Golfr — Privacy Policy

Who we are: The Swing Suite Ltd., doing business as Golfr ("Golfr," "we," "us," or "our").

Contact: contact@golfr.coach | 74 Elmfield Way, Sanderstead Surrey, CR2 0EF

This Privacy Policy explains how we collect, use, share, and protect information in connection with golfr.coach and related services (the "Service").

1) What we collect

We collect the minimum information needed to run the Service:

• Account & contact data. Name, email address, password (hashed), and marketing preferences.
• User Content. Golf swing videos and related media you upload; titles/notes you add; coach comments and annotations.
• Booking & availability data (Coaches). Google Calendar account connection status, calendar IDs, and event metadata necessary for two‑way session bookings (e.g., event IDs, start/end times, attendee names/emails for booked sessions). We do not read or copy the contents of unrelated events.
• Transactional communications. Emails or in‑product messages about account verification, session updates, and service completion.
• Marketing communications. If you opt‑in, we send product updates and offers; you can opt out anytime.
• Device & usage data. Basic logs such as IP address, device/browser type, pages viewed, and timestamps for security and reliability.
• Optional profile fields. If you choose to provide them (e.g., handicap, location).

We do not collect payment data unless you later add payments; if we do, it will be processed by a third‑party processor and this Policy will be updated.

2) How we use information (purposes)

We use information to:

• Provide and improve the Service. Ingest and analyse golf swing videos; deliver coach feedback; provide session scheduling and two‑way calendar sync; maintain security and performance.
• Communicate with you. Account verification, password resets, booking confirmations/cancellations, and notifications of service completion (as you requested).
• Marketing (opt‑out anytime). Send product updates and offers if you've consented or as permitted by law.
• Compliance. Detect abuse; enforce our Terms; comply with legal obligations.

Gemini & AI note. We use Google Gemini for limited text enrichment (e.g., generic copy or templated tips). We do not send your personal data or your videos/User Content to Gemini. Gemini is used on non‑user data inputs or pre‑approved, de‑identified prompts. Outputs are reviewed and may be edited by us before use.

3) Google Calendar & OAuth

Coaches can connect Google Calendar to enable two‑way booking sync. With your explicit consent, we access calendar scopes only to read availability for scheduling and to create/update/cancel session events on your behalf. We store tokens securely and never share Google OAuth tokens with third parties.

Required disclosure: Golfr' use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar at any time in your Google Account security settings and/or within the Service; once disconnected, we stop syncing and delete associated tokens.

4) Legal bases (EEA/UK users)

Where GDPR applies, we process personal data on these bases:

• Contract (Art. 6(1)(b)) to provide the Service (video analysis, bookings, notifications).
• Legitimate interests (Art. 6(1)(f)) for security, product improvement, and internal analytics, balanced against your rights.
• Consent (Art. 6(1)(a)) for marketing emails and connecting Google Calendar.
• Legal obligation (Art. 6(1)(c)) where required by law.

5) Sharing of information

We do not sell your personal information, and we do not share it for cross‑context behavioral advertising.

We share information only with:

• Service providers (processors). Cloud hosting and infrastructure (e.g., Vercel or similar), email delivery, logging/security. They may process data solely under our instructions.
• Coaches (if you are a Player). Videos and booking details you choose to share with a coach are available to that coach.
• Business customers (if you are a Coach). Members of your organization may access content you share internally.
• Legal & safety. Where required by law or to protect rights, safety, and integrity.
• Business transfers. In a merger or acquisition, your information may transfer subject to this Policy.

6) Retention

We keep personal data only as long as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. You may delete videos or your account at any time; when you do, we delete associated personal data from our active systems within a reasonable period, with limited retention in backups as required for security and compliance.

7) Security

We use industry‑standard safeguards, including encryption in transit (HTTPS), restricted access on a need‑to‑know basis, and secure storage of OAuth tokens. No method is 100% secure; please use a strong, unique password and protect your account.

8) International transfers

If you are outside the country where our servers or providers are located, your data may be processed in other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses).

9) Your rights

Depending on your location, you may have rights to: access, rectify, delete, port, or restrict processing of your personal data, and to object to processing or withdraw consent.

• EEA/UK: You can lodge a complaint with your supervisory authority.
• California: We do not "sell" or "share" personal information as defined by the CCPA/CPRA. You can request access or deletion via the contact below. We do not use sensitive personal information for inferring characteristics.

To exercise rights, contact us at contact@golfr.coach. We may need to verify your request.

10) Children

The Service is not directed to children under 13 (or the age required by your jurisdiction). Coaches must be 18+. If we learn we've collected data from a child, we will delete it.

11) Cookies & tracking

We use essential cookies for authentication and security, and minimal analytics necessary to run and improve the Service. You can manage cookies in your browser. We do not honor browser "Do Not Track" signals due to lack of a common standard.

For detailed information about the cookies we use, their purposes, and how to manage them, please see our Cookie Policy.

12) Changes to this Policy

We will post updates here and revise the "Effective date." Material changes will be notified via email or in‑app.