Privacy policy.

This policy covers the Caddora Golf iPhone app and the caddoragolf.com website, including the Caddora Coach application and beta request forms.

The data controller is Caddora, registered in Ireland (no. SR9791982), 37 Alder Grove, Naas, W91 RK2W. For anything on this page, email hello@caddora.ie. There is no process and no ticket queue — it is one person and a database.

Almost everything the app records never leaves your device: your rounds and scores, your scorecards, your clubs and bag gapping, your range sessions, and the times you reached each tee and green. Your position during a round stays on the phone too, unless you choose to share it with your club while timing a round, which is described under Pace of play.

It is stored in the app's own database on your iPhone. It is not uploaded, not backed up to us, and not visible to anyone but you. Deleting the app deletes all of it, which is also the fastest way to erase everything at once.

The rest of this policy describes the specific, named occasions when something does leave — and there are not many.

You can use most of the app without an account. If you sign in, we hold your email address and an account record, which is what lets you scan cards and contribute course information.

Photographing a scorecard or a course's tee information is the one part of the app that sends a picture anywhere. Range numbers are typed in and never leave your phone.

When a card is scanned we first try to cut any names and signatures out of the image. If that cannot be done we black them out instead, though a signature too messy to make out may stay in the picture, so the app suggests covering the signatures with your thumb when you take the photo. We do not keep the photograph. Anthropic reads it and returns the numbers; they do not use it to train their models and hold it only briefly to check for misuse.

Swing analysis itself runs entirely on your iPhone: the video is recorded, measured and scored on the device, and nothing has to leave it for the app to work.

Sharing what it measured is a single switch under Swing AI, Share swing data, and it starts on. You can turn it off at any time and nothing further is sent.

• What is sent — The measurements taken from the swing — the body positions the camera tracked, the angles worked out from them, and your handicap, sex and handedness so the numbers sit beside comparable golfers — the recording itself, and about fourteen still pictures cut from it at the points of the swing we check, which are the same pictures the app shows you on the swing breakdown. The stills go only when swing-video sharing is on, and only for swings you recorded in the app rather than picked from your photo library; they exist because a whole recording often never finishes uploading on a driving range's signal, and the stills do. It also says which swings were recorded together in one session and the phone height you picked for it, so swings filmed from different heights are not mixed up. No name and no email in any of it, and no location — but the footage and the stills are filed under your account, so they can be traced back to it.
• What it is used for — Improving how the app reads a golf swing, and nothing else. It is never sold and never shared outside this project, and it is not used to identify you.
• Who looks at it — A golf professional watches swings to check the app read them correctly. That is what the footage is for, and it is the only circumstance in which a person looks at yours.
• How long it is kept — On your phone the full-quality recording is removed once the analysis finishes, and a smaller copy stays so the swing still plays in your history. The recording that reaches our storage is deleted after 7 days and the still pictures after 90 days, automatically, by rules on the storage itself — the stills last longer because they are what we correct the swing analysis against, and a week is not long enough to gather a set worth learning from. The working copy we take for review goes on the 7-day clock, so no recording of you is held anywhere for longer than a week, and the stills are the only thing that outlasts that.
• The lawful basis, and your right to object — Legitimate interests: making the analysis correct. The app judges a swing against professional footage because that is the only footage there was to measure, and it cannot be made accurate for ordinary golfers without swings from ordinary golfers. You are told what is recorded and why rather than asked to tick a box before the app works — the same basis a driver-facing dashcam runs on. You can object at any time, and objecting is simply turning the switch off; you can also ask us to delete everything already sent, and we will.

The app asks for your location while you are using it, to find courses near you and to show where you are on the hole you are playing. The hole on screen follows your position, and that happens on the phone.

Pace of play is the one exception, and it asks separately. When you start a round with a pace option, the app asks for location access all the time, because the clock has to work with your phone locked in a pocket. It uses that access only while a pace session you started is running, and stops the moment the session ends. iOS shows its blue location indicator for as long as it runs. If you say no, the clock keeps time only while the app is open.

With no pace session running, the app does not receive your position in the background. Your position is never sent to advertisers, and the app does not keep it on your phone as a history.

Start Round asks what you need: pace of play only, pace with hole-by-hole distances and scoring, or hole-by-hole only. With a pace option, the app records the time you reach each tee and green, against the tee time you entered from the club's time sheet. That record is a time and a hole number. No coordinate is written to it.

A pace session ends when you tap Stop tracking, when you reach the last green, or when the phone has been outside the course boundary for five minutes. The app asks first if it is open, and stops on its own if it is not. A stop anywhere on the course keeps tracking, however long it lasts: a lunch at the halfway house or a rain delay is part of the round. The boundary is the course outline from OpenStreetMap where there is one, and otherwise the smallest shape around every tee and green.

Two things can leave the phone, and each one is your choice:

• Hole times — When the round ends, and only if Share swing data is on, the hole numbers and times are sent with the course, the tees you played, your tee time, how many were in your group, the format and your device identifier. No coordinates, no name and no email. They are used to work out how long each hole usually takes, and nothing else. The lawful basis is legitimate interests, the same as the swing measurements, and turning the switch off stops it.
• Your position, to your club — The start sheet has a switch, Check in with the club (before 25 October 2026 it was called Share my course position only). It starts off every time. You switch it on before you start if you want your club to see you, it applies to that round only, and you need to be signed in. With it on, and only while the session runs and the phone is inside the course boundary, the app sends your position about every 30 seconds. A club signed in to its own portal can see where its groups are on a map. Each position is also kept in a log with the time, the hole you were on and your account identifier, so a club can find the holes that hold play up. The first position outside the boundary is the last one sent, so nothing goes from the car park or the road home. The same switch checks your group in on the club's tee sheet: the app sends the tee time you entered, the group size, the hole you are on, how many holes you have finished and when your phone was last seen. The club sees how many phones in a tee time have checked in, never your name or account, and check-ins are deleted 7 days after the round. A tee sheet a club brings into Caddora holds the times, start tees and the players' names as the club wrote them. The names are seen only by that club's admins, are never linked to your Caddora account, and are deleted once the day of play is over; Caddora holds them for the club, which is responsible for them.
• How long it is kept — Your current position is deleted when the session ends. Your account identifier is removed from the position log 48 hours after each position, by a job that runs every night on our server, and the log itself is deleted 12 months after the round. On the phone, positions are removed when the round is finished, and only the hole times stay with your round.
• What remains, honestly — Without the account identifier the log is pseudonymous rather than anonymous. A path that starts on the 1st tee at your tee time could in principle be matched to the club's time sheet by someone holding both. That is why a club is meant to see it by hole and time of day, not as individual paths.
• The lawful basis — Your consent, given per round by switching it on at the start sheet. Leave it off and nothing about your position is sent. Ask us and we will delete what was sent from earlier rounds.

During the private beta, advertising is switched off: the beta build shows no ads, asks for no advertising consent and never contacts an ad network. This section describes the free app as it will be once it is on the App Store.

The free version will show advertising: a strip at the bottom of some screens, and a video you can choose to watch in exchange for a swing analysis. Ads are supplied by Google AdMob.

To show you an ad, Google receives your device's advertising identifier, its IP address, the rough area that IP implies, and what happened to the ad. Google uses that for its own purposes as well as ours, so for advertising Google decides things about that data itself rather than acting purely on our instructions.

What Google does not get, and cannot: your rounds, your scores, your handicap, your bag, your range sessions, your swing videos or any measurement from them, and your GPS position on a course. None of it reaches the ad network, and none of it is used to choose which ad you see. Your golf is not connected to your advertising.

You have two controls, and it is worth being clear about what each one does:

• The consent form — Shown in the EU and UK the first time an ad is about to be requested. Nothing is requested before you answer it, and you can reopen it any time from Profile.
• iOS tracking permission — Apple's prompt asking whether Caddora may track you across other apps and websites. If you do nothing, the answer is no.

Refuse both and you still see ads — they are simply non-personalised, chosen without a profile of you. A non-personalised ad still involves a request to Google carrying your IP address, because there is no way to fetch an ad without contacting the server it comes from.

If you want no contact with an advertising network at all, the Premium Pass removes advertising entirely. During the seven-day free trial ads remain: the trial unlocks the features, and paying is what removes the ads.

Purchases are handled by Apple. We never see your card, your billing address or your Apple ID.

Whether you hold a subscription is checked through RevenueCat, which sits between the app and Apple. It receives an anonymous identifier for your installation and what you bought and when. It is not given your name, your email address, or anything about your golf.

Course and hole information you contribute — a tee position, a corrected pin, a scanned card's par and stroke index — goes into a shared directory other golfers use. It carries no personal detail: it is a fact about a golf course, not about you.

When you apply to the Caddora Coach network we ask for your name, email address, club or academy, coaching qualification, how many students you coach weekly, and a short message about your background. When you request a beta invite we ask for your name, email address, home club, handicap index, whether you practise anywhere with a launch monitor, and a mobile number so we can reach you while the beta is running. In both, only name and email are required.

It is used to decide who to invite or approve, and to reply to you. Handicap and playing frequency are there because a test group of twenty single-figure golfers would not tell us much. The lawful basis is your consent, which you can withdraw at any time.

There is no third-party form service — the forms are Caddora's own and post straight to our database.

The complete list. Nothing is sold, and nobody on it is paid for information about you — advertisers buy space in the app, not facts about the people using it.

• Supabase — Hosts the database behind the app and the website forms, including pace-of-play hole times and positions. The database is in London — the UK, which the EU recognises as offering equivalent protection under an adequacy decision.
• Cloudflare — Hosts this website, and stores swing footage in Western Europe — the recording for 7 days and the still pictures for 90 — unless you turn swing-data sharing off.
• Your golf club — Only when you switch Check in with the club on for a round: your check-in and your position during that round, as described under Pace of play.
• Anthropic — Reads scorecard and tee images when you scan one. In the United States.
• Apple — TestFlight invitations during the beta, and all subscription payment.
• Google — Advertising only, and only what is listed above. Outside the EU, under Google's own international safeguards.
• RevenueCat — Confirms whether a subscription is active. An anonymous installation identifier and the purchase.

Anything held on your phone stays until you delete it, or until you delete the app.

Website form submissions are kept while we are processing them and running the coach network and beta programme, and deleted on request at any time. Beta applications from people not invited are deleted within 30 days of the beta ending; for testers, the selection answers and the mobile number go at the same point and the name, Apple ID email and club are kept only to provide the free subscription promised to testers after launch — deleted 30 days after that, and within 12 months of the beta ending at the latest. Feedback sent during the beta is kept with your name attached, because it is the record of why things changed and the testers are a small group we know personally; ask and your name comes off it. Swing footage you chose to share is deleted after 7 days wherever it is held, and the still pictures cut from it after 90 days. Swing measurements — the numbers, not the video — are deleted on request, and otherwise within 30 days of the beta ending. Pace-of-play positions lose your account identifier after 48 hours and are deleted 12 months after the round; your current position is deleted when the round's session ends.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. You can object to how it is used and withdraw consent at any time — withdrawing consent for the beta ends your part in it and removes your details.

Email hello@caddora.ie and we will do it. If you are unhappy with how it has been handled, you can complain to the Data Protection Commission at dataprotection.ie.

Caddora is not directed at children and we do not knowingly collect anything from anyone under 16. If you believe a child has given us information, email hello@caddora.ie and it will be deleted.

If this changes in a way that affects you, the date below changes with it, and during the beta we will email you rather than quietly editing the page. Last updated 25 October 2026.

What changed on 25 October 2026: the position switch is now called Check in with the club, and with it on the app also tells your club which tee time you are playing and which hole you are on, so the club can tick your group off its tee sheet. It is the same switch and still starts off. Clubs can now bring their tee sheet into Caddora; the players' names on it are kept for the day of play only.

What changed on 23 October 2026: pace of play. When you choose to time a round, the app now uses your location in the background for the length of that round, and can send your position to your club if you switch that on for the round. Both are described under Location and Pace of play, and the club is now on the list of who your data reaches.

What changed on 12 October 2026: the app began uploading about fourteen still pictures cut from each shared swing, and those stills are kept for 90 days rather than the 7 the recording gets. Both are described under Swing analysis. Nothing else about what the app collects changed, and the stills still go only when swing-video sharing is on.