GolfBod
Legal

Privacy Policy

Effective date: July 2026 · Data controller: Vertial Holdings Pty Ltd, an Australian company (ABN 72 629 494 926 · ACN 629 494 926), Level 32, 101 Miller Street, North Sydney NSW 2060.

Introduction

This Privacy Policy explains how Vertial Holdings Pty Ltd (“GolfBod”, “we”, “us”, or “our”) collects, uses, holds, and discloses personal information in connection with the GolfBod mobile application and the golfbod.co website (together, the “Services”). We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

GolfBod is currently in pre-launch. Some features described in this policy — such as user accounts — are planned but not yet live. We’ll update this policy as those features ship.

Information we collect

We collect the following categories of information:

  • Workout data. Exercise selections, program progress, readiness inputs, and training history. In the current build this data is stored on-device; once accounts launch, it will sync to our backend so you can access it across devices.
  • Account information. When account creation becomes available, we’ll collect your email address and name (or the equivalent details provided by a sign-in provider) to create and secure your account.
  • Device & usage data. Device model, operating system, app version, crash logs, and diagnostic data, and general usage analytics (e.g. which screens and features are used) to help us fix bugs and improve the app.
  • Subscription & purchase data. If you purchase a subscription, payment is processed by the Apple App Store or Google Play, and entitlement/subscription status is managed through RevenueCat. We do not collect or store your payment card details ourselves.
  • Analytics & cookies. We use Umami — a privacy-friendly, cookieless analytics tool we self-host — to understand website traffic, and PostHog for product analytics across both the website and the app (PostHog may set cookies or use similar local storage to recognise repeat sessions and measure how features are used). This helps us fix issues and improve the Services. You can control cookies through your browser settings.

Some of this information — in particular your training inputs, readiness data, and workout history — may be health information, a type of sensitive information under the Privacy Act 1988 (Cth). We collect it only with your consent, which you provide by choosing to enter it into the app, and we use it solely to provide the Services.

How we use it

We use the information we collect to:

  • Provide, operate, and maintain the Services;
  • Personalise your training programs, readiness insights, and progress tracking;
  • Process subscriptions and manage entitlements;
  • Diagnose technical issues and improve app performance and stability;
  • Communicate with you about the Services, including updates and support; and
  • Comply with our legal obligations.

Disclosure & third parties

We do not sell your personal information. We disclose personal information to the following categories of third parties, only as needed to operate the Services:

  • Apple App Store & Google Play — for app distribution and to process subscription purchases;
  • RevenueCat — to manage and validate subscription entitlements across platforms;
  • Supabase (planned backend) — to store account and synced training data once accounts launch;
  • Hosting & CDN providers (such as Cloudflare and Vercel) — to host and deliver the website and app infrastructure; and
  • Analytics providers — Umami (which we self-host) and PostHog, to help us understand website and app usage and improve the Services.

Each of these providers is only given the information it needs to perform its function, and is contractually or technically restricted from using your information for any other purpose. We require these providers to protect your personal information to a standard at least equivalent to this policy and the Australian Privacy Principles.

Storage & security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Workout data is currently stored on your device; once cloud sync launches, data in transit and at rest with our backend provider will be encrypted. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data retention

We retain personal information for as long as necessary to provide the Services and for legitimate business or legal purposes, such as resolving disputes, enforcing our agreements, and complying with legal obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate or out-of-date information; and
  • Request deletion of your personal information, subject to any legal or legitimate business reasons we may need to retain it.

To exercise any of these rights, contact us at privacy@golfbod.co. If you have a complaint about how we have handled your personal information, contact us at the same address and we will investigate and respond within a reasonable time. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

GolfBod is not directed to, and is not intended for use by, children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us so we can delete it.

Overseas disclosure

Some of our third-party service providers (including hosting, analytics, and subscription infrastructure providers) may store or process personal information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure those recipients handle it consistently with the Australian Privacy Principles.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We’ll post the updated version here with a revised effective date.

Contact us

If you have questions about this Privacy Policy or how we handle your personal information, contact us at privacy@golfbod.co.