Privacy Policy

CaddieLoop ("we", "our", "us") operates the CaddieLoop mobile application and website (caddieloop.ai). This policy describes how we collect, use, and protect your information.

Information We Collect

• Account information: Email address, name, and profile photo when you create an account or sign in with Google or Apple. You may optionally add a bio and home course to your profile.
• Golf data: Scores, hole-by-hole statistics, handicap index, club and equipment details, course information, weather conditions, and practice session logs you enter while using the app.
• Social data: Friend connections, league memberships, match participation, comments, reactions, and challenge entries.
• Play data: When you play CaddieLoop's 3D golf game, we store the shots you take (your aim, club and swing inputs) and the scores, statistics, results and challenge entries they produce: in solo rounds, in matches against friends, in Quick Match against other players, and in the Daily and Weekly challenges. To pair players and show a match live, we also keep short-lived records of your Quick Match search and of your connection to a match in progress.
• Subscription data: Your subscription plan, status, and expiration date. Payment details (credit card numbers, bank accounts) are handled entirely by Apple (App Store) and are never accessed or stored by us.
• Usage data: AI coaching call counts and swing analysis counts, used to enforce usage limits for free and Pro tiers.
• Camera and media: When you upload swing videos for AI analysis, we access your device's photo library. Frames are extracted on your device and sent to our AI provider for analysis; the raw video itself is never transmitted or stored. After analysis we retain a small thumbnail of your address position (one downscaled still image, ~20KB) and skeleton-overlay images that mark your pose at each swing position. Skeleton-overlay images automatically expire after 180 days. The thumbnail persists alongside your swing analysis text until you delete the swing entry or your account. Profile photos are stored securely.
• Contacts: If you choose to find friends by scanning contacts, we temporarily access your device's contact list (emails and phone numbers) to match against existing CaddieLoop users. Contact data is used for this one-time lookup and is not stored.
• Location: We access your precise location (GPS) when you use the Range Finder feature to calculate distances on the course. Course coordinates are stored with your round records. Location data is not tracked outside of active app use.
• Device identifiers: We collect your device's push notification token to deliver notifications such as friend requests, league updates, and match invitations. A device identifier derived from this token is stored with your account.
• Microphone and speech recognition: When you use the Voice Caddie feature (pre-shot questions on the hole map) or the voice input button in chat, we access your device microphone and use Apple's Speech Recognition framework to transcribe what you say. Apple may process the audio on your device or on Apple's servers to produce the transcript; only the resulting text is sent to CaddieLoop's servers to generate a response. CaddieLoop never receives or stores your raw audio. You may deny microphone or speech-recognition permission at any time without affecting other app features.
• Feedback and reports: If you submit feedback, course requests, or user reports, we store the content you provide along with your account identifier.
• Referral data: If you participate in our referral program, we store your referral code and track referral credits earned.
• Diagnostics: When the app crashes or runs slowly it sends us a report (what failed, how long things took, and your device type) linked to your account. We keep these reports for up to 180 days and use them only to find and fix problems in the app. Deleting your account deletes them.
• Apple Health and motion (Apple Watch): On Apple Watch, CaddieLoop can record your round as a Golf workout in Apple Health, and reads your heart rate, active energy and distance for that workout so you can see your effort on the watch. It reads wrist motion to detect your swings. Your heart rate, active energy, distance and wrist motion stay on your devices: they are never sent to CaddieLoop's servers, never shared, and never used for advertising. What reaches your round from the watch is the round itself: your scores and the shots it marked (when, and how far from the pin).

How We Use Your Information

• To provide personalized AI coaching and swing analysis based on your golf data.
• To calculate your handicap index and track your statistics over time.
• To enable social features like friend feeds, leagues, matches, and challenges.
• To manage your subscription, process promo codes, and apply referral credits.
• To send push notifications for friend requests, match updates, and league activity.
• To enforce usage limits (AI calls per day, swing analyses per month).
• To provide the Range Finder with distance calculations using your GPS location.
• To look up course information (pars, tee data, handicap indices) for your rounds.

Data Storage and Security

Your data is stored securely on cloud infrastructure (AWS) hosted in the United States. All data is encrypted in transit via HTTPS. We use industry-standard authentication (AWS Cognito) and access controls to protect your account. Passwords are never stored by our application: authentication is handled by AWS Cognito or your OAuth provider.

Third-Party Services

We use the following third-party services to operate CaddieLoop:

• AI coaching (Groq, OpenAI): Your golf data (scores, statistics, equipment, coaching history) and your first name are sent to AI providers to generate personalized coaching insights and swing analysis. Data is processed in real time per their respective privacy policies.
• Authentication (AWS Cognito, Apple, Google, Facebook): If you sign in with Apple, Google, or Facebook, we receive only your email, name, and profile photo from that provider.
• Payments (Apple, RevenueCat): Subscription purchases are processed by Apple via the App Store. RevenueCat manages subscription state. We never see or store your payment card or bank details.
• Push notifications (APNs): Apple Push Notification service delivers notifications to your device.
• Course data (GolfCourseAPI): Course pars, tee information, and handicap indices are retrieved from a third-party golf course database.
• Location services (OpenStreetMap/Nominatim, Overpass, Open-Meteo): Course geocoding, nearby course search, and elevation data are retrieved from open mapping and weather services. Only course location data is sent, not your personal information.

Data Sharing

We do not sell your personal information. We do not use your data for advertising or tracking. Your data is shared only with:

• Friends you have added (limited to shared rounds, names, and summary statistics).
• League and match participants (scores and names relevant to the competition).
• Other players in Play: When you play a match, your opponent sees your name, profile photo and handicap, and your shots and scores in that match. This includes players you do not know: Quick Match pairs you with another CaddieLoop player, who sees your name and photo, and a rematch request shows the other player your name.
• Public boards: The Daily and Weekly challenge boards and the course boards can be seen by every CaddieLoop player. Your name and score appear on each board you post a score to, and a round you recorded may be shown to other players as the score to beat.
• Payment usernames (Venmo, Cash App): If you add a Venmo or Cash App username to your profile, it is shared with other players in matches where you have settled bets, so they can pay you. You can remove or change it anytime from Profile → Connections → Payment usernames.
• Our AI providers, solely for generating your coaching insights.
• Payment processors, solely for managing your subscription.

You can block another player from the Friends screen. A player you block is never paired with you in Quick Match, cannot send you a rematch, and does not appear on the boards you see. You can also report a player to us.

Anonymous Course Intelligence

To make pre-round briefings and course insights smarter for every player, we maintain anonymous, aggregated statistics per course and hole. When you log a round, we add anonymized data points to this aggregate (course name, hole number, par, score, GIR, fairway, putts, and a coarse handicap band). No user identifier, no date, no round ID, and no individual round is stored in this pool. Only counters and rolling averages. Once a round contributes, it cannot be reverse-engineered from the aggregate.

This aggregate is what powers statements like "the 14th green plays harder than card suggests" or "mid-handicap players average +0.4 over par here." Your individual rounds remain in your private account.

You can opt out of contributing to this anonymous pool at any time in Profile → Privacy. Existing aggregate data cannot be retroactively removed since individual contributions are unidentifiable by design, but opting out stops all future contributions immediately.

Data Retention

We retain your data for as long as your account is active. In Play, a finished match is kept for 180 days, a Daily or Weekly challenge entry for 180 days, and a course board entry while your account is active.

If you delete your account, all associated data is permanently removed from our systems, including your profile, rounds, statistics, friend connections, league memberships, stored media, and your Play data: your matches, shots, statistics and board entries. A match you played against another player is removed for them too, and a match still in progress is ended and awarded to the other player. This deletion is irreversible.

Your Rights

• Access: View all your data through the app at any time.
• Correction: Update your profile, scores, and equipment data directly in the app.
• Deletion: Permanently delete your account and all associated data from your Profile screen. This action is irreversible and removes all data from our servers.
• Portability: Export your data in machine-readable JSON format via Profile → Privacy → Export My Data, or contact us at support@caddieloop.ai.
• Opt-out of anonymous aggregation: Stop your future rounds from contributing to the anonymous course-intelligence pool via Profile → Privacy.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: Request disclosure of what personal information we collect about you, the categories of sources, the purposes of collection, and the third parties with whom we share it. The categories and purposes are detailed elsewhere in this policy.
• Right to delete: Request deletion of personal information we hold about you. Self-serve via Profile → Account → Delete Account.
• Right to correct: Request correction of inaccurate personal information. Self-serve via Profile.
• Right to opt out of sale or sharing: We do not sell personal information and do not share it for cross-context behavioral advertising. There is therefore no "Do Not Sell My Personal Information" link required, but you may always opt out of anonymous aggregation as described above.
• Right to non-discrimination: Exercising any of these rights will not result in different pricing, service quality, or access to features.

To submit a request or appeal a decision, contact support@caddieloop.ai. We respond within 45 days.

European Privacy Rights (GDPR / UK GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) and the UK GDPR.

Lawful basis for processing. We process your personal data on the following legal bases:

• Contract (Art. 6(1)(b)): Account creation, round logging, statistics, and subscription management. Necessary to provide the service you signed up for.
• Legitimate interest (Art. 6(1)(f)): Anonymous course-aggregation pool, anti-abuse rate limiting, and product analytics. You may object to processing based on legitimate interest at any time by contacting us.
• Consent (Art. 6(1)(a)): Optional features such as push notifications, contacts access, and microphone access. Consent is collected at the point of feature use and may be withdrawn at any time in iOS Settings or the app.

Your GDPR rights include: access (Art. 15), rectification (Art. 16), erasure (Art. 17, "right to be forgotten"), restriction (Art. 18), portability (Art. 20, self-serve JSON export), objection (Art. 21), and the right to lodge a complaint with your supervisory authority. See "Your Rights" above for the self-serve paths.

International data transfers. CaddieLoop infrastructure runs on Amazon Web Services in the United States (us-east-1). When you use the service from outside the United States, your data is transferred to and processed in the US. We rely on the EU-US Data Privacy Framework and standard contractual clauses (SCCs) where applicable. By using the service, you understand and consent to this transfer.

Data Protection Officer. CaddieLoop has not appointed a Data Protection Officer (we are not required to under GDPR Article 37). For privacy inquiries contact support@caddieloop.ai.

Children's Privacy

CaddieLoop is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or via email. The "Last updated" date at the top reflects the most recent revision.

Contact Us

If you have questions about this privacy policy or your data, contact us at support@caddieloop.ai.