Privacy Policy

Golf Unlocked · Last updated October 21, 2026 · Operated by Doty Studio LLC, doing business as Golf Unlocked (“Golf Unlocked,” “we,” “us,” or “our”)

This Privacy Notice describes how and why we may access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:

• Use the Golf Unlocked mobile application (the “App”);
• Visit any website of ours that links to this Privacy Notice; or
• Engage with us in other related ways, including support requests.

Golf Unlocked is a consumer golf swing–analysis application. You record or upload a video of your golf swing, and the App uses computer vision and machine learning to estimate body position, detect swing events (address, top of backswing, impact, finish), track the club, and compute measurements such as tempo, posture angles, head movement, and hip turn, shoulder turn, and X-factor. It then flags likely swing issues, suggests practice drills, and can build a weekly practice plan around the time you have. The App is a training aid for recreational golfers. It is not coaching, medical, physical-therapy, or fitness-prescription advice.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions, contact us at team@doty-studio.com.

SUMMARY OF KEY POINTS

What personal information do we process? Account information (email address), the swing videos you submit, the body-motion measurements derived from them, the golf details you choose to add (such as your handedness, handicap, club, and shot results), and technical information about your device and use of the App.

Do we process sensitive personal information? We process video of your body and derive skeletal motion data from it. We do not use this to identify you, we do not perform facial recognition, and we do not create a biometric identifier or template. See Section 13, which we encourage you to read in full.

Do we collect information from third parties? No, with one exception: if you test a pre-release version of the App through Apple’s TestFlight, Apple passes us crash reports and any feedback you choose to send. See Section 1.

How do we process your information? To provide, improve, and administer the Services, to communicate with you, for security and fraud prevention, and to comply with law.

Do we train AI models on your content? No. Your raw video is held only temporarily while your swing is analyzed and your overlay is rendered (and a two-second backswing cut only while it is measured), is never written to long-term storage, and is never added to a training dataset. See Section 5.

How do we keep your information safe? Through organizational and technical measures. No system is perfectly secure, so we cannot guarantee it.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, and obtain a copy of your personal information. You can delete your entire account and all associated data from inside the App at any time.

TABLE OF CONTENTS

1. What information do we collect?
2. How do we process your information?
3. When and with whom do we share your personal information?
4. Do we use cookies and other tracking technologies?
5. Do we offer artificial intelligence-based products?
6. How do we handle your swing videos?
7. How long do we keep your information?
8. How do we keep your information safe?
9. Do we collect information from minors?
10. What are your privacy rights?
11. Controls for do-not-track features
12. Do United States residents have specific privacy rights?
13. Body-motion data and biometric considerations
14. Other people appearing in your videos
15. Our proprietary technology
16. Subprocessor list
17. Security incident notification
18. Account cancellation and data deletion
19. Modifications to our models
20. Do we make updates to this notice?
21. How can you contact us about this notice?
22. How can you review, update, or delete the data we collect from you?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

The personal information we collect may include:

• email address (used as your account identifier and login);
• authentication data (password credentials, managed by our authentication provider; we never see or store your password in readable form);
• golf swing videos you record or upload, which contain images of you and may contain images of your surroundings and of other people who happen to be in frame;
• optional information you attach to a swing, such as the club used, the camera view, and shot outcome tags (for example “draw”, “fade”, “thin”);
• your handedness and your handicap (or skill bracket), if you set them in the App. They are kept on your device, sent with each swing so it can be read the right way round and compared with golfers of a similar level, and stored with that swing’s results;
• your practice plan settings, if you build a plan: the practice time you have each week, how many days you can practice, whether to include putting, and the swing fault you choose to work on. The plan built from them is stored with your account until you replace it, delete it, or delete your account;
• folders you create to group your swings: each folder's name and which of your swings it holds. A folder is stored with your account until you delete it or delete your account; deleting a folder never deletes the swings in it;
• support communications and inquiries;
• account preferences and settings.

Information derived from your videos

When you submit a swing, we generate and store numeric measurements derived from the video. These include body-landmark coordinates over time (skeletal pose), swing event timings, posture and joint angles, head movement, stance geometry, club path, and the swing issues our detectors flag. We also store a short annotated overlay video (a rendered clip showing your swing with graphics drawn over it), still freeze-frames of flagged moments, and 3D motion data (estimated body-landmark positions in three dimensions) for the 3D view. If you upload a second camera angle, its overlay video is stored too. For face-on swings we also store your hip turn, shoulder turn, and X-factor at the top of the backswing, measured by a 3D body model a minute or two after the rest of the analysis (see Section 6).

Information automatically collected

In Short: Some technical information is collected automatically when you use the Services.

• Log and usage data. Service-related, diagnostic, and performance information our servers record, such as IP address, timestamps, request outcomes, processing duration, and error reports.
• Device data. Information about the device you use to access the Services, such as device model, operating system version, and application version.
• Processing metadata. Information generated while analyzing a swing, including video properties (duration, frame rate, resolution), detection confidence scores, whether processing succeeded or failed, which of our servers analyzed the swing, and a one-way checksum of the first decoded frames (it cannot be turned back into video). This is used to operate the Service and debug issues, such as two uploads of the same swing giving different results.

We do not collect precise geolocation, contacts, health-app data, advertising identifiers, or browsing history from other apps or sites.

Pre-release testing (TestFlight)

If you test a pre-release version of the App through Apple’s TestFlight, Apple collects information under its own terms and privacy policy and shares some of it with us: the name and email address you were invited with, your device model and operating-system version, crash reports and basic usage figures (such as installs and sessions), and any feedback or screenshots you choose to send through TestFlight. We use this only to find and fix problems in the App.

Device permissions

The App asks for the following permissions. Each is optional and you can decline or revoke it in your device settings, though declining will limit the relevant feature:

• Photo library: so you can choose an existing swing video to analyze. We access only the file you select. If you allow photo access and select a Slo-mo video, the App reads that video's original, full-frame-rate recording (the system picker gives apps only a slowed-down copy), re-encodes it on your device, and uploads it in place of the copy. The App does not read, upload, or store any other photo or video in your library.
• Camera: only if you choose to record a swing directly in the App.
• Microphone: video recorded in-app may include audio captured by the device. Audio is not analyzed, is never sent to our GPU computing provider, and is discarded with the raw video.

Payment data

The App does not currently process payments, and we do not collect payment card information. If we introduce paid features in the future, we will update this Notice before doing so, and any card data will be handled by a PCI-compliant payment processor or by the Apple App Store / Google Play billing systems, not by us.

Other than as described in Section 13, we do not process sensitive personal information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: To provide, improve, and administer the Services, communicate with you, for security and fraud prevention, and to comply with law.

• To create and manage your account and authenticate you.
• To analyze your swing and deliver results, the core function of the Service.
• To show your history and trends across sessions.
• To respond to your inquiries and provide support.
• To send administrative information, such as changes to our terms or policies, and password-reset emails you request.
• To protect the Services, including abuse monitoring, rate limiting, and enforcing usage quotas.
• To evaluate and improve the Services using aggregate, non-identifying operational metrics such as failure rates and processing times.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

We do not sell your personal information, share it for cross-context behavioral advertising, or use it for targeted advertising or for profiling that produces legal or similarly significant effects.

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information only with service providers who help us run the Service, and in the limited legal situations described below.

We may share data with third-party vendors and service providers who perform services for us and require access to do that work. They are bound by contract, may use the information only as we instruct, and may not use it for their own purposes. The categories are:

• Cloud computing and hosting providers, including the GPU computing provider that runs our 3D body model
• Data storage providers
• User account registration and authentication services
• Performance and error monitoring tools
• Email delivery providers (for account emails such as password resets)
• Legal and professional advisors

We may also share your information:

• To comply with law, or in response to a valid legal request, subpoena, or court order, or where necessary to protect our rights, your safety, or the safety of others.
• Business transfers. In connection with a merger, financing, acquisition, or sale of all or part of our business. We will provide notice before your information becomes subject to a materially different privacy policy.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

The Golf Unlocked mobile app does not use cookies, advertising identifiers, or third-party analytics or advertising SDKs. It stores a small amount of data locally on your device: your login session, your preferences (such as handedness and handicap), drawings you make on your swing videos, the practice sessions you check off, and any swings queued while you were offline. Your drawings and check-offs never leave your device.

Our public web pages, including this one, are served as static documents and do not set tracking cookies.

5. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: Yes. The analysis itself is powered by machine learning models we operate. We do not train those models on your content.

The Service uses computer vision and machine learning models to estimate body pose, classify swing events, and track the club. Your hip turn, shoulder turn, and X-factor come from SAM 3D Body, a 3D body model developed by Meta Platforms, Inc., which we license and run ourselves. We run every model on cloud infrastructure we rent and operate: Google Cloud for the analysis service, and Modal for the GPU that runs the 3D body model. No model developer, including Meta, receives your videos or your data.

We do not train on your data

We do not use your swing videos, your derived body-motion data, your overlay clips, or your measurements to train, fine-tune, or evaluate our models. This is not merely a policy commitment: your raw video is never written to long-term storage and is deleted automatically once your swing is analyzed and your overlay is rendered, so it is not technically available to be added to a training dataset.

Our models are trained on separately sourced and synthetically generated data, or, for third-party models such as SAM 3D Body, by their developers on the developers’ own data. If we ever wish to train on user-submitted content, we will change this Notice, tell you clearly, and obtain your opt-in consent first. We will not do so on an opt-out basis.

Third-party AI providers

We do not send your videos or personal information to general-purpose third-party AI services (such as OpenAI, Anthropic, or Google Gemini) for processing.

Accuracy

Measurements are estimates produced by automated systems from ordinary video. They are affected by camera angle, frame rate, lighting, and framing, and they will sometimes be wrong. See our Terms of Service for the accuracy disclaimer that governs your use of these results.

6. HOW DO WE HANDLE YOUR SWING VIDEOS?

This is the most sensitive information you give us, so we want to be precise about its lifecycle:

1. You select or record a video in the App. It is transmitted to our analysis service over an encrypted connection.
2. The analysis service writes the video to a temporary working directory held in the service's working memory, analyzes your swing, returns your results to the App, and renders your overlay video from that temporary copy (for a single-angle upload the overlay may finish after your results arrive; for a two-angle upload both overlays are rendered first). It then deletes the entire working directory, including your raw video, automatically, whether the analysis succeeded or failed.
3. For a face-on swing, before deleting that temporary copy, the analysis service also cuts about two seconds of your backswing out of it (picture only, no sound) and sends it, with a box marking where you stand in each frame, over an encrypted connection to our GPU computing provider, Modal Labs, Inc., in the United States. There our 3D body model estimates the positions of your hips and shoulders in each frame. The cut is held only while it is measured and is discarded when the measurement completes; if a measurement fails, Modal deletes it within 7 days at most. The estimated hip and shoulder positions come back to our analysis service, which keeps only the three resulting angles. Modal keeps its copy of those positions for up to 7 days, then deletes it.
4. Your raw video is never written to our long-term storage and is not accessible to us afterwards. We cannot retrieve it, and neither can anyone else.
5. What is retained is: (a) the rendered overlay clip (and the second-angle overlay, if you uploaded one), its freeze-frames and its 3D motion data, stored in our cloud storage and reachable only by your account through short-lived signed links; and (b) the numeric measurements for that swing, including your hip turn, shoulder turn, and X-factor, stored in our database under your user ID.
6. Overlay videos, second-angle videos, freeze-frames and 3D motion data are automatically deleted after 90 days, unless you star the swing to keep it. Your swing measurements are kept until you delete the swing or your account, because your progress trends are built from them.
7. When you delete a swing, its videos, freeze-frames and 3D motion data are removed right away, or by our nightly cleanup if our analysis service could not be reached when you deleted it.

Because the overlay clip is rendered from your video, it contains your image. Treat it as you would the original.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

• Raw swing video: held only in temporary working memory while your swing is analyzed and your overlay is rendered, then deleted automatically. Never written to long-term storage.
• Backswing cut sent for the 3D turn measurement: discarded by our GPU computing provider (Modal Labs, Inc.) when the measurement completes, and within 7 days at most if the measurement fails.
• 3D body-model results (the estimated hip and shoulder positions over those two seconds): kept by our GPU computing provider for up to 7 days, then deleted. We keep only the resulting angles, as part of your swing measurements.
• Overlay videos, second-angle videos, freeze-frames and 3D motion data: 90 days, unless you star the swing, in which case they are kept until you delete the swing or close your account.
• Swing measurements: until you delete the swing or close your account.
• Account information: for as long as your account is open.
• Operational logs: a short rolling window for debugging and security.
• TestFlight crash reports and feedback: held by Apple in App Store Connect under Apple’s own retention rules; we use them only to fix problems in the App.

No purpose in this Notice will require us to keep your personal information for longer than twenty-four (24) months past the termination of your account. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, or, if that is not immediately possible (for example because it sits in a backup archive), securely store it and isolate it from further processing until deletion is possible.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures, including encryption in transit, authentication on every request that touches your data, access rules that prevent one account from reading another’s data, and short-lived signed links for overlay clips rather than public URLs. Our GPU service accepts work only from our own analysis service, verified with a Google-signed identity token, and runs without outbound internet access.

However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorized third parties will not defeat our security and improperly access your information. Transmission of personal information to and from our Services is at your own risk.

9. DO WE COLLECT INFORMATION FROM MINORS?

In Short: The Services are not directed to children under 13, and we do not knowingly collect their information.

The Services are intended for users aged 13 and older. We do not knowingly collect, solicit data from, or market to children under 13 years of age, nor do we knowingly sell such personal information. If you are under 18, you may use the Services only with the involvement and consent of a parent or legal guardian, who should review this Notice with you, particularly Section 13, because the Service processes video of your body.

If we learn that we have collected personal information from a child under 13, we will deactivate the account and take reasonable measures to promptly delete that data from our records. If you believe we may have collected information from a child under 13, contact us at team@doty-studio.com and we will act promptly.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time.

Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw it at any time by contacting us using the details in Section 21, or by deleting your account. This will not affect the lawfulness of processing before withdrawal.

Account information. You can review or change your account information in the App at any time. To permanently delete your account and all associated data, use Settings → Delete my account in the App, or email team@doty-studio.com.

Marketing. We do not currently send marketing email. If we begin to, every such message will include an unsubscribe link. Service messages necessary to administer your account (such as password resets) will continue regardless.

If you have questions or comments about your privacy rights, email team@doty-studio.com.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. No uniform technology standard for recognizing and implementing DNT signals has been finalized. We do not track you across third-party websites or apps, so we have no cross-site tracking to disable. If a standard is adopted that we must follow, we will describe it in a revised version of this Notice. California law requires us to state how we respond to DNT signals: because there is currently no recognized standard, we do not respond to them at this time.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have specific rights regarding your personal information.

Categories of personal information we collect

The table below shows the categories of personal information we have collected in the past twelve (12) months.

We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed personal information to service providers as described in Section 3.

We may use your personal information for our own internal business purposes, such as technical development and debugging. This is not considered “selling.”

Your rights

These rights are not absolute, and in certain cases we may decline a request as permitted by law:

• Right to know whether we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of processing for targeted advertising, sale of personal data, or profiling producing legal or similarly significant effects (we do none of these)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including California)

How to exercise your rights

Email team@doty-studio.com, or use Settings → Delete my account in the App for deletion. You may designate an authorized agent to make a request on your behalf; we may deny a request from an agent who does not submit proof of valid authorization.

Request verification

We will need to verify your identity before acting on your request, ordinarily by confirming control of the email address associated with the account. We will use information provided in your request only to verify your identity.

Appeals

If we decline to act on your request, you may appeal by emailing team@doty-studio.com. We will inform you in writing of any action taken or not taken, with reasons. If your appeal is denied, you may submit a complaint to your state attorney general.

California “Shine The Light” law

California Civil Code Section 1798.83 permits California residents to request information about categories of personal information we disclosed to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

13. BODY-MOTION DATA AND BIOMETRIC CONSIDERATIONS

This section describes the most personal data the Service handles, and we want to be direct about it.

To analyze a golf swing, the Service processes video of your body and derives skeletal motion data: the estimated positions of body landmarks (shoulders, hips, wrists, knees, ankles, and similar) in each frame, and the angles and movements computed from them.

For face-on swings, a 3D body model also estimates the three-dimensional positions of your hips and shoulders over about two seconds of your backswing, to measure your hip turn, shoulder turn, and X-factor (see Section 6). We keep only the resulting angles.

What we do with it: we use it solely to measure your golf swing and produce your results, trends, and drill suggestions.

What we do not do with it:

• We do not use it to identify or recognize you.
• We do not perform facial recognition, face matching, or face-geometry analysis. Our pose models place a few points on your head (such as your nose and ears) to measure head movement, and our 3D body model estimates your whole body, face included, in temporary memory on its GPU. No facial measurement is kept, and nothing is used to recognize who you are.
• We do not create, store, or use a biometric identifier or biometric template capable of identifying an individual.
• We do not use it to infer health conditions, medical status, or fitness levels beyond golf-swing mechanics.
• We do not sell it, share it for advertising, or use it to train our models.

Some privacy laws define “biometric information” broadly enough to include gait patterns or exercise data that contains identifying information. We have therefore chosen to treat your video and derived body-motion data with heightened protection regardless of how it is ultimately classified: it is bound to your account, never used for identification, never used for training, never written to long-term storage in the case of raw video (which is deleted automatically once analysis and overlay rendering finish), and fully deletable by you at any time. If you are in a jurisdiction with a specific biometric privacy statute and wish to exercise rights under it, contact team@doty-studio.com.

14. OTHER PEOPLE APPEARING IN YOUR VIDEOS

A swing video may capture other people in the background: at a range, on a course, or at home. We process such incidental footage only as necessary to deliver the analysis you requested, we do not attempt to detect, identify, profile, or contact anyone appearing in your video, and the raw video (and therefore their image) is never written to long-term storage and is deleted automatically once analysis and overlay rendering finish. The two-second backswing cut sent to our GPU computing provider contains the whole camera frame, so anyone in frame during your backswing appears in it too; it is discarded when the measurement completes, as described in Section 6.

You are responsible for having any permission required to record and upload video containing other identifiable people, and for complying with the rules of the facility where you record. Please do not upload video of other people who have not agreed to be recorded, and take particular care with video containing children other than your own.

If you believe your image appears in content submitted by another user and you have concerns, contact team@doty-studio.com. Note that because raw video is never written to long-term storage, in most cases no footage of you will exist on our systems; a retained overlay clip belongs to the account that created it, and we may need to direct your request to that user.

15. OUR PROPRIETARY TECHNOLOGY

Doty Studio LLC develops or licenses, and operates, the models that power the Service. Analysis runs on cloud infrastructure we control. Infrastructure providers process your content only as necessary to operate that infrastructure, under contractual obligations that prohibit them from using it for any other purpose.

16. SUBPROCESSOR LIST

We use Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, and Google Cloud Run) for authentication, data storage, and running our analysis service, and Modal Labs, Inc. for the GPU computing that runs the 3D body model measuring your hip turn, shoulder turn, and X-factor. Both process your data in the United States. A current list of material subprocessors is available on request to team@doty-studio.com. We may add, change, or remove subprocessors as our operational needs evolve.

17. SECURITY INCIDENT NOTIFICATION

In the event of a confirmed security incident affecting your personal information, we will notify affected users without undue delay and in any event within seventy-two (72) hours of confirming the incident, except where notice is prohibited by law or law enforcement or would compromise an ongoing investigation. Notification will be sent to the email address associated with your account and will include, to the extent known: the nature of the incident, the categories of information affected, the steps we have taken, and recommended actions you may take.

18. ACCOUNT CANCELLATION AND DATA DELETION

To delete your account and your data, you may:

• Use Settings → Delete my account in the App; or
• Email team@doty-studio.com from the address associated with the account.

Deleting your account removes all account data: your authentication record, your settings, your practice plan, every swing session record and its measurements, and every overlay video, second-angle video, freeze-frame and 3D motion file associated with your account. Because raw video is never written to long-term storage, there is no raw video to delete. We will complete deletion from active systems within thirty (30) days, subject to removal from backups within a further ninety (90) days and to any retention required to comply with legal, accounting, or dispute-resolution obligations.

Hip and shoulder position estimates still held by our GPU computing provider when you delete expire within 7 days of their measurement.

You may also delete an individual swing at any time from your history without deleting your account. Its measurements are deleted with it, and its videos, freeze-frames and 3D motion data are removed right away, or by our nightly cleanup if our analysis service could not be reached at that moment.

19. MODIFICATIONS TO OUR MODELS

We continuously improve the Service. From time to time we may release new model versions or change the technology underlying the analysis. Such updates may change the measurements produced for a given swing, and results computed by different versions may not be directly comparable. We will use commercially reasonable efforts to give notice of material changes, but routine improvements may occur without prior notice.

20. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

The updated version will be indicated by an updated date at the top of this Notice. If we make material changes, we may notify you by prominently posting a notice or by sending you a direct notification. We encourage you to review this Notice periodically.

21. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email team@doty-studio.com or write to us at:

Doty Studio LLC (dba Golf Unlocked)
2108 N St, Suite N
Sacramento, CA 95816
United States

22. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect from you, to correct inaccuracies, or to delete it. The fastest route for deletion is Settings → Delete my account in the App. For access or correction requests, email team@doty-studio.com.