Privacy Policy
1. Who we are
xCaddie ("xCaddie", "we", "us") provides a video-based golf swing-analysis and round-tracking service. For data-protection purposes, xCaddie is the controller of the personal data described below. If you have any questions, contact us at privacy@xcaddie.app.
2. What we collect
We collect only what we need to run the Service:
- Account data: your email address and a securely hashed password.
- Content you provide: the swing videos and images you upload, the rounds and notes you log, your selected club/level/hand and similar inputs.
- Derived analysis: pose landmarks, metrics, scores and reads computed from your videos.
- Technical data: minimal logs and security data (for example, IP address and timestamps) needed to operate, secure and debug the Service and to apply rate limits.
We do not collect your location: we strip EXIF/GPS metadata from your videos on upload. We do not knowingly collect special-category data beyond the pose analysis described below.
3. How we use your data and our legal bases
We use your data to: provide and operate the Service (process your analysis, show progress, manage your plan and account) — this is necessary to perform our contract with you; keep the Service secure and prevent abuse, and comply with law — our legitimate interests and legal obligations; and communicate essential service messages (verification, password reset, important notices). We process your uploaded videos only with the local models on our own server; we do not send your videos to third-party AI services.
4. Pose / biometric data
To read your swing, we compute pose landmarks from your video. Depending on your jurisdiction this may be considered biometric or special-category data. We use it solely to generate your swing analysis, we do not use it to identify you, and we do not sell or share it. Where the law requires explicit consent for this processing, your use of the analysis feature constitutes that consent, which you can withdraw by stopping use and deleting your data.
5. Who we share it with
Only you see your swings and data. We do not sell your personal data and do not use it for third-party advertising. We share data only with service providers ("processors") that help us run the Service, under contract and only as needed:
- Payment processor (for example, PayPal) — to handle subscriptions. They process your payment details directly; we do not receive or store your full card details.
- Email provider (Mailjet) — to send transactional emails (verification, password reset, support replies).
- Hosting/infrastructure — the server and database that run the Service.
We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a merger or sale of assets (with notice where required).
6. Retention and deletion
We delete the raw uploaded video shortly after processing it. We keep your account, analyses and progress for as long as your account is active. You can delete your account and all your data at any time from the app; deletion cascades across sessions, analyses, rounds and share links. We honour the right to erasure (GDPR Art. 17 / CCPA). We may retain minimal records where required by law (for example, billing records).
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent. You can exercise most of these directly in the app (export/delete). To make a request or raise a concern, email privacy@xcaddie.app. You also have the right to lodge a complaint with your local data-protection authority.
8. International transfers
Your data may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
9. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS), hashed passwords, scoped per-user access, EXIF/GPS stripping, rate limiting and security headers. No method of transmission or storage is 100% secure, but we work to protect your information and to address vulnerabilities promptly.
10. Cookies
We use browser storage for your session and preferences (theme/language) and an httpOnly cookie to serve your images securely. When you start a payment, the provider (for example, PayPal) may set its own cookies. We do not use third-party tracking or advertising cookies. Because we use only strictly necessary and functional cookies — none for tracking — you do not need to accept a consent banner to use the app.
11. Children
The Service is for users aged 16 and over (or the minimum digital-consent age in your country, if higher). We do not knowingly collect data from children below that age; if you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example, by email or an in-app notice). The "Last updated" date above shows the latest revision.
13. Contact
To exercise your rights or for any privacy question, contact privacy@xcaddie.app.