Privacy Policy

1. Who we are

Caddie Live (the "service") is a golf scoring and rules-assistant app operated by Simon Berriman, a sole trader (freelance) based in Germany. For GDPR purposes, the data controller is Simon Berriman. Full contact details are in the Impressum. If you have any questions about how we handle your data, contact hello@caddielive.golf.

2. What we collect

Account information you provide:

• Email address
• Display name
• Handicap source (WHS Manual, CPI, or none) and, if you choose WHS Manual, the WHS index value you enter
• Optional: home club, country, profile photo, preferred currency

Activity data we generate as you use the service:

• Scores and rounds you record (solo and group)
• Friend connections you make
• Events you create or join
• Course data you submit
• Rulings you request from the AI assistant
• Credits used

Technical data:

• IP address (briefly, for rate limiting and security)
• Browser and device type
• App usage patterns (anonymous analytics)

We do not collect:

• Real-time location or GPS data
• Contacts or address book
• Banking or full payment card details (handled entirely by Stripe)

3. How we use your data

• To provide the service: scoring, leaderboards, friend connections, events, AI rulings
• To compute your Current Playing Index (only if you've chosen CPI mode)
• To manage your account and credit balance
• To send transactional emails (account confirmation, purchase receipts, occasional service notices)
• To improve the service: anonymous usage analytics

We do not sell your data to advertisers or third parties.

4. Legal basis for processing (GDPR)

• Contract performance: to provide the service you signed up for
• Legitimate interests: to improve and secure the service
• Consent: for marketing communications (opt-in only)
• Legal obligation: where required by law

5. Who we share with

We use a small number of service providers to operate Caddie Live. They process your data on our behalf under their own data protection terms:

• Supabase — database hosting and authentication
• Vercel — web hosting
• Stripe — payment processing
• Resend — sending transactional emails (account confirmation, sign-in links, security notices, receipts)
• OpenAI — AI processing for rules rulings and photo/text extraction
• Google — authentication (if you sign in with Google); some AI rulings may also be processed via Google's Gemini models
• Apple — authentication (if you sign in with Apple)
• Sentry — error and crash diagnostics (text and media are masked; we send only your user ID, not your email)

Other users see your display name, profile photo, public rounds, and the handicap value you've chosen to share (with its source label) when you connect as friends, join an event together, or appear on a shared leaderboard.

We may also disclose data if required by law.

6. Where your data is stored

Your data is processed by the service providers listed above. Some providers operate in the EU; some in the US under appropriate transfer mechanisms (Standard Contractual Clauses or equivalent). By using the service you consent to your data being processed in those regions.

7. Your rights (GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability — export your rounds and scores

To exercise any of these rights, contact hello@caddielive.golf or use the in-app account-deletion controls.

If you're an EU resident, you also have the right to lodge a complaint with your local data protection authority.

8. Data retention

• Active accounts: data retained for the duration of your account
• Closed accounts: personal data deleted within 30 days; aggregated/anonymised round data may be retained longer for service analytics
• Transaction records: retained for 7 years for legal and tax purposes

9. Cookies and similar technologies

We use essential cookies for authentication and session management; these are always on because the service can't function without them. With your consent, we also use Google Analytics to understand how the service is used — these analytics cookies load only after you accept them in the cookie banner, and you can decline or change your choice at any time. We do not use advertising cookies and we do not sell your data. See our full Cookie Policy for the complete list.

10. Children's privacy

The service is not intended for users under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will delete it.

11. Changes to this Policy

We may update this Policy from time to time. Significant changes will be notified to active users via email or in-app notice.

12. Contact

For privacy questions or data subject requests, email hello@caddielive.golf.