Privacy Policy
FormCaddie is built to collect as little about you as possible. Swing analysis runs on your iPhone, and your videos are never uploaded.
Data controller
Nicolai Veyron Uberg (private individual), Norway.
Contact: ubergnicolai@gmail.com
What I process
- Account. When you sign in with Apple, I receive an anonymous user ID from Apple, plus the name and email address you choose to share. If you use “Hide My Email”, I only ever see Apple's relay address.
- Golf profile. The answers you give during onboarding (such as handicap, experience, and goals) are stored on your account so the feedback can be tailored to you.
- Subscription and usage. Whether you have an active Pro subscription, and how many free analyses you have used. This is needed to enforce the free-analysis limit and to give you the access you paid for.
- Optional product analytics. A random pseudonymous account ID and bounded events about the entry point and step reached in a flow, technical duration, error type, camera angle, club category, and free/Pro state. The ID is not your Firebase ID, Apple ID, or email address.
Your videos and analyses
The swing videos you record stay on your device. They are not uploaded to any server, and the analysis runs locally using Apple Vision. Analysis results are also stored only on your device. I cannot see your videos or your analyses.
Payment
All purchases go through Apple's App Store. Apple is the seller and handles the payment. I never receive your card number or any other payment details—only a confirmation from Apple that the subscription is valid. See the Terms of Use for the subscription terms.
Legal basis
Your account, golf profile, subscription, and usage limit are processed to perform the contract with you to provide the app (GDPR Article 6(1)(b)). Product analytics are processed for my legitimate interest in finding failures and improving the app flow (Article 6(1)(f)). The data is deliberately limited, and you can stop future product analytics at any time under Profile → Privacy.
Who sees your data
I do not sell your data and do not use it for advertising. I use Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Functions, and Crashlytics) as a data processor for sign-in, storing the account data listed above, and anonymous crash reports. Firebase data is stored in the United States, and the transfer relies on the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework.
I use Amplitude with EU data residency for pseudonymous product analytics. Amplitude receives a random account ID, a random installation ID, and the bounded events described above. The account ID lets events from your devices form one usage history while product analytics are enabled. Subscription events contain only the entry point, monthly/yearly plan, and lifecycle events such as purchase, renewal, refund, and expiry—never a price or transaction ID. Crash reports may include bounded technical context such as the feature, processing stage, recording/import, camera angle, club category, and free/Pro state. Your Firebase user ID, Apple identifiers, swing videos, file paths, raw error text, measurements, analysis results, and swing score are not sent to Amplitude or Crashlytics. Apple handles sign-in and payment as an independent controller under its own privacy policy.
How long I keep it
Account data is kept for as long as you have an account. Product analytics are retained for no more than 14 months. If you delete your account in the app, account data is deleted immediately and a deletion request is submitted for product analytics; Amplitude completes such requests within 30 days. Videos and analyses stay on your device until you delete them or uninstall the app.
Your rights
You have the right to access, correct, and erase your data, to restrict or object to the processing, and to data portability. You can delete your account and all account data yourself under Profile → Delete account, stop future product analytics under Profile → Privacy, or ask me by email.
If you believe I process your data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Children
FormCaddie is not directed at children under 13, and I do not knowingly collect data about them.
Changes
If this policy changes, I update the date at the top. Significant changes will be announced in the app.