Privacy Policy

Plain-English summary: we collect the minimum needed to match golfers and run the AI Caddy. Most Caddy analysis happens on your device, your full swing videos never leave it, and we only send data to an outside AI service when you choose to run a paid AI feature. We don't sell your data or use it for outside advertising. This policy pairs with our Terms of Service.

What we collect

• Account + profile (name, username, email, home course, handicap, skill level, preferred times, playing style, vibes)
• Availability posts, rounds, groups, and attendance you create
• Scores and optional player ratings you record
• A swing journal — the results of your AI Caddy analyses (summaries + measured metrics), not your video
• Shot results you choose to log to improve your estimates
• Minimal technical logs for security (e.g. rate-limit / login-throttle records)

Camera, microphone & location

• Used only when you open a Caddy tool or the on-course tracker and grant permission.
• Camera frames are analyzed on your device; only a small curated set is sent out if you run a paid AI feature (see below).
• Microphone is used live to detect the “click” of impact — it is not recorded or stored.
• Location/GPS powers shot distances and weather; your coordinates are used live and (when Ghost Mode is off) sent to the weather provider to fetch a forecast.
• Ghost Mode (Profile or the Ghost toggle in the nav) is a device-local privacy shield. While it is on: live GPS is not sent to our servers or third parties, satellite map tiles are paused, crowdsourced pin/tee GPS tags are disabled, and AI features that leave this device (camera frames or text prompts to outside models) are blocked (server-enforced). Yardages and on-device analysis still work.
• Airplane course packs — optional downloads of scorecard + green/tee GPS into on-device storage so you can track a round with no signal. Packs never auto-sync mid-round.
• Ghost secure packs — with Ghost Mode on, packs download via opaque short-lived tokens (no course id in the URL path) and are stored AES-GCM encrypted under a passphrase only you know. Each save pulls a cover bag of decoy courses (typically ~5) in shuffled order so network traffic doesn't map 1:1 to a single course. Course names/coords are not kept cleartext on disk. We never receive your passphrase.
• Cover-traffic course discovery — GPS “start my round” snaps your coordinates to a coarse grid and returns a shuffled bag of nearby courses; your phone picks the real nearest course locally.

What stays on your device

Your full swing videos are saved in your browser's on-device storage and are never uploaded to us. Your personal swing calibration, per-club learning, Ghost Mode preference, airplane course packs, and small preferences also live locally. Clearing your browser storage removes this data — we can't recover it.

AI features & third parties

When you tap a paid AI feature, a curated set of frames/crops is sent to a third-party AI provider to generate the read. We use a few outside services, each under their own privacy policies:

• AI analysis — xAI (Grok) and Anthropic (Claude)
• Weather — a public forecast API (receives course coordinates)
• Payments — Stripe (we never see or store full card details)
• Hosting & database — standard cloud infrastructure

How we use it

• Show your availability to players in your groups and generate foursome suggestions
• Run the AI Caddy and personalize your estimates over time
• Improve the product using aggregated, anonymized data — including reusing identity-stripped coaching guidance to enrich the free coaching library

We do not sell your data and do not use it for advertising outside the golf experience.

Cookies & storage

We use a sign-in session cookie to keep you logged in, and your browser's local storage for preferences and the on-device data above. We don't run third-party advertising trackers.

Your control

• Edit or delete your profile, availability, and posts anytime from your Profile page
• Change your password from Profile → Password, or use the signed-out reset link
• Delete your saved swing videos from your device anytime (they were never on our servers)
• Leave any group — past rounds stay in that group's history (like a paper scorecard)
• Delete your account yourself from Profile → Delete account (password + confirm). Or email us and we'll help within 30 days

Security & retention

We keep your data only as long as your account is active or as needed to run the service, then delete or anonymize it. We protect sign-in with brute-force throttling and rate limits, and restrict access to private groups and rounds. No system is perfect; during Beta we are actively hardening security.

Children

FindAFour isn't directed to children under 13, and we don't knowingly collect their data. If you believe a child has signed up, contact us and we'll remove the account.

Beta notes

This is a public Beta. We may reach out to early users for feedback — you can opt out of any research request. Material changes to this policy will be reflected by the “Last updated” date.

Contact

Questions or deletion requests? Email hello@findafour.com. We read every message.