Privacy Policy

1. Scope and Who We Are

This Privacy Policy explains how Cardine LLC, a Minnesota limited liability company (“Cardine,” “Gaggle Golf,” “we,” “us,” or “our”), collects, uses, discloses, sells, shares, retains, and otherwise processes personal data when you use the Gaggle Golf mobile application, watch application, websites, public viewer pages, connected-device features, subscriptions, and related products and services (collectively, the “Services”).

This Policy applies to information Cardine controls. Third-party products and services may apply their own policies. The Gaggle Golf Terms of Service also govern your use of the Services.

2. Short Version

• Gaggle Golf uses account, golf, location, sensor, health and fitness, media, social, device, purchase, usage, and diagnostic information to provide and improve the Services.
• Some information may be public when you choose a public story, live-share link, public profile, game, or other public feature.
• We use service providers for authentication, hosting, analytics, diagnostics, connected hardware, payments, communications, and selected AI-assisted features.
• We may use information to develop and evaluate Gaggle Golf features and Cardine-operated models. Where possible, we use aggregated or de-identified information.
• We may commercialize aggregated or de-identified insights and may use or disclose eligible non-sensitive information for advertising, OEM programs, and other commercial purposes, subject to required choices and consent.
• We do not use or disclose HealthKit, Motion & Fitness, precise location, private recordings, or known-minor data for targeted advertising, data-broker sale, or unrelated model training.
• You can request access, correction, deletion, portability, and information about disclosures, and you can opt out of sale, sharing, and targeted advertising where applicable.

3. Personal Data We Collect

A. Account, Identity, and Profile Data

We may collect your name, email address, display name, authentication-provider information, app and authentication-provider user identifiers, account credentials or tokens, profile photo, handicap, scoring preferences, profile settings, and similar account information. If you sign in through Apple or Google, those providers and our authentication provider process information needed to complete the sign-in.

B. Golf, Gameplay, and Search Data

We collect information about rounds, courses, tee selections, scores, shots, hole progress, game formats, multiplayer games, standings, clubs and bags, practice sessions, notes, labels, reactions, invitations, share settings, timestamps, and related events. Course-search text may be sent to our systems as you search. This information may be linked to your account, devices, sessions, and other players.

C. Location, Health, Fitness, Motion, and Sensor Data

With permission, we collect precise and coarse location, GPS tracks, timestamps, altitude, speed, accuracy, course context, and location-derived weather information. We may collect HealthKit and fitness information such as golf workouts, heart rate, step count, and workout status. We also collect motion and sensor information from Apple Watch, iPhone, AirPods, connected glasses, and nearby devices, including acceleration, orientation, rotation, gravity, head or wrist movement, UWB distance and direction, device-placement information, battery or power diagnostics, and sensor-derived features. Some of this data is transmitted to Cardine-controlled cloud systems for analysis and storage.

D. Photos, Video, Audio, Transcripts, and Other User Content

We may collect videos and photos from connected glasses, scorecard photos you choose from the camera or photo library, voice input and transcripts, public stories, profile content, messages, game text, feedback, and other material you submit. We use third-party AI and text-recognition providers to extract information from scorecard photos you submit. Before sending personal data to a third-party AI provider, we will provide a clear disclosure and obtain explicit permission as described in Section 5. Voice audio may be processed off device by speech-recognition providers; the resulting transcript and timing information may be stored with the session.

E. Social and Public-Sharing Data

We collect friendship, invitation, block, follower or viewer, game-participant, reaction, chat, share-link, public-story, and live-view activity. Public content may include your display name, profile information, round or game information, course, scores, map or shot information, media, comments, and other content you choose to publish. A capability link can allow anyone who has the link to view the associated content.

F. Purchases and Subscriptions

If you purchase through Apple, Apple processes payment credentials and provides Cardine with transaction, product, subscription-status, renewal, and entitlement information. If Cardine offers direct purchases, Cardine and its payment processors may collect billing contact, transaction, tax, fraud-prevention, and subscription information. Cardine does not receive complete payment-card credentials from Apple.

G. Device, Usage, Viewer, and Diagnostic Data

We may collect app and browser interactions, feature use, screen or navigation events, permission-status events, referral and campaign data, public-viewer activity, IP address, device and install identifiers, operating system, app version, language, time zone, network and performance data, crash reports, logs, diagnostic events, and security signals. We use service providers to analyze product usage and diagnose technical issues. After sign-in, we associate analytics activity with your account identifier; before sign-in or after reset, device or installation identifiers may be used. These providers process usage and technical information subject to our configuration and their processing terms.

H. Communications and Support

We collect information you provide when you contact support, respond to surveys, join a waitlist, participate in research or promotions, receive service or marketing messages, or otherwise communicate with us. This can include message content, contact information, attachments, and communication preferences.

I. Information from Third Parties

We may receive information from identity providers, connected-device platforms, app stores, payment providers, analytics and diagnostics providers, OEM or promotional partners, public sources, other users, and service providers. We use this information only as permitted by law, platform rules, contracts, and this Policy.

4. How We Use Personal Data

• Provide, authenticate, operate, personalize, synchronize, and support the Services.
• Calculate golf distances, scores, game state, maps, session history, analytics, recommendations, and sensor-derived features.
• Enable public stories, live sharing, social features, messages, competitions, reactions, and viewer experiences.
• Process subscriptions, purchases, entitlements, trials, refunds, taxes, and account administration.
• Monitor reliability, diagnose errors, prevent abuse and fraud, secure accounts, and enforce our terms.
• Analyze usage, conduct research, test features, measure campaigns, and improve the Services.
• Develop, train, test, evaluate, and improve algorithms, machine-learning systems, and AI models as described below.
• Provide contextual advertising, sponsored content, OEM programs, promotions, and marketing; and, where permitted, targeted advertising and measurement.
• Create and commercialize aggregated or de-identified datasets, statistics, benchmarks, insights, model outputs, and industry research.
• Comply with law, respond to valid legal process, protect rights and safety, complete corporate transactions, and establish or defend legal claims.

5. AI, Machine Learning, Research, and Product Development

Cardine may use information and content collected through the Services to create, train, fine-tune, test, evaluate, validate, operate, and improve Cardine algorithms, machine-learning systems, and AI models. Current internal model work may use round and shot data, motion and sensor streams, recorded media, labels, ground-truth annotations, and derived features for shot detection, motion analysis, scoring, course and scorecard understanding, recommendations, personalization, safety, fraud prevention, content moderation, customer support, and new Gaggle Golf products and services. These uses remain subject to the sensitive-data limits below.

Where reasonably possible for the purpose, Cardine will use aggregated, de-identified, pseudonymous, sampled, or otherwise minimized information. Cardine may retain and commercialize de-identified datasets, statistics, benchmarks, derived insights, and model outputs and may license them to OEMs, researchers, commercial partners, or other third parties. Cardine and recipients must not attempt to reidentify de-identified information except where law permits controlled testing of de-identification safeguards.

We will provide a clear disclosure and obtain explicit permission before sending personal data to a third-party AI provider when required by Apple or applicable law. A provider that processes data solely for Cardine under instructions is a service provider; any independent use by that provider must be separately disclosed and permitted.

We do not use HealthKit information, Motion & Fitness information, precise location, private audio or video, or personal data from users known to be under 18 for advertising, marketing, sale to data brokers, or model training unrelated to providing or improving the Services. We may use such data for the user-requested Gaggle Golf functionality and closely related product improvement when permitted and when required consent is in place.

Deleting an account stops future account-linked use as described in Section 9. Deletion may not require Cardine to remove information that has already been irreversibly aggregated or de-identified, incorporated into a model in a way that cannot reasonably identify you, or retained under a lawful exception.

6. Advertising, OEM Programs, Sale, and Sharing

Gaggle Golf may display contextual advertising, sponsored content, OEM promotions, or branded experiences in the app and on public viewer pages. Contextual advertising can be selected from the content or context you are currently viewing without tracking you across unaffiliated services.

Subject to required notice, consent, opt-out rights, and platform permissions, Cardine may use or disclose eligible personal data for targeted advertising, advertising measurement, OEM marketing, audience development, and other commercial purposes. Privacy laws may call some of these disclosures a “sale” or “sharing” even when no money changes hands.

The categories Cardine may sell or share for these purposes are identifiers other than government or payment credentials; device, browser, and usage data; commercial and subscription information; approximate location; advertising or campaign interactions; public content; and inferences about interests or product affinity. Recipients may include OEMs, sponsors, advertising and measurement partners, marketing platforms, and data or research partners.

Cardine does not sell or share for targeted advertising your HealthKit data, Motion & Fitness data, precise location, private photos or recordings, private communications, payment credentials, account passwords, or personal data Cardine knows belongs to a user under 18. Cardine may license aggregated or de-identified insights derived from eligible source data, subject to platform restrictions and law.

You may opt out through the “Your Privacy Choices” page in the app, by emailing support@gagglegolf.com, through applicable in-app settings, and through a recognized universal opt-out signal where required. App Tracking Transparency permission will be requested before any activity that Apple defines as tracking. Declining tracking does not prevent contextual ads or uses that are not tracking.

7. How We Disclose Personal Data

Service Providers and Processors

We disclose information to vendors that provide authentication, hosting, storage, databases, content delivery, payments, communications, customer support, analytics, diagnostics, security, connected-device support, OCR, AI processing, and other services.

OEM, Advertising, Research, and Commercial Partners

We may disclose eligible information to equipment manufacturers, sponsors, researchers, advertisers, measurement providers, marketing platforms, and data partners for the purposes described in Sections 5 and 6. We use consent and opt-out mechanisms when required.

Other Users and the Public

We disclose information when you make it public, share a link, join a game, interact with another user, or direct us to share it. Public content can be copied, indexed, saved, or reshared by others outside Cardine’s control.

Legal, Safety, and Corporate Transactions

We may disclose information when we reasonably believe it is necessary to comply with law or valid process; investigate fraud, abuse, or security incidents; enforce agreements; protect Cardine, users, or others; or establish, exercise, or defend legal claims. We may disclose or transfer information in connection with financing, due diligence, a merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable notice and consent requirements.

At Your Direction

We disclose information when you connect a service, authorize an integration, share content, ask us to send information to a coach or partner, or otherwise direct the disclosure.

8. Public Content and Social Features

You control whether to use public and social features. Before publishing, review the audience and the information included. Public content is not confidential and may remain available through copies, screenshots, search results, messages, or other users even after you delete it from Gaggle Golf. Do not publish another person’s personal information or content unless you have the right and permission to do so.

9. Retention, Account Deletion, and Anonymization

We retain personal data for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, preserve multiplayer and transaction records, improve core models, maintain security and fraud controls, comply with law, resolve disputes, enforce agreements, and maintain legitimate business records. Current systems retain portions of the server-side round, location, health and fitness, motion, sensor, recording, video, labeling, and ground-truth corpus without a scheduled expiration. Certain derived session tracks are scheduled to expire after 30 days, current database automated backups are retained for seven days, and provider retention periods vary. Cardine may change these periods when permitted, subject to applicable notice and retention-limit requirements.

Gaggle Golf provides an in-app account-deletion flow. The current design deletes or queues deletion of identity-bearing profile, email, friendship, push, note, owned-round chat, story, share-token, and certain scorecard-photo records, and then signs the user out. To preserve round, gameplay, analytics, recordings, labeled training data, and sensor history needed for co-players, product integrity, research, core model improvement, and other legitimate purposes, Cardine removes direct account identifiers from certain session, event, telemetry, game, location, sensor, media, and derived records and reassigns them to a non-user “ghost” identity rather than deleting the underlying records. Records within that retained corpus may remain linked to one another over time even though Cardine no longer intends to link them to your login or profile; this is not the same as destroying the corpus or guaranteeing that every retained record is anonymous.

Messages you sent in another person’s round, creator-authored game rules or stakes text preserved for other players, per-install identifiers, raw or derived recordings, videos, GPS tracks, physiology and motion telemetry, labeled events, ground-truth records, database backups, diagnostic records, Apple Health records, and copies held by service providers, including AI-processing providers may remain where Cardine or the provider cannot reliably associate them with you, where other users rely on the record, where deletion is technically impracticable, or where retention is permitted by law. Deletion requests sent to authentication, analytics, storage, or other service providers may be completed asynchronously. Cardine will honor applicable deletion rights and lawful exceptions rather than representing that all underlying data is erased immediately.

Deleting Gaggle Golf does not delete records stored in Apple Health. You can manage HealthKit permissions and Apple Health records through Apple’s controls. Local uploaded telemetry may be removed after upload and a post-session grace period, but local deletion does not prove deletion from cloud systems or providers.

10. Your Choices and Privacy Rights

• Permissions: Manage location, HealthKit, Motion & Fitness, camera, microphone, speech, photos, Bluetooth, nearby interaction, and notification permissions in your device settings. Some features will not work without the permission they require.
• Public sharing: Revoke eligible share links, delete public stories, adjust profile or sharing settings, leave games, or stop future sharing through available controls.
• Marketing: Unsubscribe using the link in a marketing email or contact support. We may still send service, security, legal, and transactional notices.
• Sale, sharing, and targeted advertising: Use the Privacy Choices methods in Section 6. We will honor applicable universal opt-out signals.
• AI and sensitive-data consent: Withdraw consent through the same setting or flow used to grant it, where available, or contact support. Withdrawal applies prospectively and may disable the related feature.
• Access, correction, deletion, portability, and disclosure: Depending on your location, you may request confirmation and access, correction, deletion, a portable copy, or a list of specific third parties to which we disclosed personal data.
• Appeal: If we deny an eligible privacy request, you may appeal by replying to our decision or emailing support@gagglegolf.com with “Privacy Appeal” in the subject line.

Submit requests through in-app account controls, the Privacy Choices setting in the app, or support@gagglegolf.com. We may verify your identity or authority. Authorized agents may submit requests where permitted. We will not discriminate against you for exercising privacy rights, although a feature may be unavailable when it requires data you choose not to provide.

11. Children and Teen Users

The Services are not directed to children under 13, and Cardine does not knowingly collect personal data from children under 13. If you are between 13 and the age of legal majority where you live, you may use the Services only with permission from a parent or legal guardian who agrees to the Terms of Service on your behalf.

Cardine does not knowingly sell the personal data of users under 18, use it for targeted advertising, or use it for model training unrelated to providing or improving the Services. If we learn that a child under 13 provided personal data without required parental consent, we will take reasonable steps to delete or de-identify the data and close the account. Contact support@gagglegolf.com with concerns.

12. Security

We use administrative, technical, and physical safeguards designed for the nature of the information we process. No method of transmission or storage is completely secure. You are responsible for protecting your account and promptly notifying us of suspected unauthorized access.

13. International Processing

Cardine and its providers may process information in the United States and other countries where privacy laws may differ from those where you live. Where required, we use approved transfer mechanisms and safeguards.

14. U.S. State Privacy Disclosures

Residents of states with comprehensive privacy laws may have the rights described in Section 10. For the categories collected, sources, purposes, and recipients, see Sections 3 through 7. Cardine does not use sensitive personal data to infer characteristics about you for advertising. Cardine will obtain consent before processing sensitive data when required and will provide a way to revoke that consent.

If Cardine sells personal data or shares it for cross-context behavioral advertising, Cardine will provide a clear “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” control outside this Policy. Before publication, Cardine must insert an accurate statement of the categories sold or shared during the preceding 12 months and the categories of recipients.

Minnesota residents may also request a list of specific third parties to which Cardine disclosed personal data and may appeal a denial. Cardine will honor recognized opt-out preference signals as required. Minnesota rights cannot be waived by contract.

15. Changes to This Policy

We may update this Policy as the Services, technology, and law change. We will post the updated Policy and revise the “Last Updated” date. If a change materially expands how we collect, use, sell, share, or transfer previously collected personal data, we will provide notice and a reasonable opportunity to withdraw consent or make a required choice before applying the materially different practice.

16. Contact Us