Your swing stayson your phone.

By default, everything. Your swing videos, the skeleton the app extracts from them, your scores and history, your golfer profiles and their names, heights and handicaps — all of it is stored on your iPhone and never sent to us.

You do not need an account to use Coach.Cloud Golf. If you sign in with Apple, we keep the Apple user identifier and email in your device's Keychain so the app can recognise you across reinstalls. There is no server-side account, and signing out removes them from the device.

Separately, you can sign in to a Coach.Cloud account to work with a coach. That is optional too — see "Working with a coach".

If you turn on "Share anonymous swing data", the app uploads the measurements it has already worked out on your device: the positions of your joints through the swing, the timing of each swing stage, the resulting score, and context such as club, camera angle and — if you provided them — your handicap band, swing side and height.

No video is included. No name, account, email or location is included. Uploads carry an anonymous identifier generated on your device so that your uploads can be grouped, so that the same golfer never lands on both sides of a model's training and testing split, and so that you can ask us to delete them later.

We use this only to improve the models that read swings. We do not sell it, and we do not use it for advertising or profiling.

You can turn this off at any time in Settings. Turning it off stops anything new being uploaded; it does not remove what was already sent — see "Deleting your data".

If you turn on "Share anonymous usage analytics", the app sends a short, fixed list of events — things like "a swing was recorded" or "a share link was created" — and, if the app crashes, a report of what the code was doing when it failed. We use these to see which features matter and to fix what breaks.

These events carry no name, email or location and nothing you type. They are keyed by a random identifier created only for this purpose and linked to nothing else — not even the anonymous swing-data identifier — and turning the setting off stops collection and deletes that identifier from your device.

They are processed for us by PostHog on servers in the European Union and used for nothing except understanding and improving the app. Off by default; change it any time in Settings.

One thing is counted without asking: overall totals, across everyone, of how many times the app was opened and how many swings were recorded and analysed.

Each count is a bare "add one". It carries no identifier of any kind, nothing is stored on your device to send it, and our server keeps only the running totals — never individual records. Like the counter above a shop door, it can say how many, and can never say who.

Two separate things can send a video off your device, and neither is on by default.

Sharing a swing to the web publishes one swing to a public link at share.coach.cloud that you choose the lifetime of — 24 hours, 3 days or a week. Anyone with the link can watch it. Sharing also consents to that clip being kept for up to 90 days to help train our models. You can stop a share at any time, which removes the public page immediately.

Before it uploads, you can keep "Blur my face" on — the app renders a new, blurred copy of the clip on your device and uploads that instead of the original. If blurring cannot be completed, the share fails rather than send an unblurred clip.

"Include swing video" adds trimmed, silent copies of your swings to the anonymous training upload. This is switched off in the app and disabled on our servers; it will not be enabled without an updated policy and a fresh choice from you.

Video showing a recognisable person is personal data even with no name attached. We treat anything you share publicly as identifying you, because it may.

If you sign in to Coach.Cloud in the Coach tab, the app can find Coach.Cloud golf coaches and ask one to link with you. The coach sees your name and email, and any note you add. Your Coach.Cloud sign-in is kept in this device's Keychain; signing out removes it.

Once a coach accepts, you can send them swings for review, one or several at a time. That sends each clip — blurred first, if you choose — and the app's analysis of it: score, swing stages, faults, the skeleton and club track, ball flight and Apple Watch data. Unlike a public link, a swing sent to a coach is not anonymous: your coach knows it's yours, because that's the point.

Coach.Cloud keeps the copies your coach sees for the time you choose — 7, 30 or 90 days, or the time an online review with that coach sets — and they are not used to train models. The originals stay on your devices. Each send uses one swing review from your plan with that coach, or one online review.

The app never sells you anything. Plans with a coach are arranged with them on coach.cloud.

If you turn on iCloud sync, your swings and their analysis are copied between your own devices through your private iCloud account. This uses Apple's infrastructure under your Apple ID. We have no access to it, and it is not part of any training data.

If you use the Apple Watch app, wrist motion is sent to your iPhone over Apple's device-to-device link and stored alongside the swing. It leaves your devices only if you have turned on anonymous data sharing.

If you pair a second iPhone as an extra camera, the two phones talk directly over an encrypted local connection. Clips travel phone to phone and are deleted from the second device after delivery. No server is involved.

The camera and microphone are used to record swings. Audio is used to detect the strike; recordings you export keep their audio, and clips prepared for training have it removed.

Photo library access is add-only and is requested only when you export a swing or a swing-sequence image. The app cannot read your library with this permission; importing a video uses Apple's picker, which shows us only the clip you chose.

We do not request location, we do not use advertising identifiers, and we do not track you. The only analytics in the app is the optional, off-by-default kind described above, plus the identifier-free totals.

Anything on your device stays until you delete it. Deleting a swing removes its video, analysis and any related files.

Publicly shared clips are removed when the link expires or when you stop the share. Clips retained for training under that consent are deleted within 90 days.

The anonymous measurements derived from shared swings are kept while the models are in active development, because they are what each new model is trained on. They carry no name or account.

Settings → Help improve Coach.Cloud Golf → Your Shared Data shows the anonymous identifier your uploads are stored under and lets you request their deletion. We remove the uploads themselves and the record that links them to that identifier.

Three honest limits. We cannot delete what we cannot identify — if you have never shared anything, there is nothing of yours to find. The anonymised measurements already drawn from your swings are not removed, because they are what the models are trained on; once the linking record is deleted, nothing connects them to you or your device. And a model that has already been trained cannot be un-trained: deletion removes stored data, not a model's prior learning.

You can also ask us for a copy of what we hold under that identifier, or ask us to correct it, using the same contact route.

Shared data is stored on Amazon Web Services; the optional watch-data upload path and the anonymous totals use Cloudflare; and optional usage analytics and crash reports are processed by PostHog on servers in the European Union. All of them act on our instructions and only for storing and processing what is described here.

Public share pages are served from our own infrastructure. Apple provides sign-in and iCloud sync under its own privacy terms.

Coach.Cloud Golf is not directed at children and we do not knowingly collect data from them. Range and course footage often includes other people, including children, in the background.

Anything you share publicly is your decision about other people as well as yourself. Please only share clips you are comfortable making public. If a clip you share shows someone who has not agreed to it, stop the share — it takes effect immediately.

Depending on where you live, you may have the right to access, correct, delete or export the data we hold about you, to withdraw consent, and to complain to your data protection authority. Where we rely on your consent, you can withdraw it in Settings at any time and it applies from that moment.

Because the app is built to work without an account, most of these rights are exercised directly on your device — the data is already yours and already there.

If we change how any of this works, we will update this policy and the version at coach.cloud/privacy/golf together, and ask again where the change needs a fresh choice from you.