Sidekick Golf - Privacy Policy

Effective date: 8 September 2026

Sidekick Golf ("Sidekick", "we", "us") makes the Sidekick mobile app for iOS and Android. This policy explains what the app collects, why, who we share it with, how long we keep it and the rights you have over it. We are the data controller for that data.

What this policy covers. The Sidekick mobile app and the account behind it. The marketing site at sidekick.golf/privacy and the Sidekick Sync Chrome extension at extension-privacy.html have their own policies, because they collect different things for different reasons.

What we collect

Account information

• Email address — to create your account, sign you in, and send you service emails such as password resets and invitations.
• Name — shown in your profile and to your coach if you have one.
• Password — hashed with bcrypt before it is stored. We never store or transmit your password in plain text, and we cannot read it.

Golf profile

• Handicap index, driver carry distance, 7-iron carry distance and shot shape — used to generate estimated club distances when you have not imported any shots of your own.

Shot and club data

• Shot metrics — carry distance, total distance, lateral dispersion, club name and session date. You import these yourself from a CSV file or the Sidekick Sync Chrome extension, or your coach imports them for you.
• Club statistics — the averages and dispersion figures calculated from those shots.

Location

• Precise location (GPS) — used to place you on the course map and to measure distances. It is also sent to our servers, because the weather adjustment is calculated there and not on your device: we need the coordinates to fetch the conditions for where you are.
• Coordinates are used and discarded for a weather lookup, except when you generate a round card. A round card is a saved document, so the course location and elevation are stored with it, against your account, until the card expires or you delete it.
• Location is only collected while the app is open and you have granted the permission. You can withdraw it at any time in your device settings; the map and distance features stop working, and nothing else does.

Subscription and purchase data

• Your subscription tier, status, billing interval and renewal date. Purchases made in the app go through the App Store or Google Play; purchases made by a coach on the web go through Stripe.
• We never see or store your card details. They are handled entirely by Apple, Google or Stripe.

Identifiers

• Your Sidekick user ID is shared with RevenueCat, our subscription provider, so that a purchase made on the App Store or Google Play can be matched to your account. Without it, you would be charged and not receive access.

Usage

• The date you were last active, so a coach can see whether a player on their roster is actually using the app.
• We do not use any analytics, advertising or tracking SDK. Nothing in the app profiles you or follows you across other apps or websites, and we do not sell data to anyone.

Stored on your device only

• Your sign-in token, your theme and settings, and a cached copy of your shots so the app works offline. Signing out clears the token and the cache.

Why we are allowed to process it

Under the UK GDPR we rely on:

• Performance of a contract (Article 6(1)(b)) — your account, your golf data, the weather adjustment, and your subscription. These are the service you signed up for.
• Consent (Article 6(1)(a)) — precise location. You grant it through your device's permission prompt and can withdraw it there at any time.
• Legitimate interests (Article 6(1)(f)) — keeping the service secure, diagnosing faults, and preventing abuse. We weighed this against your interests and use the minimum data needed.

Who we share it with

We share data only with the processors below, only for the purpose given, and never for their own marketing. We do not sell personal data.

We also run our own error monitoring on our own infrastructure. It records technical details of failures — it is not a third party and is not analytics.

Some of these processors are outside the UK. Where that is so, transfers are covered by the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or an equivalent safeguard.

Coaches and organisations

Sidekick is built for coaching, so some data is shared with a person, not just a company. If you accept a coach's invitation:

• Your coach can see your name, email, club distances, dispersion statistics and shot data, and when you were last active.
• Your coach can import shots for you and delete shots from your account.
• If your coach pays for your subscription, they can see and change your plan, and can cancel it.
• Your coach cannot see your password, and cannot sign in as you.

Leaving a coach's roster stops that access. Your shots stay in your own account.

How long we keep it

• While your account is active, we keep your account, golf profile, shots and club statistics.
• Round cards expire on their own and are deleted after that.
• When you delete your account, your data is removed from our live systems immediately.
• Backups. We take daily encrypted backups for disaster recovery. Deleted data can persist in those backups for up to 30 days, after which they are overwritten. We do not use backups to restore individual deleted accounts.

Deleting your account

You can delete your account and everything in it from inside the app — no need to ask us:

• Open Sidekick and go to Profile.
• Scroll down and tap Delete Account.
• Type DELETE to confirm.

This permanently removes your account details, golf profile, imported shots, club statistics, saved courses and round cards, and cancels any subscription you bought directly. It cannot be undone. If you are a coach with players still on your roster, you will be asked to remove or transfer them first, so that nobody loses access to something you are paying for.

A subscription bought through the App Store or Google Play must also be cancelled in your device's subscription settings, or the store will keep billing you. Deleting your account does not cancel a store subscription.

Your rights

Under the UK GDPR you have the right to:

• Access a copy of your data. Most of it is visible in the app; email us for a full export.
• Correct anything inaccurate — your profile is editable in the app.
• Delete your data, as above.
• Port your data to another service, in a machine-readable format.
• Restrict or object to processing based on our legitimate interests.
• Withdraw consent for location, in your device settings, at any time.

Email support@sidekick.golf to exercise any of these. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Security

• All traffic between the app and our servers is encrypted with TLS.
• Passwords are hashed with bcrypt and a per-user salt.
• Your sign-in token is held in your device's secure storage — the iOS Keychain or the Android Keystore.
• Backups are encrypted and stored separately from the servers they came from.

Children

Sidekick is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Subscriptions

• Sidekick offers auto-renewing monthly and annual subscriptions through the App Store and Google Play, and through Stripe when a coach pays on your behalf.
• Payment is taken at confirmation of purchase and renews automatically unless cancelled at least 24 hours before the end of the current period.
• Manage or cancel a store subscription in your device's App Store or Google Play settings. A coach-paid subscription is managed by your coach.

Changes to this policy

We will update this page when what we do changes, and move the effective date at the top. If a change materially affects how we use your data, we will tell you in the app or by email rather than relying on you noticing.

Contact

Questions, or to exercise any right above: support@sidekick.golf.