Effective 14 May 2026

Privacy Policy

Last updated: 14 May 2026

What we collect

When you create a ClarityCaddie account, we collect the information you provide directly:

Account information — your email address and display name, used to identify your account.
Swing thoughts and mental performance data — the thoughts, cues, notes, and round data you enter into the app. This is your content and it belongs to you.
Coach–player relationships — if a coach invites you (or you invite a player), we store that connection to power the coaching features.

Why we collect it

We use your data for two purposes:

To provide the service — storing your thoughts, delivering your Today's Thought, running Calm Start, and powering the coach dashboard.
To improve the product — understanding usage patterns (in aggregate, without identifying individuals) so we can make ClarityCaddie better.

We do not sell your data. We do not share your data with advertisers. We do not use your data to train AI models.

Third-party services

ClarityCaddie uses a small number of third-party services to operate. Here is the complete list:

Supabase— authentication and database hosting. Your account data and swing thoughts are stored in Supabase's infrastructure. Supabase acts as a data processor on our behalf.
ActiveCampaign — email communications. If you submit a coaching enquiry, your contact details are sent to ActiveCampaign to manage the email sequence. You can unsubscribe at any time.
Plausible Analytics — website analytics. Plausible is privacy-first and cookieless. It does not collect personal information, does not use cookies, and does not track you across sites.

Cookies and tracking

ClarityCaddie does not use third-party marketing cookies. We do not track you across other companies' apps or websites. We do not use advertising identifiers. We do not participate in ad networks or data-sharing arrangements with advertisers.

The only cookies we use are strictly functional — session cookies required to keep you signed in. These are first-party only and are not shared with anyone.

Data storage and security

Your data is stored securely in Supabase's cloud infrastructure. All data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorised personnel only.

Account and data deletion

You have the right to request deletion of your ClarityCaddie account and the personal data we hold about you, as set out in Article 17 of the UK General Data Protection Regulation. This section explains how to exercise that right, what happens when you do, and what we retain after deletion is complete.

How to request deletion. Open the ClarityCaddie player or coach app, go to Settings → Account → Delete My Account, and confirm. You will receive an email confirming that the deletion request has been initiated. If you cannot access the app, email privacy@claritycaddie.com from the email address associated with your account, with the subject line “Account Deletion Request”. We will verify your identity before proceeding.

What happens next — the 7-day window. When you request deletion, your account enters a seven-day soft-delete window. During this period your account remains accessible while your deletion is pending. If you change your mind, you can cancel the deletion at any time before the window closes by emailing support@claritycaddie.com from your account email address. Cancellation restores your account in full. This window exists to protect you against accidental or coerced deletion; the seven-day timer cannot be extended.

Permanent erasure. At the end of the seven-day window we permanently erase your authentication record, your player or coach profile, and all associated content — thoughts, practice debriefs, lesson summaries, journey progress, voice recordings, transcripts, uploaded media, device tokens, push notification subscriptions, session data, and any draft content not yet submitted. You will receive a second email confirming that erasure is complete. After this point, the data cannot be restored by us or by you.

What we retain after erasure, and why. A small set of records is retained where we are legally required or have an overriding legitimate interest. These records do not contain content you produced — no thoughts, no debriefs, no transcripts — and are minimised to what each legal basis requires:

Financial and tax records — invoice, payment, refund, and subscription billing records required under UK tax law and HMRC retention requirements. Retained for six years from the end of the accounting period in which the transaction occurred.
Anonymised audit logs — records of the deletion request itself (timestamp, request source, completion time) and any prior account security events. Personal identifiers are removed; only an irreversible reference token remains. Retained for three years for fraud prevention, security audit, and dispute resolution.
Aggregated and de-identified analytics — usage metrics that have been aggregated to the point where you cannot be re-identified. Retained indefinitely as part of our product analytics.

We do not retain any other category of data beyond these.

Coach accounts and player relationships. If you are a coach and you delete your account, your access to the coaching surface is revoked at the start of the seven-day window and the coach-player relationship records are cleared at the end of it. Your players' own accounts and data are not affected by your deletion — they remain under their own control (or, for minors, under the control of their Guardian Account as described in the Children's privacy section below).

Other rights. Deletion is one of several rights you hold under UK GDPR. For requests relating to data access, rectification, restriction, portability, or to object to processing, email privacy@claritycaddie.com. We will acknowledge any rights request within 72 hours and complete it within one calendar month of receipt, as required by Article 12 of the UK GDPR.

Children's privacy

ClarityCaddie's age requirements depend on the jurisdiction where you live and follow the thresholds set out in our Terms of Service.

In the UK, you must be at least 13 to create a ClarityCaddie account directly, in line with the UK Information Commissioner's Office age of digital consent.
In the EU, you must be at least the age of digital consent that applies in your member state — 16 by default under Article 8(1) of the GDPR, or a lower age (down to 13) where your member state has set one.

Younger players use ClarityCaddie through a Guardian Account, which a parent, legal carer, or authorised guardian creates and manages on the minor's behalf. The Guardian is the legal rights-holder for the minor's personal data and exercises data rights on the minor's behalf, as set out in our Terms of Service.

If you believe a minor is using ClarityCaddie without an appropriate Guardian Account in place, please contact us at hello@claritycaddie.com. We will investigate and either help establish an appropriate Guardian Account, or, where required by our retention or safeguarding obligations, delete the data.

Changes to this policy

If we make material changes to this policy, we will update the “Last updated” date at the top of this page. For significant changes, we will notify registered users by email.

Contact

For general questions, email hello@claritycaddie.com. For privacy-specific questions or rights requests, email privacy@claritycaddie.com.

Sports performance disclaimer

ClarityCaddie is a sports performance tool designed to help golfers organise their mental approach to the game. It is not a medical device, therapeutic service, or substitute for professional medical or psychological advice. If you are experiencing mental health difficulties, please consult a qualified healthcare professional.