Privacy Policy

1. Introduction

Pin High Tech Ltd (“we”, “us”, “our”), a company registered in England and Wales, is the data controller for personal data collected through the MyCaddi application (“the App”).

We are committed to protecting your privacy and handling your data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

2. Data We Collect

Account information — name, email address, age confirmation (that you are 16 or older), and authentication method (email/password, Apple ID, or Google account).

Profile information — gender, dominant hand, handicap, home course, shot shape, typical miss pattern, and club bag composition (clubs and distances).

Golf data — round scores, shot-by-shot data, club selections, course played, and tee selection.

Location data — GPS coordinates during active rounds, used for distance calculations, course navigation, and AI caddy recommendations. Location is only collected while you are actively playing a round with the App open.

Device and usage data — device type, operating system version, app version, and general usage patterns (e.g. features used, session duration). We do not collect advertising identifiers.

Cookies (MyCaddi Coach web app only) — when you sign in to the MyCaddi Coach web app at coach.mycaddi.co.uk, we set one cookie that keeps you signed in. It is strictly necessary, cannot be read by the page’s scripts, is used for nothing else, and expires after 30 days or when you sign out. The web app also remembers your light or dark theme choice in your browser. We use no analytics or advertising cookies. The MyCaddi app itself uses no cookies.

Payment data — we do not collect or store payment card details. All payments are processed by Apple (App Store) or Google (Play Store), and we receive only a confirmation of your subscription status.

3. How We Collect Your Data

Directly from you — when you register, complete onboarding, update your profile, or play rounds.

Automatically — GPS location during active rounds, device information, and app usage analytics.

From third parties — basic profile information from Apple or Google if you choose OAuth sign-in (name and email only).

4. Legal Bases for Processing

We process your data under the following legal bases:

• Contract — processing necessary to provide the MyCaddi service (account management, AI caddy features, statistics, handicap tracking).
• Consent — location data collection during rounds, sharing your game with a coach you accept (section 6), and any optional communications we may send. You can withdraw any of these consents at any time.
• Legitimate interests — analytics to improve the App, security monitoring, and aggregated benchmarking data. We balance these interests against your rights and freedoms.

5. How We Use Your Data

• AI caddy recommendations — your golf data, location, and profile are used to generate personalised club selection, strategy, and course management advice.
• Handicap tracking — round scores are used to calculate and update your handicap.
• Performance insights — your statistics are analysed to identify trends, strengths, and areas for improvement.
• Benchmarking — gender and handicap data may be used in anonymised, aggregated form to provide comparative statistics (e.g. distance percentiles). If you select “Prefer not to say” for gender, you receive neutral benchmarks.
• Social features — challenges, leaderboards, and friend activity (Premium tier). Leaderboards include rounds in progress: if you allow friends to see your rounds, they can see which course you are playing, your score so far, how many holes you have played, and when you last recorded a score, while you are still on the course. You control what is visible to others, and can turn this off at any time in Privacy settings.
• Service improvement — aggregated, anonymised data helps us improve AI accuracy, course data, and app features.

6. Sharing Your Game with a Coach (MyCaddi Coach)

MyCaddi Coach is our app for golf coaches. Nothing is shared with a coach unless you accept their invite in MyCaddi. When you do, you choose what they can see:

• Rounds & scorecards — courses, dates and hole-by-hole scores.
• Shot-by-shot detail — club, distance, lie and result of each tracked shot, including where on the course each shot started and finished. Only available together with rounds.
• Stats & strokes gained, club distances, handicap and goals.

Whatever you choose, a coach you are linked to always sees your name, profile picture and home course, which of these categories you share, and when you accepted their invite.

A coach never sees your caddy conversations, your AI caddy profile, your round plans or your social activity.

You can change what you share, or stop sharing altogether, at any time in MyCaddi’s Coach tab. A coach can also end the link. Either way their access to your data stops immediately; your name stays in the coach’s list of past students, next to any notes they wrote. We keep a record of each time you grant, change or withdraw sharing.

The legal basis for sharing your data with a coach is your consent, which you can withdraw at any time as described above.

Coach notes — a coach can write notes about you and your lessons in MyCaddi Coach. A note is private to the coach unless the coach chooses to share it with you. Shared notes and lessons appear in MyCaddi’s Coach tab, exactly as the coach wrote them, stay readable after the link ends, and are included when you export your data. The coach can stop sharing a note at any time. A coach keeps the notes they wrote after the link ends, but cannot add new ones. Notes are deleted if either you or the coach deletes their account.

Messages with your coach — if you are 18 or over, you can send your coach notes and questions, and you and your coach can reply to each other under a lesson, a round or a note. We use the date of birth in your profile to check your age. Your coach sees your messages and when you have read theirs, and you see when they have read yours. Messages stay readable to both of you after the link ends, but neither of you can send new ones. They are included when you export your data, and deleted if either of you deletes their account. We send push notifications about new lessons and replies, which you can turn off in MyCaddi’s notification settings.

Swing videos — a coach can film your swing in MyCaddi Coach, or add a video of it, and put it on a lesson; they can draw lines and angles over it. You see a video when the coach shares the lesson it is on, and you keep it after the link ends, as with lessons. If you are 18 or over, you can also send your coach videos of your swing with a note; your coach sees those, and nobody else does. We keep each video exactly as it was filmed, at its original quality and frame rate, and may make a copy that plays in every browser. Videos are stored in the United Kingdom (Microsoft Azure, UK South), are never public, and are reached only through links that expire within hours. A coach’s videos of you are your personal data: they are included (as links) when you export your data, and deleted from storage, not just hidden, if either of you deletes their account. A coach can delete a video they added at any time; you can delete a video you sent until it has gone to your coach. A video you open in MyCaddi is also saved on your phone so it plays without a signal; it stays there until the lesson is removed or you delete the app.

If you are a coach — we hold your coach profile (display name, club or academy, qualification, location and bio), your invites, your notes, your messages and your videos, including your own library of clips that are not about a student. Your videos have a storage allowance of 50 GB; we warn you as it fills and never delete a video to make room. You can download your library at any time. If you use MyCaddi Coach on the web without the iPhone app, we may send you a daily email listing what your students have sent; you can turn it off in Settings. Golfers you invite see your display name, club or academy and qualification, before and after they accept. You may only use a golfer’s data to coach them.

7. On-Device Processing

MyCaddi uses an on-device AI model that runs directly on your phone. When using the Free tier’s on-device caddy, your golf data is processed locally and does not leave your device for AI purposes.

The Premium cloud caddy sends relevant round data to our servers for deeper analysis. This data is processed solely to generate your caddy recommendations, is not used for any other purpose, and is not sold.

8. Third-Party Services

We use the following third-party services to operate the App:

• Microsoft Azure (UK South region) — cloud hosting and infrastructure.
• Golfbert and GolfAPI.io — course data (layouts, hole information, coordinates). No personal data is shared with these providers.
• Mapbox — map rendering. Location data is shared with Mapbox during active rounds to display course maps. See Mapbox’s privacy policy.
• Apple App Store / Google Play Store — payment processing for Premium subscriptions.
• Azure Communication Services — transactional emails (account verification, password reset).

We do not sell your personal data to any third party. We do not share your data with advertisers.

9. Data Retention

• Active accounts — your data is retained for as long as your account is active.
• Deleted accounts — upon account deletion, your personal data is permanently removed within 30 days. Backup copies may persist for up to 90 days before being purged.
• Aggregated data — anonymised, aggregated data (e.g. average distances by handicap range) may be retained indefinitely as it cannot be linked back to you.

10. Your Rights

Under UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data. You can also update most information directly in the App.
• Erasure — request deletion of your data. You can delete your account through the App at any time.
• Data portability — request your data in a commonly used, machine-readable format.
• Restrict processing — request that we limit how we use your data.
• Object — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@pinhightech.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

11. International Transfers

Your data is primarily stored and processed in the United Kingdom (Azure UK South region).

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including:

• UK adequacy decisions for the receiving country
• Standard Contractual Clauses (SCCs) approved by the ICO
• The provider’s participation in recognised certification frameworks

12. Children

MyCaddi is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete that data promptly.

If you believe a child under 16 has provided us with personal data, please contact us at privacy@pinhightech.co.uk.

13. Security

We take reasonable technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS) and at rest
• On-device AI processing for the Free tier, minimising data transmission
• Secure authentication via industry-standard protocols (OAuth 2.0, bcrypt password hashing)
• Access controls limiting who within our organisation can access personal data

No system is completely secure. If we become aware of a data breach that affects your rights, we will notify you and the ICO in accordance with our legal obligations.

14. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days’ notice via email or an in-app notification.

The “Effective date” at the top of this page indicates when the policy was last updated. We encourage you to review this page periodically.

15. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us:

Pin High Tech Ltd
Email: privacy@pinhightech.co.uk