Privacy Policy
This policy covers the WrenHouse Golf iPhone app, the web app at app.wrenhouse.golf, the kids’ site at kid.wrenhouse.golf, and the website at wrenhouse.golf. It takes about five minutes to read. A Family & Kids section follows it.
- No ads. No selling your data. No tracking or analytics tools in the app or on our sites.
- Kids don’t have accounts. A parent or guardian (16 or older) holds the account and adds kids as family members.
- A child’s name never leaves the device it was typed on. Our servers know a child only by a random code, one initial, an age range, and their golf progress.
- You can delete everything from Settings → Delete account, on iPhone and on the web.
1. What we collect
About you, the account holder
- Email address, to sign you in with a 6-digit code (we don’t use passwords) and to contact you about your account.
- Your profile: your name, age or age range, swing hand, skill level, goal, years playing, practice habits, lesson history, the clubs in your bag and your distances with them, your usual miss, and an optional note about a physical limitation (for example back, shoulder or knee) that you choose to tell us so your plan avoids it.
- Your rounds: courses, scores, hole-by-hole stats, and any hole photos you add (section 6).
- Your mailing address, if you add one, only to mail the physical keepsakes your family earns. Only you can see or change it; on iPhone it sits behind Face ID or your passcode.
- A Kid PIN, if you set one. We store only a scrambled (hashed) version, never the digits.
- Questions you ask the AI caddie (section 3).
- Your confirmation as a parent or guardian when you add a child: which account confirmed, for which child’s random code, which wording, and when.
About family members, including kids
Each family member is stored under a random code (for example m_9f3a…) that is never derived from their name. For each member our servers keep:
- one initial (so you can recognize them on a new device), whether they’re a kid, and their swing hand;
- for kids, an age range (7–8, 9–12 or 13–17), never an exact age or birthday; for adults, their age;
- practice preferences you set: goal, skill level, up to two practice focus areas, and optionally club distances and usual miss;
- their progress: scores in family rounds, drills completed, check-ins, coins, markers, avatar and outfit choices, Buddies, and earned keepsakes.
Names stay on your device. The names you type for family members are stored only on the phone or browser where you typed them. On a new device you’ll see an initial until you type the name again.
Collected automatically
- Basic technical data that every website and server receives: IP address, device or browser type, and the time of each request. Our providers keep these in their logs (section 7).
- On your device: the app keeps your profile, family names and settings in your phone’s or browser’s local storage so it works fast and offline.
We don’t collect your precise location, contacts, birthdays, last names or advertising IDs.
Permissions on iPhone
We ask only when you use the feature, and you can turn any of them off in iOS Settings.
- Camera: to take hole photos during a round, or to photograph a scorecard so the app can read it.
- Microphone and speech recognition: so you can ask the caddie by voice. Your speech is turned into text by Apple’s speech service (on the web, by your browser’s speech service: Apple in Safari, Google in Chrome). Only the text is sent to our caddie; we don’t record or store audio.
- Face ID: to confirm it’s you before you change the Kid PIN or open your mailing address. Face ID is handled entirely by your iPhone; we never see face data.
2. Why we use it
- To run your account and your family’s practice plans, rounds, drills and rewards.
- To sign you in, keep your account secure, and limit abuse (for example rate limits on the AI caddie).
- To mail physical keepsakes your family has earned.
- To answer your questions and support requests.
- To understand sign-ups: we send ourselves a daily summary of new accounts (the account holder’s name and email, skill, goal, and number of family members).
We don’t use your data for advertising or ad profiling, we don’t sell it, and we don’t use it to train AI models. Our AI provider, Anthropic, does not train its models on data sent through its commercial service.
3. The AI caddie and scorecard reader
The caddie’s answers come from Anthropic (Claude), through our own server, which only accepts requests from a signed-in account. When you ask a question we send Anthropic:
- For an adult: the question, the recent messages in that chat, and a short golfer summary: your name, swing hand, skill, goal, clubs and distances, and the current hole if you’re in a round.
- For a kid: one of a fixed set of tap-to-ask questions (kids can’t type to the caddie), plus “a junior golfer,” their age range and their swing hand. A child’s name is never sent.
Coaching brief: when you build your plan, we send your answers (skill, goal, what costs you strokes and so on) but not your name; your name is added on your device afterward.
Scorecard reader: if you photograph a scorecard, the photo goes to Anthropic to read the course details and scores. We don’t ask it for player names, and we don’t keep the photo.
4. Who processes your data
We use a small number of service providers that process data only to run WrenHouse for us.
| Provider | What it does for us | What it handles |
|---|---|---|
| Supabase | Database, sign-in, photo storage | Everything in section 1 that is in the cloud; sign-in logs (IP address, time) |
| Cloudflare | Hosts our websites and runs our caddie server | Website requests and IP addresses; caddie questions and scorecard photos pass through and are not stored |
| Anthropic | Writes AI caddie replies, reads scorecards | What section 3 describes |
| Resend | Sends email (your sign-in codes; our internal sign-up summary) | Your email address and the message content |
| Google (Gmail) | Our team inbox, which receives the daily sign-up summary | Account holder name, email, skill, goal, family size |
| Google Fonts, jsDelivr | Deliver fonts and standard code to our web pages | Your IP address and browser details when a page loads; no account data |
| GolfCourseAPI | Course search and course details | Only the course name you search for |
| Apple | Runs the iPhone app; Face ID and speech recognition | See “Permissions on iPhone” |
5. Sharing
- We never sell or rent your data, and we don’t share it for advertising.
- We share data only with the providers above, to run the service.
- We may disclose data if the law requires it (for example a valid court order) or to protect someone’s safety.
- If WrenHouse is ever sold or merged, your data would move to the new owner only under this policy’s promises, and we would tell you before it happens so you can delete your account first. Where the law requires it, we would ask parents to consent again for their children’s data.
6. Photos
Hole photos you add to a round stay on your device during the round and are uploaded when you save it. They are kept in private storage: only your signed-in account can view them, and the app shows them through links that expire after an hour. Photos are resized and re-encoded on your device before upload, which removes embedded data such as location. Kid screens don’t take or upload photos. Deleting your account deletes all your photos.
7. How long we keep data
- Your account and family data: until you delete your account (section 8).
- Previous versions of your profile: a safety copy of each change, kept 180 days and then deleted automatically, or right away if you delete your account.
- Parent confirmations: kept as long as the family account exists, as our record of your consent; deleted with your account.
- Kid pairing codes: expire after 10 minutes.
- Mailing address: kept until you change or delete it, or delete your account. Each keepsake shipment keeps a copy of the address it went to, which is also deleted with your account.
- Sign-up summary emails in our team inbox: kept until we clear them; email us and we’ll delete yours.
- Provider logs (sign-in logs, server logs, AI request records): kept by each provider for a limited period under its own terms, then deleted.
8. Your choices and rights, including deleting everything
- See and correct: everything about you and your family is in Settings and can be changed there.
- Remove a family member: remove them in Settings. To have that member’s saved progress erased from our servers right away, email us.
- Delete your whole account: Settings → Delete account on iPhone or the web; type DELETE to confirm. This permanently removes, right away: your sign-in account and all sessions; every family profile, your kids’ Clubhouse, coins, markers and Buddies, all rounds, drills and family rounds; all your round photos; your coaching brief, mailing address, keepsake records, Kid PIN and parent confirmations; and every saved previous version of your profile. Paired kid devices stop syncing.
- What deletion doesn’t remove: data stored on your own devices (names, settings, a kid device’s local progress; delete the app, tap “Grown-ups: forget this device” on a kid device, or clear site data in the browser); our providers’ security and request logs, which expire on their own schedules; past sign-up summary emails in our team inbox (email us to delete yours); and records Anthropic keeps of past caddie requests under its retention terms.
- Get a copy of your data: email us from your account’s email address and we’ll send it within 30 days.
- Delete by email: if you can’t reach Settings, email us from your account’s email address and we’ll complete the deletion within 30 days.
- State privacy rights: depending on where you live (for example California), you may have rights to know, correct, delete and opt out. We don’t sell or share data for advertising, so there is nothing to opt out of; email us for the rest.
9. Security
Data travels encrypted (HTTPS). Every family’s cloud data is locked so that only that family’s signed-in account can read or change it. The caddie server requires a signed-in account and limits how fast anyone can call it. PINs are stored only as hashes. Admin access to keepsake fulfillment is restricted and checked on the server. Our setup has been reviewed by a security professional. No system is perfectly secure; if a breach affects your data, we’ll notify you as the law requires.
10. Changes to this policy
If we change this policy, we’ll update the date at the top. Before an important change takes effect, especially one about kids’ data, we’ll tell you in the app or by email, and we’ll ask for your consent again where the law requires.
11. Contact
SPINVIBES L.L.C. (WrenHouse Golf) · [email protected]
Family & Kids
WrenHouse is built for families, with the parent in control. Our setup has been reviewed by a security professional and by children’s-privacy counsel.
Who can have an account. Only people 16 or older. Sign-up asks you to confirm your age, and anyone younger is asked to have a parent or guardian set up the family plan. Children never sign up, never have an email or password, and never create their own account.
How kids join. A parent adds each child as a family member and chooses a nickname, age and swing hand. Before a child’s profile is used, the signed-in parent confirms they are the child’s parent or guardian and agrees to us storing the information below to run the child’s plan. We record which account confirmed, for which child’s random code, and when. If the parent doesn’t confirm, they can remove the child instead. A child added only on a kid’s own device stays on that device and is never saved to our servers.
Kid devices. A child can use their own phone or tablet only after a parent pairs it with a one-time code from the parent’s app, which expires in 10 minutes. On a paired kid device, grown-up actions (unpairing, confirming a keepsake to be mailed) need the Kid PIN or a fresh parent code. Kid screens have no account settings, no social or sharing features, no chat with other people, and no ads.
What we keep about a child, in the cloud:
- a random code (never derived from their name) and one initial;
- an age range (7–8, 9–12 or 13–17), never a birthday or exact age;
- swing hand and practice preferences the parent picks (goal, skill, up to two focus areas);
- their progress: drills, check-ins, coins, markers, avatar and outfit choices, Buddies, family-round scores and earned keepsakes;
- the parent’s confirmation described above.
What never leaves the child’s device: their nickname, and the finer “4–6” age range (the cloud stores those kids as 7–8).
What we never collect from a child: last names, birthdays, email, phone, address, contacts, location, photos, voice, or free-typed messages. Kids can’t type to the AI caddie; they tap one of a fixed set of questions. Kid screens don’t ask for or upload photos. Keepsakes are mailed to the parent’s address, entered by a parent in their own app; kids never enter an address.
What goes to the AI caddie for a child: the tapped question, “a junior golfer,” their age range and their swing hand. Never their name.
No ads, no tracking, no selling, for anyone and especially kids. The iPhone app contains no advertising, analytics or tracking tools and declares no tracking to Apple. The kids’ site loads a font from Google Fonts, which sees the device’s IP address when the page loads.
Coins and rewards are earned through practice only. They can’t be bought, and nothing is random.
Parents’ rights. At any time you can review or change what’s stored about your child in Settings, remove your child as a family member, stop further use by unpairing their device, and delete your child’s data and your whole account in Settings → Delete account. To request a copy or to delete by email, write to [email protected]; we’ll respond within 30 days.