Privacy Policy

Scope and who handles your information

This policy applies to the SwingSmith iOS and Android apps, swingsmithpro.com, account and support services, and related features. SwingSmith is responsible for the first-party information described here. The information collected depends on the features you choose to use.

SwingSmith does not use iOS app data for cross-company tracking. The current iOS release does not embed Meta's Facebook SDK, send Meta App Events, or collect advertising identifiers. If another supported platform offers a third-party sign-in method and you choose it, that provider processes the sign-in under its own privacy terms.

Account, profile, device, and security information

• Account data such as your name, email address, SwingSmith user ID, password hash, verification status, sign-in provider identifier, and account creation or last-login time.
• Profile and golf preferences such as an avatar, handedness, skill level, improvement goal, club, camera angle, shot details, notification choices, and other settings you submit.
• Device and app information such as a vendor or device identifier, push token, operating system, device model, app version and build, time zone, notification permission status, and language or locale.
• Authentication and security records such as session tokens, passkey public-credential metadata, device hashes used to enforce account limits, IP address, user agent, request logs, and fraud or abuse signals. SwingSmith does not receive the fingerprint, face scan, or device passcode used by your operating system to unlock a passkey.

Golf rounds and scorecards

• When you use Round Tracking, SwingSmith stores the course or facility you select or enter manually, the round date and time zone, and an immutable snapshot of the scorecard used for the round, including its hole order and course facts.
• We store hole scores and any optional statistics you enter, such as penalties, putts, fairway results, and greens in regulation, together with round status and summaries.
• To save offline and sync reliably, the app and service keep local round data, revision and operation identifiers, queued outbox changes, and conflict information. These records are linked to your SwingSmith account and the device used for the round.
• Course search terms may appear in server or hosting access logs.
• We use Round Tracking data only to operate and sync rounds, provide your history and trends, and maintain reliability. We do not use it for marketing or advertising. Round information you enter manually is not sent for AI processing. If you separately choose Scan scorecard, the scorecard-photo processing and retention terms below apply.

Scorecard-photo import and optional course contribution

• When you choose Scan scorecard, SwingSmith receives the printed scorecard photo you take or select. It may suggest the facility, course, routing, city, region, country and time zone; tee names, units, course rating and slope; hole numbers, par, stroke index and distances; round date; player names; hole scores and totals; and confidence and image-region information. The processing job and any round you save are linked to your SwingSmith account. AI results may be incomplete or wrong, and you must review and can correct every value before saving or submitting it.
• The app keeps a private on-device scorecard draft until you finish or discard it, sign out, switch accounts, or delete your account. After you give explicit AI-processing permission, our service validates and re-encodes the photo to remove embedded metadata before it writes a durable private copy or sends the image to Google Cloud Vertex AI. No public image URL is created.
• The private server image is kept for no more than seven days for processing and retry, then deleted. At that time, temporary extracted scorecard text and validation data are cleared. An account-deletion request starts removal sooner. A round you choose to save remains in your private Round history until you delete it or account deletion is completed. Limited consent, security and operational audit records may remain while the account is active under the retention terms below.
• Google states that it does not use Vertex AI customer data to train or fine-tune AI models without the customer's prior permission or instruction. Separately, Google may retain a submitted scorecard image or related prompt that is flagged for suspected abuse for up to 90 days for limited abuse monitoring, unless a qualifying contract exemption or approved opt-out applies. SwingSmith has not verified such an exemption or opt-out for this release. SwingSmith does not use the scorecard photo or extracted values to train an AI model through this feature.
• Permission to process a scorecard photo does not authorize a course contribution or publication. If you make the separate optional choice and give separate consent to help add or update a course, SwingSmith copies only the course facts you confirmed: facility, course and routing names; country, region, city and time zone; hole count; tee names, units, course ratings and slope; and hole numbers, par, stroke index and distances.
• The photo, player names, player scores and round date are not included in the course contribution. The contribution remains linked to your account, processing job and consent record for moderation and begins as pending review. The pending submission itself cannot publish or replace a managed course. After separate administrator review, accepted course facts may be used to add or update shared managed-course reference data.

Swing media and movement analysis

• Videos you record or select, profile or golf images you attach, and any voice or other audio contained in those files.
• File and capture details such as file name, media type, duration, dimensions, frame rate, camera view, rotation, and capture-quality information.
• A selected photo or video can contain location metadata added by your camera or device. If that metadata remains in the file, it can be uploaded with the media even though SwingSmith does not need your live location to score a swing. You can disable camera location tagging or remove location metadata before uploading.
• Analysis data derived from your media, including extracted frames, swing scores, body-pose and movement landmarks, fitness or exercise motion, hand structure and movement, head movement, posture, rotation, phase timing, club and clubhead paths, comparisons, coaching notes, and progress history.
• These motion results are used to provide golf feedback, saved analysis history, trends, visual overlays, and requested coaching features. They are not used to authenticate your identity and are not medical diagnoses.

Google Cloud, Vertex AI, Gemini, and explicit AI consent

• Before an AI feature first sends your content for processing, the app presents an AI Processing Permission dialog. If you decline, that feature does not send the selected content for AI processing.
• After you agree and request a feature, SwingSmith sends the content needed for that request through our backend to Google services. Depending on the feature, this can include a swing video, club and handedness details, ball-flight or contact notes, an Ask Brody prompt, recent chat history, an attached golf image, or the scorecard photo and printed facts described above.
• Google Cloud Storage and Vertex AI or Gemini process this content to generate the analysis, reply, or scorecard suggestions you requested. Temporary objects used for swing analysis or chat are removed after processing. Scorecard images and temporary extracted scorecard data follow the separate seven-day maximum described above. Your original swing upload and resulting analysis can remain in your SwingSmith history until deleted.
• You can decline AI processing, stop submitting new content, or contact us to withdraw permission for future AI requests. Withdrawal does not undo processing already completed or results already stored in your account.
• AI output can be incomplete or inaccurate. SwingSmith is a golf practice tool, not medical, health, safety, or emergency advice.

Firebase analytics, diagnostics, remote settings, and messaging

• The app uses Google Firebase services, including Analytics, Remote Config, and Cloud Messaging. These services can process an app-instance or device identifier, app and operating-system version, screen and feature events, approximate event time, notification token and permission state, delivery or open activity, and technical diagnostic data.
• SwingSmith sends product events such as sign-up, upload, analysis completion, result views, paywall views, purchase starts or completions, feature use, and app errors. After sign-in, analytics may be associated with your SwingSmith user ID so we can understand the account journey across sessions.
• We use this information to operate notifications, diagnose failures, measure reliability, understand which features help users, and improve the product. The current iOS Firebase Analytics package is built without advertising-identifier support.

Attribution and first-party product measurement

• When you arrive through a campaign, referral, or app link, SwingSmith can store first-touch and latest-touch details such as the landing link, referral code, source, medium, campaign, content, and term.
• Our first-party product measurement also records limited event details such as the feature or screen, experiment or variant, app version, platform, time zone, event time, and whether a queued event was lost before delivery. It does not include the uploaded swing video or Ask Brody message body.
• We use these records to measure acquisition, referrals, feature performance, conversion steps, notification effectiveness, and product experiments. They may be linked to your account after sign-in, but the current iOS release does not send them to Meta App Events or use them for cross-company tracking.

Purchases and subscriptions

• Apple processes iOS purchases and Google processes Android purchases. Your payment card or bank details are entered with the store and are not provided to SwingSmith.
• SwingSmith receives and stores the information needed to verify and provide a purchase, such as the store, product ID, transaction or purchase-token identifier, receipt or signed transaction data, purchase and expiration dates, subscription status, trial or offer status, and the SwingSmith account that receives access.
• We use purchase records to unlock paid features, restore purchases, prevent fraud, provide support, keep required financial records, and measure the purchase funnel. Deleting the SwingSmith account does not itself cancel an App Store or Google Play subscription; recurring billing must be managed in the store account.

Optional Swing Contribution Program

• The Swing Contribution Program is optional and is not required for an analysis, account access, or paid features. We record your choice, the time of the choice, where it was made, and the policy version and scope you were shown.
• If you enroll, every swing video you upload while enrolled may be used to test, train, and improve SwingSmith analysis systems and in SwingSmith educational and marketing materials. This permission covers the swing, image, likeness, and voice of people shown in an eligible video.
• The program does not scan other media on your phone. You must own the submitted media or have permission from everyone shown; if a minor appears, a parent or legal guardian must authorize that use.
• You can leave or rejoin in Profile or email [email protected]. Leaving excludes future uploads. We will stop new uses of existing videos where reasonably possible, but cannot recall material already distributed, reposted, or cached, or reverse improvements already learned by a trained system.

When we share information

• With hosting, storage, security, email, notification, analytics, and support providers that operate SwingSmith for us, including Google Cloud and Firebase.
• With Google Vertex AI or Gemini after the in-app AI consent described above, only to process a feature you request.
• With Apple or Google for purchase verification, subscription management, store compliance, and fraud prevention.
• With Apple, Google, or Meta when you choose that provider's sign-in flow, subject to the provider's own privacy terms.
• With contractors working for SwingSmith on permitted analysis-system, educational, or marketing work when an eligible video is covered by the Swing Contribution Program.
• With authorities, professional advisers, or other parties when reasonably necessary to comply with law, protect users or the service, investigate abuse, enforce terms, or complete a business transfer subject to appropriate safeguards.
• We do not sell uploaded swing videos or payment-card information.

Website analytics and optional Meta marketing measurement

• The website uses first-party analytics and, when configured, Google Analytics to understand page visits, store-link clicks, referrals, and campaign attribution. First-party records can use anonymous visitor and session identifiers, page and link details, referrer or campaign fields, and event time.
• Meta Pixel and Meta Conversions API apply to the website only and remain off unless you select Allow marketing. If allowed, Meta may receive page-view and store-click details, a shared event identifier used to prevent duplicate counts, browser and device details, network information including IP address, and Meta identifiers or cookies such as _fbp and _fbc when available.
• We do not deliberately include your name, email, phone number, account ID, Ask Brody messages, or uploaded swing media in website Meta event payloads. The website setting below does not enable Meta App Events in the iOS app, and you can change this website choice at any time.

Retention, deletion, and account closure

• We generally retain account, profile, uploaded media, analysis, coaching, preference, and linked product records while the account is active so the service and history remain available.
• Temporary AI-processing objects are removed under the feature-specific schedules described above. In particular, a private scorecard image is deleted and its temporary extracted scorecard data is cleared no more than seven days after upload. Saved rounds, course-contribution facts, related consent records and moderation history are retained while the account is active so we can provide history, review contributions and maintain an audit trail.
• Operational logs, delivery records and backups are kept only as long as reasonably needed for security, reliability, recovery and legal obligations, then deleted or de-identified under their applicable schedules.
• You can request deletion in the app or at /delete-account. We process valid requests within 30 days. Once processing is complete, account content is removed from active systems, subject to records we must retain for law, tax, transaction integrity, fraud prevention, security, dispute resolution, or to document and honor a consent withdrawal.
• Deletion from backups can take additional time as protected backups age out. Information already included in a contribution-program model improvement or already distributed under that optional program cannot always be reversed or recalled.

Your choices and privacy requests

• Use device settings to manage camera, photo-library, location, and notification permissions. You can also remove location metadata before selecting a media file.
• Decline the AI Processing Permission dialog to keep selected content from being sent for an AI request, or contact us to withdraw permission for future requests.
• Manage notifications and the Swing Contribution Program from Profile. Manage recurring purchases from your Apple or Google store account.
• Use the website control above to allow or keep optional Meta website measurement off.
• Depending on where you live, you may request access, correction, deletion, a copy of your information, or other rights available under local law. We may need to verify that the request belongs to the account holder.

Security and policy changes

We use access controls, authentication, encrypted network connections, service-provider controls, and operational safeguards intended to protect information. No storage or transmission method is completely secure, so we cannot promise absolute security.

We may update this policy when the product, providers, or law changes. We will post the revised date here and provide additional notice when a change materially affects your choices or how we use information.

Contact

For privacy questions or requests, contact SwingSmith at [email protected]. You can also review the support policy or use the account deletion page.