GolfBod
Legal

Privacy Policy

Effective date: [MONTH YEAR] · Data controller: Vertial Holdings Pty Ltd (Vertial Holdings Pty Ltd is an Australian company, ABN/ACN and registered address: [ABN/ACN and registered address])

Introduction

This Privacy Policy explains how Vertial Holdings Pty Ltd (“GolfBod”, “we”, “us”, or “our”) collects, uses, holds, and discloses personal information in connection with the GolfBod mobile application and the golfbod.co website (together, the “Services”). We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

GolfBod is currently in pre-launch. Some features described in this policy — such as user accounts — are planned but not yet live. We’ll update this policy as those features ship.

Information we collect

We collect the following categories of information:

  • Workout data. Exercise selections, program progress, readiness inputs, and training history. In the current build this data is stored on-device; once accounts launch, it will sync to our backend so you can access it across devices.
  • Account information. When account creation becomes available, we’ll collect your email address and name (or the equivalent details provided by a sign-in provider) to create and secure your account.
  • Device & usage data. Device model, operating system, app version, crash logs, and diagnostic data, and general usage analytics (e.g. which screens and features are used) to help us fix bugs and improve the app.
  • Subscription & purchase data. If you purchase a subscription, payment is processed by the Apple App Store or Google Play, and entitlement/subscription status is managed through RevenueCat. We do not collect or store your payment card details ourselves.
  • Website cookies & analytics. The golfbod.co website may use cookies and privacy-conscious analytics to understand traffic and improve the site. You can control cookies through your browser settings.

How we use it

We use the information we collect to:

  • Provide, operate, and maintain the Services;
  • Personalise your training programs, readiness insights, and progress tracking;
  • Process subscriptions and manage entitlements;
  • Diagnose technical issues and improve app performance and stability;
  • Communicate with you about the Services, including updates and support; and
  • Comply with our legal obligations.

Disclosure & third parties

We do not sell your personal information. We disclose personal information to the following categories of third parties, only as needed to operate the Services:

  • Apple App Store & Google Play — for app distribution and to process subscription purchases;
  • RevenueCat — to manage and validate subscription entitlements across platforms;
  • Supabase (planned backend) — to store account and synced training data once accounts launch;
  • Hosting & CDN providers (such as Cloudflare and Vercel) — to host and deliver the website and app infrastructure; and
  • Analytics providers — to help us understand usage and improve the Services.

Each of these providers is only given the information it needs to perform its function, and is contractually or technically restricted from using your information for any other purpose.

Storage & security

We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Workout data is currently stored on your device; once cloud sync launches, data in transit and at rest with our backend provider will be encrypted. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data retention

We retain personal information for as long as necessary to provide the Services and for legitimate business or legal purposes, such as resolving disputes, enforcing our agreements, and complying with legal obligations. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Your rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you;
  • Request correction of inaccurate or out-of-date information; and
  • Request deletion of your personal information, subject to any legal or legitimate business reasons we may need to retain it.

To exercise any of these rights, contact us at privacy@golfbod.co. If you are not satisfied with how we handle your privacy concerns, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

GolfBod is not directed to, and is not intended for use by, children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

Overseas disclosure

Some of our third-party service providers (including hosting, analytics, and subscription infrastructure providers) may store or process personal information outside Australia, including in the United States. Where we disclose personal information overseas, we take reasonable steps to ensure those recipients handle it consistently with the Australian Privacy Principles.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We’ll post the updated version here with a revised effective date.

Contact us

If you have questions about this Privacy Policy or how we handle your personal information, contact us at privacy@golfbod.co.