Privacy Policy
DIPS Golf ("DIPS", "we") is operated by GoodDevs, TODO: registered address. We are the controller of the personal data described here. Contact: privacy@dipsgolf.com.
Our approach is simple: we collect what the app needs to help you improve, and nothing more. We don't sell your data, show ads, or use advertising trackers.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Email, sign-in identifier, display name | Create and secure your account | Contract |
| Handicap, goals, golf struggles, country, home course, playing frequency | Personalise content and your next step | Contract |
| Saved content, practice sessions, feedback, rounds and hole scores | Your library, round analysis and recommendations | Contract |
| Comments, professional insights, reports | Community features and moderation | Contract; legitimate interest (safety) |
| Credential applications and evidence; YouTube channel ID if you connect YouTube | Verify coach, professional or creator status | Contract |
| Profile photo, if you add one | Show your picture in your profile and next to things you post | Consent (optional; remove it any time) |
| DIPS AI answers you ask for (weekly focus, practice plans, suggestions, practice reviews) and how often you use them | Provide DIPS AI coaching and apply plan limits | Contract |
| Subscription status (trial, active, expired) | Provide DIPS Pro | Contract |
| In-app usage events (for example "practice completed"), device type, app version | Understand what helps golfers improve and fix problems | Legitimate interest |
| Security logs (IP address, request identifiers) | Prevent abuse and keep the service secure | Legitimate interest |
We don't collect your precise location, contacts or health data, and we only see a photo if you choose one as your profile picture. We remove location and other hidden details (EXIF data) from profile photos before storing them. Round data is entered by you, not tracked by GPS.
Content you import
When you share a link (for example a YouTube video), we store public information about it, such as the title, creator, description and thumbnail link, so that you and other golfers can find it. We don't download or host third-party videos. Videos play from the original platform through its official embedded player.
For TikTok links we store the public title, creator and thumbnail and refresh them at least every 30 days. For Instagram links we store only the link and the title you give it. Nothing is taken from Instagram, and the post is shown with Instagram's own embed. When a video plays inside DIPS, the platform that hosts it (YouTube, TikTok or Instagram) may collect data under its own privacy policy.
AI processing
We use an AI service (OpenAI) in two ways:
- Sorting golf content, for example deciding that a video is about fixing a slice. For this we send only public information about the content.
- DIPS AI coaching, only when you use it (your weekly focus, personalised practice plans, next-step suggestions and practice reviews). For this we send the golf data needed for the answer: your handicap, goals, struggles, round statistics (such as scores, putts, fairways, greens and penalties), practice time and your feedback on lessons. We never send your name, email address or account identifiers.
Our AI provider may not use this data to train its models, and we ask it not to store requests. AI answers are saved to your DIPS account so you can see them again. They're included in your data export and deleted with your account. DIPS AI gives golf practice suggestions, not medical or professional advice.
YouTube
DIPS uses YouTube API Services. By importing YouTube content or connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of data is covered by the Google Privacy Policy. If you connect your channel, we use read-only access to confirm you own it and to list your public videos. We keep your channel ID, not your Google password or access tokens. You can revoke DIPS's access at any time in your Google security settings; we then delete data obtained through that access within 7 days.
We refresh the YouTube information we store (such as titles, descriptions and thumbnails) at least every 30 days. If a video is removed or made private, we delete its YouTube information.
Who we share data with
We use these service providers to run DIPS. Each processes data only on our instructions:
- Google Firebase: sign-in and authentication.
- Cloudflare: hosting, database, file storage and security.
- RevenueCat, Apple and Google: subscriptions. RevenueCat receives a random account ID, not your email.
- OpenAI: content classification and DIPS AI coaching (as described above).
Other golfers see your display name alongside comments or insights you post. Coaches and creators see aggregated, anonymous statistics about their content, never who you are. We disclose data if the law requires it.
International transfers
Our providers may process data outside your country, including in the United States. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep data
We keep your data while your account is active. When you delete your account, we delete your personal data immediately from our live systems. Encrypted backups are overwritten within 30 days. Moderation and admin records are kept with your identity removed. Security logs are kept for up to 30 days.
Your rights
Depending on where you live (including under the GDPR, UK GDPR, POPIA and US state privacy laws), you can:
- access your data and export it (in the app under Profile → Settings → Export my data)
- correct your data
- delete your account and data (see how)
- object to or restrict certain processing
- complain to your data-protection authority
To exercise a right, email privacy@dipsgolf.com. We reply within 30 days.
Security
Data is encrypted in transit and at rest. Access is restricted to authorised systems and staff, and administrative actions are logged.
Children
DIPS is not directed at children under 16, and we don't knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
Changes
We'll update this page and the date above when this policy changes, and tell you in the app about significant changes.