Privacy Policy

Last updated: May 2026

Scratch Labs LLC ("we," "our," or "us") operates the Golf Caddie AI mobile application. This Privacy Policy explains how we collect, use, and protect your information when you use our app.

1. Information We Collect

We collect the following types of information:

• Account information: Email address, name, and authentication credentials when you create an account
• Golf data: Scorecards, round history, hole scores, course names, and handicap information you enter
• Club bag data: Club names, distances, make, model, and loft information you provide
• Player profile: Handicap, goals, and preferences you set
• AI conversation data: Messages you send to Ace Caddie during rounds
• Usage data: App features used, session duration, and interaction events (via PostHog analytics)
• Crash reports: Technical error data to help us fix bugs (via Sentry)
• Purchase information: Subscription status managed by RevenueCat (we do not store payment card details)

2. How We Use Your Information

We use your information to:

• Provide personalized AI caddie recommendations during rounds
• Generate post-round analysis and practice plans tailored to your game
• Calculate and track your WHS Handicap Index
• Sync your data across devices (when cloud sync is enabled)
• Process and manage your subscription
• Improve app performance and fix bugs
• Communicate with you about your account or support requests

3. AI Processing

Golf Caddie AI uses Claude, an AI model by Anthropic, to power its three agents — Ace Caddie, Post-Round Analysis, and Practice Plan Generator. Your golf data and messages are sent to our secure backend (Supabase Edge Function) which proxies requests to the Claude API. Your data is used only to generate responses for you and is not used to train AI models.

4. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers who help us operate the app:

• Supabase — database and authentication
• Anthropic — AI processing (Claude API)
• RevenueCat — subscription management
• PostHog — product analytics
• Sentry — error monitoring

Each provider is bound by their own privacy policy and data processing agreements.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We use Row Level Security (RLS) to ensure each user can only access their own data. All data is transmitted over HTTPS. Your Claude API interactions are proxied through our backend — your Anthropic API key is never exposed to the app or your device.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data is permanently deleted from our systems within 30 days.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Export your golf data

To exercise any of these rights, contact us at privacy@golfcaddieai.io.

8. Children's Privacy

Golf Caddie AI is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

9. Third-Party Sign In

We offer sign in via Apple and Google. When you use these services, their respective privacy policies also apply. We only receive basic profile information (name, email) needed to create your account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. The "Last updated" date at the top of this page reflects when the policy was last revised.