Privacy Policy

Last updated: 6 November 2026

This policy explains what personal data Spider Golf collects when you use the Spider Golf mobile app, the website spidergolf.fr and the player and coach dashboards (together, the "Services"), why we collect it, who we share it with, and the rights you have over it.

1. Who we are

The data controller is SPIDER GOLF SAS, a company with a share capital of €5,000, registered in Nanterre under RCS 830 836 425, with its registered office at 30 avenue du Bois de la Marche, 92420 Vaucresson, France.

For any question about your personal data, write to [email protected].

2. The data we collect

Your account

  • Required: first name, last name, email address and password. Your password is stored hashed: nobody at Spider Golf can read it.
  • If you sign in with Apple or Google, we receive your name, your email address (or an Apple relay address if you chose to hide yours) and an account identifier from them, instead of a password.
  • Optional: date of birth, gender, playing hand, player category (amateur, professional or coach), handicap, country, language and a profile photo.

Your golf data

The rounds, scores, shots, pin positions, practice sessions, clubs and distances and notes that you enter, and the statistics we calculate from them.

Your location

Only if you allow it, and only while you are using the app, we use your phone's location for two things. To show golf courses near you, your coordinates are sent to our server to find courses within 30 km and are not stored. During a round, to show your distance to the front, centre and back of the green, your position is compared on your phone with the course map: it is not sent to us. The app never accesses your location in the background. If you refuse, you can still search for courses by name and play your rounds, without distances to the green.

Apple Watch and Wear OS

If you use the Spider Golf app on your watch, the scores, shots and practice results you enter there are sent to the Spider Golf app on your phone, through the connection between your watch and your phone (managed by Apple on Apple Watch and by Google on Wear OS), and are then handled like the data you enter on your phone. The watch app never connects to our servers itself. Only if you allow it, and only while the watch app is open during a round, it uses your watch's location to show your distance to the green: this is calculated on the watch and is not sent to us. The watch app does not read health data such as your heart rate.

Camera and photos

Only when you choose a profile photo or take a photo of a scorecard for the app to read. Only the photo you pick or take is uploaded. Scorecard photos are sent to our AI provider to be read (see "AI features" below) and are not stored.

Microphone and voice input

Only if you allow it, and only after you tap the microphone button, the app listens, until you stop, so that you can dictate a note or a Spider AI question. Your phone's own speech recognition service (Apple's on iPhone, Google's on Android) turns what you say into text; depending on your phone, the audio may be processed by Apple or Google under their own privacy policies. We never receive or store the audio, only the text, and only once you send it.

AI features

Spider AI (the chat), AI round summaries and game analyses, AI course notes, AI bag analysis, AI training programs and scorecard reading only run when you ask for them. To answer, we send our AI provider (section 4) the data the feature needs: your question, the golf data concerned (rounds, shots, statistics, clubs and distances, handicap, notes) or the scorecard photo, and the app's language. We do not send your name, email address or any contact detail. Your Spider AI conversations are stored on your phone only, not on our servers. We keep the AI round summaries we generate, so they are not generated again, and a usage record of each request (the feature, the date and its size and cost, not its content) to apply usage limits. AI answers are generated automatically and may be inaccurate; they never lead to a decision that affects you.

Purchases

In the app, subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We never see your payment card details. The store sends us the transaction identifier, the product purchased, its dates and its status so that we can activate your premium features. If you use a promo code, we record it.

On the coach dashboard, coaches and organisations can buy premium licences, and players can pay when redeeming a promo code. These payments are made on a payment page hosted by Stripe, which collects your card details, billing address and, if you enter one, your tax number. We never see your card details. Stripe sends us the payment status; we keep the payment reference, amount, number and type of licences and the date, and link them to your account.

Device and technical data

Your push notification token, device type, operating system and app version, your IP address (in our server logs), crash reports and app usage events (see section 4).

When you contact us

The content of the messages you send us.

3. Why we use your data, and on what legal basis

PurposeLegal basis
Creating and running your account, syncing your data between devices, calculating your statisticsPerformance of our contract with you
Community features (friends, coaches)Performance of the contract, at your request
AI features (Spider AI, summaries, analyses, notes, bag analysis, training programs, scorecard reading) and their usage limitsPerformance of the contract, at your request
Voice inputYour consent, given through your phone's microphone and speech recognition permission prompts. You can withdraw it in your phone's settings
Managing your subscriptionPerformance of the contract; legal obligation for accounting records
Service emails (address verification, password reset, account messages)Performance of the contract
Push notificationsYour consent, given through your phone's permission prompt. You can withdraw it in your phone's settings
Newsletter and promotional emails about Spider Golf, sent to account holdersOur legitimate interest in keeping our users informed about our own services. You can unsubscribe at any time with the link in every newsletter or by writing to [email protected]
Usage analytics and crash reports, to fix bugs and improve the appOur legitimate interest. You can object at any time (section 7)
Security and fraud preventionOur legitimate interest
Answering your requests and exercising your rightsLegal obligation

We do not sell your data. The app shows no advertising and does not track you across other companies' apps or websites.

4. Who can see your data

Other SpiderGolf users

  • Any SpiderGolf user can find you by searching your name, or by typing your exact email address. Search results show only your name, country, handicap and player category (for example coach or pro). Your email address is never shown to other users.
  • Friends whose request you accept can see your profile (including your photo), rounds, statistics, practice sessions and bag, as well as your list of friends.
  • A coach whose request you accept, or whose licence code or promo code you activate, can see your golf data, can enter rounds for you and can use the AI features on your golf data.
  • You can remove a friend or a coach at any time.
  • Anything you share yourself (for example with the share button) goes to whoever you send it to.

Spider Golf staff

Authorised Spider Golf staff can access your account when it is necessary to provide support or fix a problem.

Our service providers

They process data only on our instructions and under contract:

ProviderWhat forWhere
DigitalOceanHosting our servers, database and dashboardsGermany (Frankfurt data centre)
CloudflareNetwork security and delivery of our website and API (processes IP addresses)United States / global
OVHcloudSending service emails from our spidergolf.fr domainFrance
MailerLiteNewsletterEuropean Union
AmplitudeUsage analytics: your account identifier, country, language and the screens and features you use. Not your name or email addressEuropean Union (EU data centre)
SentryCrash reports: technical details of the error, your device and your account identifierUnited States
Google (Firebase Cloud Messaging)Push notificationsUnited States
OneSignalPush notifications on older versions of the appUnited States
OpenAIGenerating the answers of the AI features and reading scorecard photos. OpenAI does not use this data to train its models and keeps it for no more than 30 days, for abuse monitoringUnited States
StripeCard payments made on the dashboard (licences and promo codes)European Union / United States

Apple, Google and Stripe act as independent controllers when you sign in with them, buy a subscription through their store or pay on their payment pages; their own privacy policies apply.

Authorities

When the law requires it.

5. Transfers outside the European Union

Some of our providers (DigitalOcean, Cloudflare, Google, Sentry, OneSignal, OpenAI, Stripe) are based in the United States, even when, like DigitalOcean, they store our data in the European Union. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses.

6. How long we keep your data

  • Account and golf data: for as long as your account exists. When you delete your account, your data is erased from our systems within 30 days, and from our backups when those expire, within 90 days at most.
  • AI round summaries and AI usage records: for as long as your account exists, like your golf data. Spider AI conversations: on your phone only, until you start a new chat, sign out or uninstall the app.
  • Purchase records: for as long as French accounting law requires (up to 10 years).
  • Newsletter: until you unsubscribe, or 3 years after your last contact with us.
  • Crash reports: no more than 90 days. Analytics events: no more than 25 months.
  • Server logs: no more than 12 months.

7. Your rights

You have the right to:

  • access your data;
  • correct it;
  • have it erased;
  • restrict its processing;
  • receive it in a portable format;
  • object to its processing, including for direct marketing and analytics;
  • withdraw your consent at any time;
  • give instructions about what happens to your data after your death.

How to exercise them:

  • You can correct your profile at any time in the app.
  • You can delete your account yourself in the app: Settings → My Profile → Delete Account.
  • For anything else, including deleting your account without using the app, write to [email protected] from the email address of your account. We reply within one month.

If you believe your rights have not been respected, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

8. Children

Our Services are not intended for children under 15. In France, a child under 15 may only use them with the consent of a parent or guardian. If we learn that a child under 15 has created an account without this consent, we delete it. Parents can contact us at [email protected].

9. Security

Data is encrypted in transit (HTTPS), passwords are stored hashed, and access to our systems is restricted to the people who need it.

10. Cookies on our website

The app does not use cookies. Our website does. Cookies that are not strictly necessary (analytics and advertising, including the Facebook pixel) are only set if you accept them in the cookie banner. You can change your choice at any time with the "Privacy Preferences" link at the bottom of every page.

11. Changes to this policy

When we change this policy, we update the date at the top. If a change significantly affects how we use your data, we will tell you in the app or by email before it takes effect.