Privacy Policy

1. Introduction

KingsMen Services and Consulting LLC (“Caddy AI,” “we,” “us,” or “our”) built a golf app that measures distances, records and analyzes swings, tracks rounds, and lets golfers share what they did with other golfers. This policy explains what data that involves, why we hold it, who else sees it, and how to get rid of it. It covers the Caddy AI mobile app, the website at caddyai.golf, and related services (together, the “Service”).

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not track you across other companies’ apps or websites. The app does not use the advertising identifier (IDFA) and contains no advertising SDKs.

2. Information You Give Us

• Account: name, email address, and authentication details. If you sign in with Apple or Google, we receive the identifier and email that provider passes to us, including a private relay address if you chose one.
• Profile: handle, display name, avatar image, bio, home course, clubs, and preferences.
• Optional phone number: only if you choose to add one so friends can find you. See Section 6.
• Content you create: posts, captions, comments, reactions, GIF selections, swing videos and photos, shot traces, scorecards, rounds, and notes.
• Social graph: friend requests, friendships, blocks, and reports you file.
• Golf data: scores, statistics, handicap inputs, club distances, and round history.
• Support and correspondence: anything you send us by email or through the app.
• Purchases: subscription status and transaction identifiers. Apple processes the payment; we never see your card number.

3. Information Collected Automatically

• Location: precise GPS location while you are using location features, used for distance to the hole, course and hole detection, and weather and air-pressure lookups.
• Camera and sensors: camera frames, motion, and barometer readings while a camera or rangefinder feature is open.
• Device information: device model, OS version, app version, language, time zone, and app-scoped identifiers.
• Usage: which features you open, rounds played, swings captured, posts viewed, and in-app interactions, used to operate the app and to rank what you see in the feed.
• Diagnostics: crash reports, error logs, and performance metrics.
• Push token: a notification token, if you allow notifications.
• Network: IP address and standard request metadata, used for security, abuse prevention, and coarse region.
• Creator links: if you open a link a creator shared (caddyai.golf/c/…), we record that the link was opened, when, and the network address it was opened from. When the app is first opened it asks our server whether a creator link was opened from the same network recently, using a random identifier made for that install. That is how a creator is credited for a subscription, and it is the only thing it is used for. It involves no advertising identifier, no data from other companies, and nothing read from your device beyond that random identifier. Link records are deleted after 7 days. If you subscribe, the creator sees that a subscription happened and what they earned, never who you are.
• Website visits: when you browse caddyai.golf, aggregate page-view counts, referrer, and coarse country, collected without cookies. The website sets no advertising or tracking cookies.

4. Camera, Video, and Photos

Rangefinder frames are analyzed to find the flag and estimate distance. Swing clips are recorded and analyzed to produce a swing score.

Swing videos and shot clips are saved on your device. They are uploaded to our servers only when you choose to post or share one, or where an analysis explicitly requires it. We do not continuously stream your camera to us, and we do not keep raw rangefinder footage.

Other people may appear in what you record. Anyone on the course or range can walk into frame. You are responsible for recording lawfully and for not posting an identifiable person without their permission. See Section 10 of the Terms.

We access your photo library only when you choose to save a clip to your camera roll or pick an image to upload.

5. On-Device Swing Attribution

To attribute a swing in a video to you rather than to somebody else in frame, the app can build an on-device “signature” from a short enrollment scan.

• There is no face recognition. The app does not detect, match, or store faces, faceprints, or hand geometry, and it does not identify anyone by their face.
• The signature is a set of numbers: a normalized clothing-color histogram, a handful of body proportions, and an opaque Apple Vision feature descriptor. It is not an image, a crop, or a video.
• It is stored locally on your device only, excluded from device backup, scoped to your account, and never uploaded to our servers.
• It is deleted when you clear it in the app, when you delete your account, or when you delete the app.
• It is used only to tell your swing apart from other people’s in your own recordings. We do not use it to identify other people, and a match is not proof of identity.

6. Contacts and Finding Friends

If you choose to look for friends from your contacts, the app asks for contacts permission and matches them against people who already have accounts. It is built so that your address book never leaves your device in readable form:

• Your device normalizes each phone number or email address and hashes it locally. Raw contact details are never sent to us.
• Our server re-hashes each value under a secret key before any lookup, so the values stored at rest are not the values that crossed the wire.
• We answer the request and discard it. We do not keep a copy of your address book, and we do not build a social graph from it.
• Names, and any contact who is not already on Caddy AI, are not stored. Invitations are sent by you, from your own device, not by us.
• Email discoverability comes from the address on your account. A phone number is optional, you type it yourself, and you can remove it at any time in the app’s privacy settings.

You can revoke contacts access at any time in iOS Settings. Doing so does not delete anything, because nothing was retained.

7. Location Data

We collect precise location while you are actively using a location feature, to place you on the hole, compute distances, identify the course, and fetch conditions. Under U.S. state privacy laws, precise geolocation is “sensitive personal information”; we use it only to provide the features you asked for and for security, and never to infer characteristics about you or to advertise to you. You can turn location off in iOS Settings, which will disable the features that depend on it.

8. Social Features and What Other People Can See

Social features exist to show your golf to other golfers. Specifically:

• Your handle, display name, avatar, and public profile details are visible to other users.
• Posts you set to public are visible to anyone on the Service. Posts you set to friends are visible to your friends and to people tagged in them.
• Comments, reactions, and tags carry your name and avatar to everyone who can see the post.
• Shared rounds and live scorecards show your scores to everyone in that round.
• Leaderboards and rankings display your handle, avatar, score, and in some cases your swing clip to other users.
• Shared links open public pages at caddyai.golf, and generate preview cards that third-party apps display. Anyone with the link can open that page. Individual post pages are marked not to be indexed by search engines; profile pages may be indexed.
• Blocking is not disclosed to the person you block.

Once something is shared, other people can screenshot or re-share it. Deleting a post removes it from the Service but cannot recall copies that already exist elsewhere. Treat anything you post as potentially permanent and public.

9. How We Use Information

• Provide core features: distances, plays-like conditions, scoring, statistics, and shot tracking
• Record, analyze, and score swings, and attribute them to you
• Operate social features: profiles, friends, posts, comments, reactions, notifications, rounds, and leaderboards
• Rank and personalize what appears in your feed
• Moderate content, review reports, enforce our rules, and detect spam, fraud, and abuse
• Manage subscriptions and entitlements
• Send service messages and, if you allow them, push notifications about social activity
• Diagnose crashes, measure performance, and improve the app
• Improve accuracy of detection and analysis models, using content you posted or explicitly submitted, in aggregate or de-identified form where practical. You can object by writing to us.
• Meet legal obligations and enforce our Terms

10. Legal Bases (EEA and UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on these bases:

• Contract: to give you the account, features, and subscription you signed up for.
• Consent: for camera, location, contacts, photo library, and push notifications, each of which you grant at the iOS prompt and can withdraw in Settings.
• Legitimate interests: for security, abuse prevention, moderation, diagnostics, and improving the Service, balanced against your rights.
• Legal obligation: where the law requires us to retain or disclose something.

11. Who We Share Data With

We do not sell personal information. We share it in these situations only:

• Other users, as described in Section 8.
• Apple, for app distribution, sign-in, purchases and subscription receipts, push delivery, and weather data.
• Google (Firebase), our infrastructure provider, for authentication, database, file storage, server functions, push messaging, analytics, and crash reporting.
• RevenueCat, for subscription and entitlement management.
• Vercel, which hosts caddyai.golf.
• Plausible Analytics, which measures traffic to the website. It is cookieless, does not use persistent identifiers, and does not follow visitors across sites. It never runs inside the app.
• GIF and sticker providers, when you open the GIF picker. Your search terms and your device’s requests go to that provider under its own privacy policy.
• Course and map data providers, when we look up a course or hole. These requests carry approximate location, not your identity.
• Legal and safety: when required by law, subpoena, or legal process, or where we believe in good faith it is necessary to protect rights, safety, or property, or to investigate abuse.
• Business transfer: in a merger, acquisition, financing, or sale of assets, subject to this policy.

Service providers act on our instructions and are not permitted to use your data for their own purposes. Data may be processed in the United States and other countries; for transfers out of the EEA or UK we rely on Standard Contractual Clauses or another lawful transfer mechanism.

12. Moderation Data

When you report content, we store the report, what was reported, and your account identifier so we can act on it and detect abuse of the reporting system. When content is removed or an account is restricted, we keep a record of the action and its reason for as long as needed to enforce our rules and to defend against claims. Reports are not shown to the reported user with your name attached.

13. Data Retention

• Account, profile, posts, rounds, and statistics: kept while your account is active.
• Swing videos and media: kept while the post exists, or until you delete it.
• Contact match requests: not retained.
• On-device swing signature: stays on your device until you clear it or delete the app.
• Diagnostics and crash logs: typically up to 90 days.
• Moderation and enforcement records: kept as long as necessary for safety and legal defense.
• Backups: deleted content may persist in encrypted backups for a limited period before rotating out.

14. Deleting Your Account and Data

You can delete your account from inside the app, in Settings. Deletion removes your profile, posts, comments, reactions, uploaded media, friendships, and round data from the Service. Some records are retained where the law requires it or where we need them to prevent abuse, and copies may remain in backups for a limited period. Content that other people saved or re-shared is outside our control.

To request a copy of your data, or deletion by email instead, write to maxmontes@caddyai.golf from the address on your account.

15. Your Rights

Depending on where you live, you may have the right to:

• Know what personal information we hold and how we use it
• Access a copy of it, and receive it in a portable format
• Correct inaccurate information
• Delete your information
• Object to or restrict certain processing
• Withdraw consent, including camera, location, contacts, and notification permissions
• Limit the use of sensitive personal information
• Not be discriminated against for exercising these rights
• Lodge a complaint with your data protection authority

To exercise any of these, contact maxmontes@caddyai.golf. We will verify your request against your account and respond within the period the applicable law requires. An authorized agent may act on your behalf with proof of authorization. We have no personal information to sell or share for advertising, so there is nothing to opt out of. We do not sell personal data or sensitive personal data, including biometric or precise location data, and we do not process it for targeted advertising or profiling, so no sale-of-sensitive-data notice is required under the Texas Data Privacy and Security Act or any comparable state law.

16. Security

We use industry-standard protections, including encryption in transit (TLS) and encryption at rest, access controls on our infrastructure, and server-side rules that govern who may read or write each record. No system is perfectly secure, and we cannot guarantee absolute security. Use a strong, unique credential and tell us immediately if you suspect unauthorized access.

17. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, write to maxmontes@caddyai.golf and we will delete it. If you are between 13 and 18, please review this policy with a parent or guardian before using social features.

18. Tracking and Do Not Track

We do not track users across other companies’ apps or websites, we do not use the advertising identifier, and we do not respond to Do Not Track browser signals because we do not do the tracking those signals are designed to stop. Analytics and crash reporting are used only to operate and improve Caddy AI.

19. Changes to This Policy

We may update this policy. If changes are material, we will post the updated policy, update the “Last updated” date, and where required notify you in the app. Continued use after changes take effect means you accept the updated policy.

20. Contact Us

Questions about this policy, or a request about your data:

KingsMen Services and Consulting LLC
maxmontes@caddyai.golf