Privacy Policy

1. Introduction

Swingbase LLC ("SwingBase," "we," "us," or "our") operates the SwingBase platform, a fantasy golf league and tournament management service available at swingbase.ai and related mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using SwingBase, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account information: When you sign in with Google, we receive your name, email address, and profile photo from your Google account. You also create a username during onboarding.
• Profile information: Bio, location, home course, profile visibility settings, and other details you choose to add.
• Golf data: Handicap index, GHIN number, scores, round details, and tournament results that you enter or that are recorded through platform activity.
• Social content: Posts, comments, reactions, follow relationships, and activity feed interactions.
• Payment information: When you register for paid tournaments or receive payouts, payment details are collected and processed by Stripe. We do not store your credit card numbers or bank account details on our servers.
• Communications: Messages, feedback, or support requests you send to us.

2.2 Information Collected Automatically

• Device and usage data:Browser type, operating system, IP address, pages visited, interaction patterns, and session recordings (with form inputs masked). You can opt out in Settings > Privacy.
• Cookies and local storage: We use session cookies for authentication (managed by our authentication provider) and local storage for preferences such as your selected role, organization, theme, and feature flag cache.
• Referral data: If you arrive via a referral link, we store the referral code in a cookie to attribute your sign-up to the referring user.

2.3 Gamification Data

We automatically generate and store experience points (XP), levels, badges, streaks, and achievement data based on your platform activity. This data is used to power leaderboards, challenges, and engagement features.

2.4 SwingTrace Camera and ML Data

SwingTrace is our optional in-app feature that uses your iPhone camera to record a swing and overlay the ball's flight path. How it works and what we collect:

• Video files stay on your device.Swing recordings are saved to your iPhone's Photos library. We do not upload, store, or transmit the video files themselves to our servers. Sharing a swing video with another user happens phone-to-phone via the iOS share sheet.
• On-device ML inference. Ball detection runs entirely on your device using a Core ML model bundled with the app. The pixel data of your camera feed never leaves the phone for inference purposes.
• Swing metadata we do store on our servers(when you save a swing): the player it was recorded for, hole number, recording duration, capture timestamp, a small still-frame thumbnail (≤ 64 KB JPEG) for the gallery preview, a tracer status (success/partial/failed), the count of trace points produced, and the local identifier of the video on your device so we can play it back from Photos.
• Improvement telemetry (opt-in by default, can be turned off):If you leave the "Help improve SwingTrace" toggle on (Settings → Privacy), we also store a compact log of per-frame ball-detection statistics from each recording — confidence scores, candidate counts, inference times, and the bounding box of the top detection. These numbers describe how the model behaved during the swing; they do not include video frames, audio, identity, or anything that could re-identify you. Total size is roughly 6 KB per swing. We use this data to improve ball-detection accuracy in future model versions. You can disable this any time in Settings; existing data can be removed by request.
• Trace-quality feedback (opt-in by default, can be turned off):When you tap "Looks great" or "Wrong" on a swing playback, we record your rating and any reason slug you select (e.g. "tracked something else"). This drives prioritization of which detection failures to fix next.
• Shot Detection (separate, opt-in beta feature):If you enroll in our shot detection beta, we use your phone's motion and audio sensors during a round to detect when you swing. With your explicit opt-in, short anonymized sensor windows around detected swings (a few seconds of accelerometer / gyroscope / audio feature vectors per shot) are uploaded for model training. Sensor windows are not video or raw audio; they are numeric feature arrays. You control this from Settings → Shot Detection.
• Camera permission. SwingTrace requires the iOS Camera permission. iOS prompts you the first time you open the feature; you can revoke it at any time in iOS Settings → Privacy → Camera → SwingBase, and the SwingTrace feature will simply stop functioning while the rest of the app continues to work.

We do not use SwingTrace data, frame statistics, sensor windows, or trace feedback for advertising, profiling individuals, or any purpose other than improving and operating the SwingTrace and Shot Detection features.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the SwingBase platform
• Create and manage your account, including authentication and profile display
• Calculate handicaps, maintain leaderboards, and power tournament and league features
• Process payments for tournament registrations and distribute prize payouts
• Generate AI-powered content such as tournament recaps, league summaries, and caddie chat responses. Before any data is sent to AI providers, personal identifiers (names, email addresses, and phone numbers) are automatically replaced with anonymous tokens (e.g. "Player 1") so the AI model never receives your real identity. Original values are restored only after the AI response is returned to our servers.
• Operate the referral program, including tracking referrals and awarding bonuses
• Send notifications about tournament updates, league activity, and social interactions
• Enforce rate limits and protect against abuse
• Analyze usage patterns to improve the platform experience
• Improve our SwingTrace ball-detection model and Shot Detection model using opt-in telemetry and your trace-quality feedback (see Section 2.4)
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate SwingBase. Each service processes data in accordance with its own privacy policy:

• Clerk — Authentication and identity management (Google OAuth sign-in, session management)
• Supabase — Database hosting and data storage
• Stripe — Payment processing for tournament registrations and payouts
• Vercel — Application hosting and deployment
• FirstPromoter — Referral and affiliate tracking
• Anthropic — AI-powered content generation (tournament recaps, league summaries, caddie chat). All personal identifiers are replaced with anonymous tokens before transmission; Anthropic never receives your name, email, or phone number.
• Upstash — Rate limiting and abuse prevention
• PostHog— Product analytics and session replay. We collect anonymous usage data (pages visited, features used, interaction patterns) and may record browsing sessions to understand how the platform is used and improve the experience. Session recordings capture page interactions such as clicks, scrolls, and navigation. All form inputs (passwords, emails, payment info) are automatically masked in recordings. You can opt out of all analytics and session recording at any time in Settings > Privacy.

We do not sell your personal information to third parties.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Public profile and leaderboards: Your username, scores, tournament results, and league standings may be visible to other users and the public depending on your profile visibility settings and tournament/league configuration.
• Organization administrators: If you are a member of an organization on SwingBase, organization administrators may see your name, email, handicap, and participation data.
• Service providers: We share data with the third-party services listed above to operate the platform.
• Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Cookies and Local Storage

• Authentication cookies: Managed by Clerk to maintain your sign-in session.
• Referral cookie: Stores referral codes from shared links to attribute sign-ups.
• Local storage:We store your selected role, organization, feature flag cache, and referral code in your browser's local storage for a seamless experience.
• Service worker: SwingBase is a progressive web app (PWA). A service worker may cache static assets and certain API responses for offline support and performance.
• Analytics cookies:PostHog uses cookies and local storage to track anonymous usage patterns and session replay data. These help us understand how features are used. You can disable this in Settings > Privacy by turning off “Allow Analytics.”

7. Data Retention

We retain your account information and golf data for as long as your account is active. Tournament results, league standings, and historical scores may be retained indefinitely for record-keeping and leaderboard integrity, even after account deletion.

If you delete your account, we will remove your personal identifiers (name, email, photo) and profile data. Anonymized or aggregated data may be retained for analytics purposes.

8. Your Rights and Choices

• Profile visibility: You can control who sees your profile by setting your visibility to public, followers-only, or private in your account settings.
• Notification preferences: You can manage your notification settings to control what communications you receive.
• Access and portability: You can request a copy of your personal data by contacting us.
• Deletion: You can request deletion of your account and personal data by contacting us. See Section 7 for details on what data may be retained.
• Correction: You can update your profile information at any time through your account settings.
• SwingTrace improvement program:Toggle off "Help improve SwingTrace" in Settings → Privacy at any time. Once disabled, no further per-frame statistics or trace-quality feedback will leave your device. Existing telemetry can be removed by request.
• Shot Detection beta: If enrolled, you can disable Shot Detection at any time in Settings → Shot Detection. Future sensor windows will not be uploaded; previously uploaded windows can be deleted by request.
• Camera access: Revoke or grant the iOS camera permission at any time via iOS Settings → Privacy → Camera → SwingBase.

If you are a resident of California, the European Economic Area, or another jurisdiction with applicable data protection laws, you may have additional rights under those laws, including the right to opt out of certain data processing. Contact us to exercise these rights.

9. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), row-level security in our database, secure authentication through Clerk, and automated PII tokenization for AI processing. When content is sent to third-party AI providers, personal identifiers such as names, email addresses, and phone numbers are automatically replaced with anonymous placeholder tokens before leaving our servers. The AI provider processes only the tokenized version; real values are restored on our side after the response is received. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

SwingBase is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. Your continued use of SwingBase after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Swingbase LLC
Email: privacy@swingbase.ai