Privacy Policy

1. Who We Are

Kinetic Golf is an iOS application developed and operated as an independent product. For any privacy-related enquiries, contact us at privacy@kineticgolf.app.

2. Data We Collect

When you use Kinetic Golf we collect the following information:

• Account data: Email address and password (stored securely via Supabase Auth — passwords are hashed and never stored in plain text)
• Profile data: Display name, golf handicap, season dates, training preferences, experience level, and equipment
• Training data: Workout logs, sets, reps, weights, RPE scores, and session timestamps
• Recovery data: Readiness scores, soreness areas, and mobility notes you choose to log
• Tee time data: Golf round dates, course names, and round types you add
• Usage analytics: Anonymous product events (e.g. "session started", "onboarding completed") collected via PostHog to help us improve the app

We do not collect location data, health data from Apple Health, payment data (handled by Apple), or any data from your device beyond what is described above.

3. How We Use Your Data

• To generate and personalise your training plan
• To protect your training around upcoming tee times
• To track your progress and provide session history
• To send training reminders (only with your permission)
• To improve the app using aggregated, anonymised analytics

4. Data Storage & Security

All user data is stored in Supabase, hosted on AWS infrastructure in the EU West region. Data in transit is encrypted via TLS. Data at rest is encrypted by Supabase. Row-level security policies ensure you can only access your own data.

5. Google Calendar Integration

Kinetic Golf offers an optional Google Calendar integration. If you choose to enable it, the app will request access to your Google Calendar using Google OAuth.

What we access: When you enable Google Calendar sync, Kinetic Golf creates and manages a dedicated calendar named "Kinetic Golf 🏌️" in your Google account. We read, create, update, and delete events only within this calendar to keep your training schedule in sync.

What we do not do: We do not read, modify, or access any other calendars in your Google account. We do not share your Google Calendar data with any third party. We do not store your Google Calendar data on our servers — events are written directly to Google Calendar via Google's API at the time of sync.

How to revoke access: You can disconnect Google Calendar at any time from Account Settings inside the app. You can also revoke access directly from your Google Account permissions page. Revoking access will stop future syncs and remove the "Kinetic Golf 🏌️" calendar from your Google account on the next sync attempt.

Kinetic Golf's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Sharing

We do not sell your data. We do not share your personal data with third parties except:

• Supabase — database and authentication provider
• PostHog — anonymised product analytics (no personally identifiable information is sent)
• Apple — in-app purchase and push notification infrastructure
• Google — solely to write training events to your Google Calendar if you have enabled that feature (see Section 5)

8. Your Rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your training data

To exercise any of these rights, email privacy@kineticgolf.app and we will respond within 30 days.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently removed within 30 days.

10. Children

Kinetic Golf is not intended for users under 16 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes via email or an in-app notice.