Privacy Policy

Last updated: May 26, 2026 · Effective: May 26, 2026

This Privacy Policy describes how ShotGain ("ShotGain," "we," "us," or "our") collects, uses, and shares information about you when you use our mobile applications, website at shotgain.com, and related services (the "Service"). We respect your privacy and only collect what we need to deliver the Service and improve your golf game.

1. Information We Collect

Information you provide directly

• Account information — name, email address, and password (passwords are hashed by Supabase Auth; we never see them in plaintext).
• Golf data — shots, clubs, courses, scores, rounds, GPS coordinates of shots, and any notes you add. This is the data ShotGain uses to compute strokes-gained metrics and personalized recommendations.
• Voice notes / feedback — if you record audio bug reports or in-app feedback, the audio file is stored and may be reviewed by our team to fix bugs and improve the product.
• Subscription information — when you subscribe via Apple App Store or Google Play, those stores handle payment and share with us your subscription status, product ID, and anonymized transaction identifier via RevenueCat. We do not receive your full credit card number.

Information collected automatically

• Device and usage data — device model, OS version, app version, language, time zone, IP address (truncated/hashed for analytics), and how you interact with screens and features.
• GPS location — only when you grant location permission and only while you're actively logging a round. We use it to identify the course and shot positions. Background tracking is off by default.
• Web analytics — on shotgain.com we use Google Analytics 4 (measurement ID G-WJRGTWTNTZ) to count visits, see which pages convert, and measure where signups come from (Instagram, TikTok, etc.). GA4 sets first-party cookies and may collect approximate location and device info per its own policy.

2. How We Use Your Information

• Run the Service: authenticate you, store your rounds, compute strokes-gained, and give you tailored practice recommendations.
• Improve the product: identify bugs, prioritize features, and study aggregated trends across users (always de-identified for these aggregate analyses).
• Communicate with you: send service announcements, subscription receipts, and (with your opt-in) marketing emails. You can unsubscribe from marketing at any time.
• Measure marketing: attribute new signups to the channel they came from (e.g. an Instagram bio link) so we know what's working.
• Comply with law and protect users: detect fraud, enforce our Terms, and respond to lawful requests.

3. Service Providers We Share Data With

We don't sell your personal information. We share only what's needed with the providers below, each bound by contractual confidentiality and security obligations:

4. Children

ShotGain is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, please contact us at the address below and we'll delete it.

5. Your Rights & Choices

• Access & export — request a copy of your account data.
• Correction — fix anything inaccurate via in-app settings or by contacting us.
• Deletion — request full deletion of your account and all associated golf data.
• Marketing opt-out — unsubscribe from any marketing email via the link in the email footer.
• Cookie controls — disable GA4 via your browser settings or by installing the official Google Analytics opt-out add-on.
• EU / UK residents — you may have additional rights under GDPR, including the right to lodge a complaint with your data protection authority.
• California residents — you have CCPA rights including the right to know, delete, and opt out of "sale" (we do not sell).

To exercise any of these rights, email privacy@shotgain.com. We respond within 30 days.

6. Data Retention

We keep account and golf data while your account is active. If you delete your account, we permanently delete personal data within 30 days, except where we're required to retain it for legal, accounting, or fraud-prevention reasons.

7. Security

We use industry-standard measures: TLS for data in transit, encryption at rest via Supabase, secret management via Supabase Vault, and least-privilege access controls on our infrastructure. No system is 100% secure, but we take this seriously and disclose breaches as required by law.

8. International Transfers

Our infrastructure is primarily in the United States. If you access ShotGain from outside the US, your information may be processed in the US, which may have different data protection laws than your country. By using ShotGain you consent to this transfer.

9. Changes to This Policy

If we make material changes to this policy, we'll notify you via the email on file or via an in-app notice at least 30 days before the change takes effect. The "Last updated" date at the top reflects the current version.