CaddieBib is an AI golf caddie. To tell you which club to hit, it has to know a great deal about you — where you are standing, how far you carry a 7‑iron, how you miss under pressure, and what you just said out loud. This policy sets out exactly what we collect, exactly who we send it to, and exactly what you can do about it. We have tried to write it so that it is worth reading, not just worth publishing.
Section 1Who we are
CaddieBib is operated by [LEGAL ENTITY NAME], a [STATE] limited liability company (“CaddieBib”, “we”, “us”, “our”). We are the business responsible for the personal information described in this policy — the “controller”, in the language of privacy law.
Registered address: [MAILING ADDRESS]
Privacy contact: hello@caddiebib.app
Section 2Scope of this policy
This policy covers:
- The CaddieBib mobile app for iOS and Android.
- The caddiebib.app website, including the waitlist sign‑up form.
- Our backend services, which process what the app sends us.
It does not cover third‑party services you reach through CaddieBib but which are operated by someone else — for example, tapping a practice drill opens YouTube, and what happens there is governed by Google’s privacy policy, not ours.
Section 3What we collect
We group this by how the information reaches us, because that is usually what people actually want to know.
3.1 — Information you give us directly
| What | Detail |
|---|---|
| Account identity | Your name and email address. If you sign in with Apple or Google, we receive these from them as part of the sign‑in. If you use Apple’s Hide My Email, we only ever see the relay address Apple generates. |
| Golf profile | Handicap, handedness, your clubs and the distance you hit each one, your wedge distance matrix and wedge “feels”, bunker wedge, typical ball flight, your miss tendency and miss contact, your shot shapes and short‑game shapes, favourite and least‑confident club, strongest and weakest area of your game, scoring range, and your home course. |
| Caddie preferences | Your caddie’s name, chosen voice, coaching tone and coach personality settings. |
| How you are feeling | If you tell us, before or during a round, how confident you feel and whether you slept well. See Section 4 — we treat this carefully. |
| Notes and edits | Free‑text notes you write about a hole, and any corrections you draw on a hole map (tee, green and pin positions). |
| Waitlist | If you join the waitlist on our website, your name and email address. |
| Support | Whatever you choose to include when you email us. |
3.2 — Information created as you play
| What | Detail |
|---|---|
| Shot records | For each shot: the club we recommended, the club you actually used, the situation, the outcome, distance to the pin, measured distance, shot type, miss direction and cause, proximity, whether you hit the fairway or green, up‑and‑down attempts, putt number, putt type and read, the tee you played, hole number and par, course name, and the weather at the time. |
| Shot locations | The GPS coordinates where a shot started and where it finished. These are stored with the shot record. Taken together over time, they are a detailed record of where you have been and when. |
| Rounds and scorecards | Course, date, start and finish time, tee, yardage, per‑hole scores, pars, putts, fairways, greens in regulation and up‑and‑downs, and your total. |
| Voice transcripts | A text transcript of what you say to the caddie, and the caddie’s spoken reply, together with the hole, the action taken, how long the answer took, and any error. We keep these to diagnose wrong answers and improve the caddie. |
| Photos of your lie | When you photograph your ball’s lie, the image is analysed and a text description is produced. See Section 6 for exactly where the image goes and how long it lives. |
| Practice sessions | Range and short‑game sessions: drill, miss direction, balls hit, minutes, and start and finish times. |
| Player memory | Short written observations the caddie forms about you over time — your tendencies, your mental patterns, physical notes, the vocabulary you use, and your preferences — each with a confidence score and a count of how often it has been seen. This is, in effect, the caddie’s running dossier on you, and it is fed into future advice. |
| Calibration and training | Coefficients we derive for how wind, temperature and carry bias affect you specifically, and AI‑generated assessments of your game after a round. |
3.3 — Information collected automatically
| What | Detail |
|---|---|
| Precise location | While a round is in progress and the app is in use, we read your device’s GPS position continuously to calculate distances, draw your position on the hole map, and fetch local weather. See Section 4. |
| Microphone | When voice is enabled, the app listens so you can talk to your caddie hands‑free. Audio is converted to text by your device’s operating system. See Section 6.4 — this is the part most people do not expect. |
| Camera and photos | Only when you take or choose a photo of your lie, or save a round card to your photo library. |
| Diagnostics | Crash reports and performance traces: device model, operating system version, app version, the error and its stack trace, and a trail of the app screens and network requests leading up to a crash. We do not attach your name, email or account ID to these reports. Our diagnostics provider receives your IP address as an inherent part of the connection. |
| Subscription state | Whether you have an active subscription or trial, which plan, when it renews or expires, and your purchase receipts. Payment card details are handled by Apple or Google and never reach us. |
| Product analytics | Which steps of account setup you reached and when, and internal counters that rate‑limit API usage to keep costs and abuse under control. |
| Referrals | Your referral code, and which account referred you, if any. |
We do not collect advertising identifiers (IDFA / Android Advertising ID). We do not use advertising or social‑media tracking pixels. We do not fingerprint your device. We do not store your payment card details. We do not store audio recordings of your voice on our servers, and we do not create a voiceprint of you.
Section 4Sensitive information
Two categories deserve to be called out rather than buried in a table.
Precise geolocation
CaddieBib does not work without it. We use your precise position to measure the distance to the pin and to hazards, to place you on the hole map, to detect which hole you are on, to measure how far a shot actually travelled, and to fetch the weather where you are standing. Under California law, precise geolocation is sensitive personal information. We use it to deliver the service you asked for, and for the improvement purposes described in Section 7. You can stop it entirely by revoking location permission in your device settings — the app will keep working, but distances, the map and automatic shot measurement will not.
Information that touches on your health
If you tell the caddie how you slept or how you are feeling, that is arguably health‑adjacent information, and we would rather over‑disclose than under‑disclose. It is optional, it is used only to adjust the advice you get in that round and to inform the caddie’s understanding of you, and you can leave it blank.
We do not use sensitive personal information to infer characteristics about you. You may ask us to limit our use of it — see Section 11.
Section 5Why we use it
| Purpose | What it involves |
|---|---|
| Giving you advice | Choosing a club, reading a hazard, adjusting for wind, temperature and elevation, answering questions about your game and the rules. |
| Learning your game | Building your real carry distances, your miss patterns, your wind and temperature calibration and your player memory, so advice gets more specific to you over time. |
| Tracking your golf | Scorecards, statistics, strokes‑gained estimates, green reads, handicap‑style records and post‑round summaries. |
| Running your account | Signing you in, syncing across devices, restoring your rounds, and managing subscriptions, trials and referrals. |
| Keeping it working | Diagnosing crashes, fixing wrong answers, measuring latency, and rate‑limiting abuse. |
| Making it better | Reviewing what the caddie got wrong and improving it. See Section 7. |
| Talking to you | Service messages, waitlist and launch announcements, and answering your support email. |
| Legal | Enforcing our terms, resolving disputes, and complying with law. |
Section 6How the AI caddie works
CaddieBib is built on AI models operated by other companies. This section explains precisely which company receives which piece of information, because “we use AI” is not a meaningful disclosure.
6.1 — The advice engine
When you ask your caddie a question, we send a request to a large language model operated by DeepSeek. That request is routed through our own servers — your phone never contacts DeepSeek directly, and no key or account of yours is exposed to them. The request contains:
- What you said or typed, as text.
- Your first name, handicap, handedness, ball flight, miss tendencies, clubs and distances, wedge matrix, shot shapes, and strongest and weakest areas.
- Your shot history for the round and your learned per‑club statistics.
- Your player memory — the caddie’s accumulated observations about you.
- If you provided it, how you slept and how confident you feel.
- The hole, its par, the yardages and hazard distances, and the current weather.
- The last few turns of your conversation.
We do not send your raw GPS coordinates to the language model. Your position is resolved into plain yardages on your device first, and only those numbers are sent.
6.2 — Photos of your lie
If you photograph your lie, the image is shrunk on your device and sent — again through our servers — to Anthropic, which returns a text description of what it sees (lie type, slope, hazards, gaps between trees, flag position). That description is then passed to the advice engine.
The photo is sent with nothing else attached — no name, no handicap, no location, no account identifier. We do not store the photo. It is not written to our database or file storage; it exists only for the moment it takes to analyse it. The resulting text description is retained as part of your shot record.
6.3 — The caddie’s voice
To speak an answer aloud, we send the caddie’s outgoing words — not yours — to a speech synthesis provider (Inworld AI, or Deepgram as a fallback), through our servers. Because the caddie often says your first name and your numbers, that text can contain personal information. Synthesised audio is cached on our servers, keyed by a hash of the words alone, so that common phrases are not re‑synthesised. That cache is not linked to any account.
6.4 — Speech recognition
Turning your speech into text is done by your device’s operating system, not by us. On iOS, Apple’s speech recognition is not restricted to on‑device processing, which means audio from your microphone may be sent to Apple’s servers to be transcribed, and is handled under Apple’s privacy policy. We never receive or store the audio itself — only the text that comes back.
When voice mode is on during a round, the microphone listens continuously for the wake word. If you would rather it did not, turn voice off in the app or revoke microphone permission in your device settings.
6.5 — Automated decisions
The caddie recommends clubs and strategy automatically. These are recommendations about a game. They have no legal or similarly significant effect on you, and you are free to ignore every one of them. We do not use automated processing to make decisions about credit, employment, insurance, housing or anything of that kind.
Section 7Using your data to improve CaddieBib
We use the information described in this policy — including your voice transcripts, the caddie’s replies, your shot records and the outcomes of the advice you were given — to make CaddieBib better. In practice that means:
- Reviewing conversations. Our team reads transcripts of exchanges with the caddie, particularly ones where the advice looks wrong, to find and fix the fault.
- Testing and evaluation. We build test cases from real situations and replay them against changes to the caddie before we ship them.
- Tuning the models and prompts. We use real examples to adjust how the caddie reasons, what it says, and when it stays quiet.
- Improving the golf models. Aggregated shot data across users improves distance, wind and elevation modelling for everyone.
Wherever the work does not require knowing who you are, we use data stripped of your identity. We do not sell this data, and we do not publish it in any form that identifies you.
Because our team can read voice transcripts, do not say anything to your caddie that you would not want a person to read. If you would like your transcripts excluded from this use, email us at hello@caddiebib.app and we will honour it.
Section 8Who we share it with
We share personal information only with the service providers listed below, only for the purposes listed, and under contracts that restrict them to those purposes. The list is complete.
| Provider | What they receive | Why | How it reaches them |
|---|---|---|---|
| Supabase | Everything we store: account, profile, shots and their GPS coordinates, rounds, transcripts, player memory | Our database, sign‑in and backend | From your device |
| DeepSeek | Your words, name, handicap, profile, shot history, player memory and hole context — but not raw GPS | The advice engine | Via our servers |
| Anthropic | Only the photo of your lie. Nothing else | Reading your lie | Via our servers |
| Inworld AI (and Deepgram) |
The caddie’s outgoing words, which may include your name and numbers | The caddie’s voice | Via our servers |
| Apple | Microphone audio for transcription; sign‑in identity; purchase and subscription data | Speech‑to‑text, Sign in with Apple, App Store billing | From your device |
| Sign‑in identity (name, email); on Android, purchase data | Google Sign‑In and Play billing | From your device | |
| Mapbox | Your precise position, which determines the map tiles requested, plus the name of the course you are playing | The satellite hole map | From your device |
| Open‑Meteo | Your coordinates, rounded to roughly 11 metres. No name, no account, no identifier | Local wind, temperature and conditions | From your device |
| OpenStreetMap (Nominatim, Overpass) |
The name and approximate area of the course — not your own position | Hole outlines and hazard shapes | From your device and via our servers |
| OpenTopoData | Course tee and green coordinates — not your position | Elevation changes | Via our servers |
| RevenueCat | Your account identifier and purchase receipts | Subscriptions and trials | From your device |
| Sentry | Crash and performance data, device and app details, and your IP address. Not your name, email or account ID | Diagnosing crashes | From your device |
| Netlify | Standard web server logs for caddiebib.app, including IP address | Hosting the website | From your browser |
| EmailJS | Waitlist name and email address | Sending your waitlist confirmation | From your browser |
| Google Fonts | Your IP address when the website loads a font | Website typography | From your browser |
Opening a practice drill loads a thumbnail from YouTube and, if you tap it, opens YouTube itself. That request carries your IP address to Google and is subject to Google’s own policy.
Other circumstances
- Legal process. If we are required by valid legal process, or where we reasonably believe disclosure is necessary to prevent harm or fraud, or to protect our legal rights.
- Business transfer. If CaddieBib is acquired, merged or sells assets, personal information may transfer as part of that transaction. We will tell you before your information becomes subject to a materially different policy.
- With your direction. When you share a round card, you decide who sees it.
Section 9We do not sell your data
We do not sell your personal information, and we have not sold it in the preceding twelve months. We do not share it for cross‑context behavioural advertising. We do not disclose it to data brokers. We do not run advertising in CaddieBib, and there are no advertising trackers in the app or on the website.
Because we do not sell or share personal information in this sense, there is nothing for you to opt out of — but your other rights, set out below, apply in full.
Section 10How long we keep it
We will be straightforward about this: we currently keep your golf data for as long as your account exists. There is no automatic expiry on your shots, rounds, transcripts or player memory, because the value of the caddie comes from a long history — a season of shots is what makes the advice yours rather than generic.
| Information | Retention |
|---|---|
| Account, profile, shots, rounds, practice, player memory, calibration, hole notes, map edits | Until you delete it or delete your account |
| Voice transcripts and caddie replies | Until you delete your account, or ask us to remove them sooner |
| Photos of your lie | Not stored. Discarded immediately after analysis |
| Microphone audio | Never stored by us. Handled by your device and Apple |
| Synthesised caddie speech | Cached on our servers indefinitely, not linked to your account |
| Setup analytics | Until you delete your account |
| Rate‑limit counters | Deleted automatically after 2 hours |
| Crash diagnostics | Held by our diagnostics provider under their retention schedule, typically 90 days |
| Waitlist name and email | Until you ask us to remove you, or we retire the waitlist after launch |
| Backups | Deleted data may persist in encrypted backups for up to 30 days before being overwritten |
We may keep a minimal record of a deleted account — for example, that a particular email address requested deletion — where we need it to comply with law or to prevent abuse.
Section 11Your rights and choices
We extend the following rights to every CaddieBib user, wherever you live. We do not think privacy rights should depend on your postcode.
- Know. Ask what personal information we hold about you, where it came from, why we collected it, and who we disclosed it to.
- Access and portability. Get a copy of your information in a portable format.
- Correct. Fix anything inaccurate — including a wrong observation the caddie has recorded about your game.
- Delete. Delete your account and the personal information we hold about you.
- Limit sensitive information. Ask us to restrict our use of your precise location and any health‑related information to what is necessary to run the service.
- Opt out of improvement use. Ask us to exclude your transcripts and shot data from the review and tuning described in Section 7.
- Opt out of profiling. Ask us to stop building player memory about you.
- No retaliation. We will never degrade your service, raise your price or deny you features because you exercised a privacy right.
- Appeal. If we refuse a request, you may appeal by replying to our decision. We will respond within 45 days with our reasoning.
Residents of California (CCPA/CPRA), Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island have these rights under their state privacy laws. Californians may also designate an authorised agent to make a request on their behalf; we will ask for proof of that authority.
Categories collected, disclosed and sold — California notice
| CCPA category | Do we collect it? | Disclosed for a business purpose? | Sold or shared? |
|---|---|---|---|
| Identifiers | Yes — name, email, account ID, referral code, IP address | Yes | No |
| Customer records | Yes — name, email | Yes | No |
| Commercial information | Yes — subscription and purchase history | Yes | No |
| Internet or network activity | Yes — app usage, setup steps, crash and performance data | Yes | No |
| Geolocation data | Yes — precise | Yes | No |
| Audio, visual or similar | Yes — voice transcripts, photos of your lie | Yes | No |
| Inferences | Yes — player memory, tendencies, calibration, skill assessments | Yes | No |
| Sensitive personal information | Yes — precise geolocation; optionally, sleep and how you feel | Yes | No |
| Biometric information | No | — | No |
| Protected classifications | No | — | No |
| Professional or employment | No | — | No |
| Education information | No | — | No |
Section 12How to exercise your rights
Email hello@caddiebib.app from the address on your account, and tell us what you want. That is the whole process. You can also use the in‑app controls in Section 13.
- We will acknowledge within 10 business days and respond substantively within 45 days. If we need longer, we will tell you why and take no more than a further 45 days.
- We verify requests by confirming you control the account email. For a deletion request we may ask you to confirm a second time, because it cannot be undone.
- Making a request is free. We may charge only for a request that is manifestly unfounded or repetitive, and we will tell you before we do.
Section 13Controls inside the app
| Control | What it actually does |
|---|---|
| Delete my account Account screen |
Permanently deletes your account and the personal information we hold about you — profile, shots and their locations, rounds, practice, voice transcripts, player memory, calibration, notes, map edits and setup analytics. This cannot be undone. If deletion does not complete, email us and we will do it manually. |
| Reset round history Account screen |
Deletes your play data — shots, rounds, practice, player memory, training assessments, notes, map edits, calibration and voice transcripts — from your device and from our servers, while keeping your account, your bag and your caddie settings. |
| Download my data Account screen |
Exports the copy of your profile, rounds, shots and practice sessions held on your device. For a complete copy of everything on our servers, including your voice transcripts and player memory, email us and we will send it. |
| Location, microphone, camera Device settings |
Revoke any of these at any time in iOS or Android settings. The app keeps working; the features that depend on them stop. |
| Voice mode In‑app |
Turning voice off stops the microphone listening and stops transcripts being created. |
Section 14How we protect it
- Everything in transit is encrypted with TLS, and everything at rest is encrypted by our hosting provider.
- Your data is walled off at the database level. Every table holding personal information enforces row‑level security, so one account cannot read another’s rows — this is enforced by the database itself, not merely by application code.
- Your sign‑in tokens live in your device’s secure keychain, not in ordinary storage.
- AI provider keys never touch your phone. Every AI request is proxied through our servers, which is why your device cannot leak them.
- We minimise what we send. The photo path carries no identity; the weather path carries no account; the model never sees raw coordinates.
- Access is limited to the people who need it to operate and improve the service.
No system is perfectly secure, and we will not pretend otherwise. If we discover a breach affecting your personal information, we will notify you and the relevant regulators as required by law, without undue delay.
Section 15Guest and anonymous accounts
You can start using CaddieBib before giving us an email address. When you do, we create an anonymous account for you, and everything described in this policy still applies — your shots, locations and transcripts are collected and stored against that anonymous account. If you later sign in with Apple or Google, that history is linked to your identity. If you never sign in and delete the app, the account and its data remain on our servers until you ask us to remove them.
Section 16Children
CaddieBib is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email hello@caddiebib.app and we will delete it promptly.
We do not sell or share the personal information of anyone under 16, in any circumstances.
Section 17Where your data lives
CaddieBib’s database and backend run on servers in the United States (Oregon). Our service providers may process information in the United States and in other countries where they operate. If you use CaddieBib from outside the United States, you are sending your information to the United States, where privacy laws differ from those in your own country.
Section 18The website and waitlist
caddiebib.app collects far less than the app. If you join the waitlist we store your name and email address, and pass them to our email provider so we can send you a confirmation and tell you when we launch. You can ask to be removed at any time.
We do not use cookies for tracking, advertising or analytics on the website. Our host keeps standard server logs, including IP addresses, for security and reliability. The site loads fonts from Google, which receives your IP address in the process.
Section 19Changes to this policy
We will update this policy as CaddieBib changes. The effective date at the top always reflects the current version. If we make a change that materially affects how we use information we already hold about you — a new category of data, a new recipient, or a new purpose — we will tell you in the app or by email before it takes effect, and where the law requires it, we will ask for your consent.
Section 20Contact us
Questions, requests, complaints and corrections all go to the same place, and a person reads them.
Email: hello@caddiebib.app
Post: [LEGAL ENTITY NAME],
[MAILING ADDRESS]
California residents may also contact the California Privacy Protection Agency or the California Attorney General. Residents of other states may contact their state Attorney General. We would much rather you came to us first.