Privacy policy
Last updated 15 August 2026
DRAFT — NOT FOR PUBLICATION. This is written from how the
app actually works, but every item marked [NEEDS REVIEW] is
a decision that needs a human, and some need legal advice. Do not launch
the site with any marker still visible. See LAUNCH-CHECKLIST.md.
StatCaddy is a golf statistics app. This explains what we hold about you, why, and what you can do about it.
Who we are
[NEEDS REVIEW] The data controller is [legal entity name], [registered address], [company number if registered]. If StatCaddy trades as a sole trader rather than a company, that changes the wording here and it must be stated correctly.
For anything about your data, contact [email protected].
What we collect
Information you give us
- Your email address. This is how you sign in — there are no passwords. We email you a short code and you enter it.
- Your golf data. Rounds, scores, putts, fairways, greens, penalties, notes you write on a round, your handicap index and its history, goals, and practice sessions.
- Photographs of scorecards, if you use that feature.
- Profile settings, including the scorecard shorthand you define.
Information we generate
- Derived statistics — percentages, averages and trends calculated from the rounds you log.
- AI-generated readings of your form, and of your scorecard photographs.
If you are a coach
- Your coach profile and display name.
- Lesson notes you write about students.
- Practice games and videos you create.
Why we hold it
| Purpose | Lawful basis |
|---|---|
| Providing the app you signed up for — storing your rounds, calculating your stats | Performance of a contract |
| Signing you in securely | Performance of a contract |
| Sharing your data with a coach you have connected to | Your consent, given by accepting their invite |
| Taking payment | Performance of a contract |
| Keeping the service working and secure | Legitimate interests |
Coaches and students
This is the part worth reading properly.
A coach sees a student's golf data only after that student accepts their invite. Before acceptance, nothing is visible. Once connected, the coach can see the student's rounds, the statistics derived from them, notes the student writes on rounds, and AI readings of their game.
Either side can end the connection at any time, and a student does not need their coach's permission to do so. When the connection ends, the coach stops seeing that student's data.
Lesson notes written by a coach about a student are the coach's record of their coaching. [NEEDS REVIEW] Decide and state plainly whether a student can see their coach's lesson notes, and what happens to those notes when a connection ends or an account is deleted.
Who we share it with
We do not sell your data, and we do not use it for advertising. We use these providers to run the service:
| Provider | What for |
|---|---|
| Cloudflare | Hosting, the database, and storage of scorecard images |
| Anthropic | Reading scorecard photographs and generating readings of your game |
| Resend | Sending sign-in codes and notification emails |
| Stripe | Payments. We never see or store your card details |
[NEEDS REVIEW] Confirm each provider's current data-processing terms and where they process data, and state whether any processing happens outside the UK/EEA and on what transfer mechanism. Add any provider not listed here.
How long we keep it
[NEEDS REVIEW] Retention periods have not been decided and must not be guessed. Set and state, at minimum: how long an active account's data is kept, how long after deletion data is fully removed including backups, how long scorecard images are kept, and how long billing records are retained for tax purposes.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, or restrict what we do with it. You can also object to processing based on legitimate interests, and withdraw consent to share data with a coach at any time by disconnecting from them.
Email [email protected] and we will respond within one month.
[NEEDS REVIEW] If UK-based, add: the right to complain to the Information Commissioner's Office, with a link. If the controller is established elsewhere, name the correct supervisory authority.
Players under 16
StatCaddy supports junior accounts, which are flagged as such, and coaching a junior requires parental consent.
[NEEDS REVIEW] State the minimum age to hold an account, exactly how parental consent is obtained and recorded, and who is responsible for obtaining it — the coach or the platform. This is the highest-risk area on this page and warrants proper advice before launch.
Cookies and analytics
The app sets a cookie to keep you signed in. It is necessary for the service to function and is not used for tracking.
This website uses Cloudflare Web Analytics, which does not use cookies and does not track individuals across sites. We do not use advertising or third-party tracking cookies.
Security
Sign-in is by one-time email code, so there is no password to be stolen or reused. Data is held on Cloudflare's infrastructure and transmitted over encrypted connections. No system is perfectly secure, but we do not collect more than we need — notably, we never handle your payment details.
Changes
If we change this policy we will update the date at the top, and tell you directly if the change materially affects you.