Privacy Policy

Last updated: July 31, 2026

1. Introduction

Golf Lab AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Creating an account is optional. If you create one, Apple Sign-In or Google Sign-In provides us an account identifier and, depending on your provider choices, your email address and name. We do not receive your Apple or Google password.
  • Golf Profile: Handedness, handicap, skill level, play frequency, primary goal, and typical miss.
  • Swing and Round Content: Golf swing videos you record or upload, still frames and pose data derived from those videos, club and camera-angle details, shot-result tags, swing notes, annotations, and rounds or scores you log. Swing visuals are sent to the third-party AI service only after you give permission in the app.
  • Sharing and Feedback Content: Feedback-form messages and optional contact email, plus names, comments, and drawings submitted through a shared swing.
  • Subscription Status: If you subscribe to Pro, the purchase is processed by Apple. We receive your subscription status and product identifier, never your payment details.

2.2 Information Collected Automatically

  • Device and App Information: Device model, operating-system and app versions, language and country settings, bundle identifier, and app-installation identifiers generated by Firebase services.
  • Usage Data: App interactions, features used, screen views, session information, and purchase-funnel events. We collect this through Firebase Analytics to understand and improve the app, not for third-party advertising.
  • Crash and Diagnostic Data: Crash traces, application state, device and operating-system information, and associated installation or session identifiers collected through Firebase Crashlytics.
  • Network and Security Data: Internet Protocol (IP) address and app, device, authentication, and integrity identifiers that Google and our other service providers use to deliver, authenticate, secure, monitor, and prevent abuse of requests.

3. How We Use Your Information

  • Provide Services: After you give permission, analyze your golf swing using Google's third-party Gemini service and provide personalized feedback.
  • Sync Data: Store and synchronize your swing sessions across devices when you're signed in.
  • Improve and Support the App: Understand feature use, diagnose crashes, respond to feedback, enhance features, and fix issues.
  • Manage Accounts and Purchases: Authenticate optional accounts, maintain subscription access, restore purchases, and enforce usage limits.
  • Safety & Security: Detect and prevent fraud, abuse, and security incidents.

4. Pose Tracking & AI Analysis

On-device pose tracking. The app detects body landmarks on your device to find swing positions and calculate motion measurements. Raw pose landmarks are not included in the Gemini request; only the selected swing visuals and derived positions or measurements described below are sent for AI analysis. If you sign in and use cloud sync, a pose-data sidecar may also be stored in Google Firebase Storage so your swing data can be restored across devices.

Explicit permission and recipient. Before the first AI analysis, the app presents a full-screen permission request that names Google LLC as the third-party AI recipient and describes the data below. You must actively select the permission checkbox before the "Allow and Analyze" button is enabled. Choosing "Not Now — Don't Send" continues without AI coaching, and no swing data is sent for AI analysis. If you allow, the request is processed by the Gemini API in Google Cloud Vertex AI through Firebase AI Logic.

Data sent for AI coaching. The request can include: selected JPEG still frames from the trimmed swing; if still-frame extraction is unavailable, the trimmed MP4 swing video; handedness, skill level, handicap, play frequency, primary goal, typical miss, club and camera angle; shot-result tags such as ball flight, contact and overall feel; optional swing notes; on-device derived swing positions and measurements; short summaries of recent swings and logged rounds; and technical request data such as IP address and app or device identifiers used to deliver and secure the service.

Data not included in the AI request. We do not include your name, email address, precise location, payment information, authentication credentials, feedback-form content, or comments and drawings from shared swings in the Gemini analysis request.

Google's use and protection. Firebase AI Logic itself does not store the request or response. The selected Vertex AI Gemini API processes it under Google Cloud's data-processing, security, and service-specific terms. Google states that it will not use customer data to train or fine-tune AI models without the customer's permission. Google may temporarily process or log request and usage data as reasonably necessary to generate the response, secure the service, monitor reliability, and detect abuse. We require providers that process personal data for us to use it only for the disclosed service and to provide the same or an equivalent level of privacy protection.

5. Data Storage & Security

  • Local Storage: Videos and session data are stored locally on your device.
  • Cloud Storage: If you sign in, account and sync data is processed by Firebase and Google Cloud infrastructure. Firebase Authentication is operated from the United States; other Firebase services and the Vertex AI global endpoint may process data in the configured service region or other Google Cloud locations.
  • Encryption: Data is encrypted in transit using TLS and at rest using industry-standard encryption.
  • Access Controls: Synced account data is protected by account-based access controls. A swing you deliberately share is also available to anyone with its unguessable link until that link expires.

6. Data Sharing

We do not sell your personal information. We may share data with:

  • Google Firebase and Google Cloud: Optional account authentication; cloud database and storage; app configuration; analytics; crash reporting; and—only after your in-app permission—the Vertex AI Gemini analysis described in Section 4.
  • Google Sign-In: If you choose Google Sign-In, Google authenticates you and provides the account information you authorize.
  • Apple: Sign in with Apple and subscription billing. Apple processes purchases; we do not receive your payment-card details.
  • People You Choose to Share With: If you create a swing-feedback link, the video and its analysis become viewable by anyone who has the link until it expires, and viewers can post names, comments, and drawings. Only share links with people you trust.
  • Legal Requirements: When required by law or to protect our rights and safety.

Our service providers are required by contract and applicable law to protect personal data with the same or an equivalent level of protection, use it only for the disclosed purposes, and apply appropriate security controls. We do not sell personal information or share it for cross-context behavioral advertising.

7. Your Rights & Choices

  • Access & Export: View and export your swing data from within the app.
  • Delete: Delete individual swing sessions or your entire account and associated data.
  • Guest Mode: Use the app without creating an account. Your account and cloud-sync data stay local; if you choose AI analysis, only the data disclosed in Section 4 is transmitted after you give permission.
  • AI Data Sharing: Decline the request and continue using on-device features without AI coaching. If you previously allowed sharing, go to Profile > Privacy and choose "Stop AI data sharing." Future analyses will require permission again.
  • Privacy Requests: Contact privacy@golflabai.com to ask for access, correction, export, or deletion that is not available in the app.

8. Data Retention

  • Local and Synced Swing Data: Kept until you delete the swing, delete your account, or remove the app's local data. Account deletion removes the cloud data the account controls; if an automated deletion cannot finish, the app reports the failure so you can retry or contact us.
  • AI Requests: Firebase AI Logic does not store request or response content itself. Vertex AI handles content under Google Cloud's retention, security, and abuse-monitoring terms and does not use it to train models without permission.
  • Analytics: Analytics event and user-level data is retained for no longer than 14 months, subject to aggregated reporting that no longer identifies an individual app installation.
  • Crash Reports: Firebase Crashlytics retains crash traces and associated installation identifiers for 90 days before removal from live and backup systems begins.
  • Shared Swings and Support: Swing-feedback links expire after 30 days. Related records, feedback submissions, and records needed for security, fraud prevention, legal compliance, or dispute resolution may be retained only as long as reasonably necessary for those purposes.

9. Children's Privacy

Golf Lab AI is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us through the in-app feedback form or at:

Email: privacy@golflabai.com