Privacy Policy (free beta)

Golf Club Patata is a service of Gonza, LLC. Contact: contactme@losgonza.com. The beta is available in the United States only.

If the English and Spanish versions differ, the English version controls.

What we collect

• The swing video you upload.
• Body-position measurements, including body points (not face points) for 4 key frames, key-frame images with the head blurred and a body overlay, and your report. They're kept and deleted on the same schedule as your report.
• The head area in key-frame images is blurred.
• When lines are drawn on a key frame, we also keep a copy of that frame without the lines (head still blurred), used only for the summary thumbnail, such as the Finish position. It's kept with your report and deleted with it.
• Face points are used only on our server, while your swing is analyzed, to blur your face, and are never kept.
• If you adjust a key position, we use the body points we saved from the frames around each key position (not the video or images, and no face points). They're deleted with your report.
• If you make a share link, anyone with it can see the shared frames and summary until it expires or you turn it off. We keep a scrambled copy of the link only.
• Your choices (language, camera angle, handedness).
• If you send feedback: your message, and your email if you add it, are sent to us by email (to contactme@losgonza.com, through our email provider) so we can reply and improve the app. We don't store them in the app. We keep feedback emails only as long as we need them to reply and improve the app, then delete them.
• We count anonymous, aggregate page and step totals per day (for example, how many people opened the upload page). These counts contain no personal data, cookies or IP addresses.
• If you create an account (optional): your email address (used to send links to create or reset your password and account notices, and to identify your account), a hashed version of your password (never the password itself; see Email sign-in and password below), your self-declared state of residence, your language, and your consent records (when you confirmed you're 18 or older and agreed to the sign-up notice, and which version of the notice).

What an account keeps

• Email address
• Password, stored only as a hash (scrypt), and when it was set
• State of residence (as you declared it at sign-up)
• Language (English or Spanish, used for account emails)
• Account creation time: when you created the account
• Consent records: when you confirmed you're 18 or older, when you agreed to the sign-up notice, and which version of the notice
• Deletion notices: when we emailed you that a report, or your account, will be deleted, if we did
• Last sign-in time: used only to delete an account that has no reports after 12 months without a sign-in
• Scheduled deletion date: a backup date when our database removes the account record automatically, set after your last report's deletion date and the 12-month rule
• An internal account ID
• Reports
• Key-frame images (head blurred, with a body overlay)
• Body points (not face points)
• We don't keep face points (landmarks 0-10 of the pose software) or your video.

Why

• Only to create and show your report, with your consent at upload.
• With an account: to keep your reports so you can track your progress, with your consent at sign-up.
• Swing data is not used to train models. Body points are measured by software that runs on our server; Google Gemini is not used during the beta.

Storage and deletion

• Reports in an account, 1 year each: each report, with its key-frame images and body points, is deleted 1 year after that report was made. Your other reports aren't affected. Deletion is automatic and can take a few days to finish.
• Account data once every report is gone: your email, sign-up and consent records and the rest of your account data stay while your account has reports. Once it has no reports, we delete the account after 12 months without a sign-in; signing in keeps it. You can delete your account anytime on My swings.
• Without an account, reports may be removed sooner during the beta, for example when our server restarts. You can delete one right away with Delete my data now.
• Delete report removes that report, its key-frame images and body points right away. Delete my account and all data (on My swings) removes your email, password hash, sign-ins, consent records, reports, key-frame images and body points right away. Both are permanent.
• Weekly practice plan reminder (only if you opt in on a plan page): we keep your email address, the plan it's for (the report it comes from and its language), the time you opted in and the time you unsubscribed. Your email address, the plan and the opt-in time are deleted when you unsubscribe; the unsubscribe time is kept with your account so we don't email you again, and everything is deleted when you delete your account. No reminder is sent until a sending schedule exists and has been reviewed.
• Backups: we don't keep backups of account data. Deleted data may remain in our database's internal version history for up to 1 hour, then it's gone.
• Reports you made without an account move into your account only if you're signed in and choose Save these reports to my account.
• Reports in your account can only be opened when you're signed in.
• Reports are reachable only through a hard-to-guess link. They are not shared publicly.
• Anyone with the link can open a report made without an account until it's deleted.

Service providers

• Google Cloud (hosting and storage). Google Cloud keeps basic server logs (time, IP address, page requested) for up to 30 days.
• Google Gemini is not used during the beta.
• Resend (sends our account emails, such as create-your-password and password-reset links and account notices, as our processor; receives your email address)
• Resend keeps a record of emails it sends (including your email address) for a limited time under its own policy: https://resend.com/legal/privacy-policy

Email sign-in and password

• If you create an account, we store your account email and a hashed version of your password (scrypt), never the password itself. Both are deleted with your account.
• You sign in with your email and password. To create your password, or to reset it with Forgot password, we email you a link. These links can be used only once and expire after 60 minutes. We keep only a hash of each link, not the link itself.
• Resend sends our account emails as our processor. They come from mail.losgonza.com, and replies go to contactme@losgonza.com.
• Sign-in attempts are rate-limited to help protect accounts.
• App sign-in code: on a browser where you're signed in, you can make a 6-digit code on My swings to sign in on the installed (home-screen) app. It works once and expires after 5 minutes, and making a new code cancels the old one. We keep only a SHA-256 hash of the code, with your account email and the expiry time, in our server's memory (not in our database). The code is removed as soon as it's used. An expired code can't be used, and it's removed from memory the next time a code is made or entered, or when our server restarts.

Invite links

• If you create your account from a friend's invite link, we keep which account invited yours, when, and whether a free month was given. This is deleted when either account is deleted.
• Your invite code and your free-month records are deleted with your account.
• If you open a friend's invite link, a cookie remembers it until you create your account or close your browser.

Cookies

• We use a cookie to remember your language and, if you sign in, a cookie that keeps you signed in for up to 30 days or until you log out. No advertising or tracking cookies. Without an account, your list of recent reports is kept only in your browser; you can clear it in your browser settings.

Your rights

• Californians may ask to know, correct or delete their data. Account holders can delete any report or their whole account on My swings, or email contactme@losgonza.com. We don't sell or share personal information.
• We only email you about your account (links to create or reset your password). No marketing emails.

Children

• Not for anyone under 18.