What we keep,
and what we don't.

The data categories the service uses are listed below.

• Swing footage you record.The video clip is uploaded to our storage so the AI can read it (see § 02) and so you can return to it later. The clip is kept on the server alongside its analysis for as long as you keep the swing in your library; when you delete the swing in the app, the swing and its analysis are removed from your library and the clip is queued for removal from storage.
• The analysis and chat history the app returns. Stored on our server, tied to your account, and visible to you in the app on any device where you sign in. Deleted when you delete the swing.
• Account and coaching profile. Your name and email address, plus the OAuth identifier if you sign in with Apple or Google. We also store the coaching preferences you provide, such as skill level, goal, preferred club, and handicap. These details authenticate you, personalize the AI coaching, and associate your library with your account. A password is never stored in plain text.
• Your App Store purchase receipt, if you subscribe to Pro. Verified through our subscription management provider to confirm your entitlement; passed through Apple's StoreKit so we never see a card number.
• Feedback and AI-operation records. If you rate an analysis, we store the rating and any optional note you submit. We also store operational metadata about AI requests, including the operation type, model, token counts, completion status, and timestamps. Those usage records do not contain the prompt, swing footage, analysis, or chat text.
• Session and technical records. Our authentication service can store session timestamps, IP address, and user-agent information for security and account access. Product analytics records feature use, screen views, app lifecycle events, and sanitized error diagnostics, together with device model, operating-system version, app version, and a pseudonymous account identifier. We disable GeoIP enrichment and do not use this data for location analytics.
• Anti-abuse allowance ledger. To keep the free tier fair, we apply an HMAC one-way hash to the device identifier and, for Apple or Google sign-in, the provider identifier. The raw device identifier is never stored in the ledger. It contains only the hash, binding type, monthly bucket, analysis count, and expiry timestamp. Ledger entries expire automatically after thirteen months and are used only to prevent repeated account deletion or re-signup from resetting the free allowance. They are not used for advertising or cross-app tracking.

We do not embed session replay, screen recording, or behavior-recording tools. Our product-analytics processing is limited to the events and technical metadata described above and in § 04.

When you press Analyze, the app uploads the clip over TLS directly to our private storage. Our server then retrieves it and forwards it to a large multimodal model run by our AI provider. The model returns a written read; we save the read alongside the clip in your library and show it to you.

The model is configured so your clip is not retained by the provider for training and not used to improve a public model. We hold our subprocessors to the same standard; see § 04.

• We do not sell any data, ever, to any party, for any price.
• We do not show advertising in the app, and we do not share data with ad networks.
• We do not run session-replay, screen-recording, or behavior-recording tools.
• We do not train a public model on your swings; our subprocessor is contractually barred from doing so on its end as well.
• We do not track you across other apps or websites.

Each one is listed by the role it plays.

If we add another, we will add it to this list before it ships and note the change in § 07.

1. Delete a swing. Swipe left on any swing in your library and tap Delete. The clip, its analysis, and its chat thread are removed from your library and the clip is queued for removal from storage.
2. Delete your account. Settings; Delete account. Removes every swing, analysis, chat, digest, feedback note, and account-linked AI-usage record you have on our server; removes your stored clips from storage; requests deletion of your product- analytics person, events, and recordings; detaches your subscription record; and signs you out. The pseudonymous anti-abuse allowance ledger is not keyed to your account and remains only until its automatic thirteen-month expiry. There is no undo.
3. Cancel Pro. Done through your Apple ID, like any App Store subscription. Pro access continues through the paid billing period, and the 40-analysis allowance continues to reset on each monthly subscription anniversary while Pro remains active.
4. Email request. For anything that needs a human (subscription history, support correspondence, a copy of what we hold), email privacy@fairwayswing.app and we will respond within thirty days.

FairwaySwing is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If we learn that we collected personal data from a child under 13, we will suspend access and promptly delete it.

A parent or legal guardian who believes a child under 13 has used FairwaySwing should contact us at privacy@fairwayswing.app.

When the policy changes, the effective date at the top updates. If the change involves a new subprocessor or a new category of data, we will call it out plainly on this page, in the same coaching voice as the rest of it.

A real person reads every email sent to the address below. We are a small team and we answer within a few days at most.