Legal

Privacy Policy

Last updated 2026-05-19

1. Who this applies to

This policy applies to anyone who uses our iOS app, Apple Watch app, macOS or Windows desktop app, web app at wandering.golf, or our Model Context Protocol (MCP) server. It covers data we collect through any of those surfaces.

2. Information we collect

2.1 Account information

• Email address, required to create an account. From OAuth (Google, Apple) or directly entered for email/password signup.
• Full name, provided by you or your OAuth provider. Used to address you in the app and on shared content.
• Handedness (left or right), to interpret shot data correctly.

2.2 Practice and shot data

• Launch monitor shots, every shot you import or capture: club, ball speed, club speed, smash factor, carry distance, total distance, launch angle, spin, offline, face-to-path, contact point, and other metrics your launch monitor reports.
• Sessions, date, location label, source (e.g., SkyTrak, TrackMan), and user-provided tags or notes.
• Your bag, clubs, brands, models, shaft and grip configurations, loft, lie, length.
• Annotations, shot notes, swing cues, and goals you write down.

2.3 On-course data

• GPS location during active rounds, used to compute distances to the green, log shot positions, and provide club recommendations. Collected only while a round is active and only with your permission. Stops when the round ends.
• Hole-by-hole scoring, score, putts, chips, bunkers, penalties, fairways hit, greens in regulation.
• Breadcrumbs. Periodic location samples during a round, used to reconstruct your walk path and improve shot-position accuracy.

2.4 Device and diagnostic data

• Device info, device model, OS version, app version, and (for on-course rounds) battery level and low-power-mode state at round start. Used to understand which device states correlate with sync issues or GPS quality problems.
• Crash and error reports. When the app crashes or hits an unexpected error, we capture a stack trace, the path that triggered it, and your user ID (so we can correlate the error to your account if you write in for support). No screen contents, no shot data, no GPS coordinates are included in these reports.
• Product analytics, which features you use, how often, and from which surface. Pseudonymized to your user ID. We use this to decide what to build next.

2.5 Information we do not collect

• We do not access your photos, contacts, or microphone.
• We do not collect health, fitness, or biometric data from HealthKit, Apple Watch workouts, or any equivalent. If we ever add features that need this, we will ask explicitly and update this policy.
• We do not record swing video today. If we add video capture in the future, this policy will be updated to describe how it is stored, processed, and deleted, and the relevant App Privacy disclosures will be updated in the App Store before the feature ships.
• We do not track you across apps or websites you do not own. We do not use the iOS advertising identifier (IDFA) or any equivalent.

3. How we use your information

• To run the product. Store your shots, compute your stats, sync between your devices, generate AI coaching responses based on your data.
• To improve the product. Diagnose bugs, identify slow code paths, understand which features are useful.
• To communicate with you. Account-related messages (password resets, security alerts), product updates if you opted in.
• To meet legal obligations. Respond to lawful requests, enforce our terms, prevent fraud.

We do not use your data to train third-party AI models. AI coaching responses are generated on demand by passing relevant slices of your data to an AI provider (currently Anthropic Claude). Those providers do not retain your data for training under our agreements with them.

4. Third-party processors

We use the following service providers to operate the product. They process your data on our behalf under data-processing agreements; they do not own it and cannot use it for their own purposes.

• Supabase (US), primary database, authentication, file storage. Holds your account, shots, sessions, rounds, and any future media.
• Google (US) and Apple (US), used only for "Sign in with Google" and "Sign in with Apple." They share your email and name with us when you sign in, nothing more.
• Sentry (US), crash and error reporting.
• Mixpanel (US), product analytics.
• Anthropic (US), AI inference for the post-round recap. We send the slices of your golf data needed to generate a recap. Anthropic does not retain that data or use it to train models, under our agreement and their API policy.
• Stripe (US), payment processing, when paid plans launch. We never see or store your card number; Stripe handles it directly under PCI-DSS.
• Vercel (US), web app hosting. Standard server logs (IP, user agent, request path) for the web app, retained briefly for security and debugging.

We may add new processors as the product grows. When we do, we will update this section and post a note in-app for material changes.

5. Sharing your data

We do not sell your data. We do not share your shot history, rounds, or coaching conversations with anyone, including club manufacturers, advertisers, data brokers, or golf associations. The only times we share data outside Wandering Golf and the processors listed above are:

• When you ask us to, for example, sharing a session link with your coach or exporting your data to a CSV file.
• When required by law, valid subpoenas, court orders, or other binding legal process. We will challenge requests we consider overbroad.
• In a corporate transaction, if Wandering Golf is sold or merged, your data would transfer to the acquiring entity, who would be bound by this policy or give you notice and a chance to delete.

6. Your rights and choices

Access and export

You can view your data inside the app at any time. You can request a full export of your data in machine-readable format by emailing hello@wandering.golf. An in-app export tool is in development.

Correction

You can correct your account info directly in app settings. For other data, email us.

Deletion

To delete your account, email hello@wandering.golf. We remove your account and associated data, your sessions, shots, rounds, clubs, and notes, within 30 days. This is permanent and cannot be reversed. A self-serve in-app deletion flow is in development.

Marketing communications

We do not send marketing emails today. If we ever do, every message will include an unsubscribe link.

Regional rights (GDPR, UK GDPR, CCPA)

If you are in the EU, UK, or California, you have additional rights under applicable law:

• Right to know what personal data we hold and how it is used
• Right to access, correct, and delete your data
• Right to data portability (machine-readable export)
• Right to object to or restrict certain processing
• Right to lodge a complaint with your local data protection authority
• For California residents: right to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising.

To exercise any of these rights, email hello@wandering.golf. We will respond within 30 days.

7. Data retention

We keep your account data for as long as your account is active. After account deletion, we remove your data within 30 days, with the following exceptions:

• Encrypted database backups, which roll off on a 30-day cycle; deletion propagates to backups within that window.
• Records we are legally required to retain (for example, tax or transaction records related to paid plans), which we keep only for the legally required period.

8. Children

Wandering Golf is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at hello@wandering.golf and we will remove the account.

9. Security

We use industry-standard security: HTTPS everywhere, encrypted database storage, row-level security so users can only access their own data, OAuth-based authentication, and short-lived session tokens. No system is perfectly secure; we will notify you and regulators as required by law if a breach affects your data.

10. International transfers

Wandering Golf is operated from the United States. If you are located outside the US, your data will be transferred to and processed in the US and other countries where our processors operate. We rely on standard contractual clauses and other lawful transfer mechanisms where applicable.

11. Changes to this policy

We will update this page when we change how we handle your data. Material changes will be announced in-app or via email at least 14 days before they take effect.

12. Contact

Wandering Golf, LLC
1111B S Governors Ave #80515
Dover, DE 19904
United States
hello@wandering.golf