumbs, course information.
• Account data: email, name, handedness, subscription status. Authentication via Supabase (email, Google, or Apple Sign In).
• AI agent runs: the inputs and outputs of AI feature calls, e.g. scorecard photo import (text, model, cost, latency). We use this internally for cost tracking and quality auditing. None of it is shared externally.
• Anonymous usage telemetry via Mixpanel and error reporting via Sentry. Standard product analytics.

How we use it

• To run the product (your data powers your analytics, your AI coach, your handicap).
• To debug crashes and performance issues (Sentry).
• To understand what features people use (Mixpanel, anonymous, no per-shot data).
• To improve the AI coach prompts (using internal agent_runs, never your data identifiably).

We do not sell or rent your data. We do not use it for advertising. There is no advertising in the product.

Deleting a round

When you delete a round in the iOS app, the round disappears from your view and stops counting toward your handicap, recent practice stats, and any other user-facing aggregates. It's a soft delete: we mark the row as deleted and stop showing it to you, but we don't immediately purge the underlying data.

This is intentional, for two reasons:

• Recoverability. Accidents happen. A future Trash / Restore UI will let you bring back deleted rounds for a window of ~30 days. After that window we still don't show them to you, but the underlying data sticks around for a while.
• Internal metrics. Cost tracking on the AI coach calls and prompt-quality audits need to keep working even after you delete a round. Deleting a round shouldn't make the inference cost we already paid disappear from our books.

Deleting your account

Deleting your account is a different thing, and it is permanent. Open Profile on the web or in the iOS app, choose Delete account, and type DELETE to confirm.

• 30 day grace window. Nothing is removed on the day you ask. Every screen tells you the date, and signing in before it offers you the account back in one click.
• Then it is a real delete. Profile, sessions, shots, rounds, hole scores, GPS breadcrumbs, clubs, notes, goals, swing clips, the original files you imported, and your sign-in are deleted outright. The soft delete on rounds above only applies while the account exists; account deletion takes those rows too.
• Course edits stay. Corrections you made to the shared course catalog remain, with your name removed from them. They describe a golf course, not you.

Export your data first if you want a copy, and cancel a paid plan yourself if you want billing to stop before the 30 days are up (otherwise it is cancelled at deletion). If you would rather we ran the deletion for you, email hello@wandering.golf.

Exporting your data

We commit to keeping your data exportable in standard formats. Open Profile and choose Export all data: one zip with every table as JSON and CSV (sessions, shots, rounds, hole scores, GPS breadcrumbs, clubs, notes, swing cues, goals) plus the original launch monitor files you imported. Column names carry their units, timestamps are UTC, and a README in the archive explains how the files relate.

You can also use the MCP server to extract any subset of your data via your own AI tools, in any format you want.

Where the data lives

All persistent data is stored in Supabase (Postgres, Auth, Storage). Hosted in the U.S. AI inference goes through Anthropic for AI features like scorecard photo import. Anthropic's standard API policy is that calls are not used for model training; we don't opt into anything that would change that.