Privacy Policy for MyBagCaddie

Introduction

MyBagCaddie - Software Secrets LLC ("we," "our," "us," or "Company") operates MyBagCaddie, available as an iOS application, web application, and website (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, how we share it, and the rights you have regarding your data.

This policy applies to all users of MyBagCaddie, regardless of location. We are committed to transparency and compliance with applicable privacy laws in the jurisdictions where our users reside, including the General Data Protection Regulation (GDPR) in the European Union and European Economic Area, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) in California, the UK General Data Protection Regulation (UK GDPR) in the United Kingdom, the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, the Lei Geral de Proteção de Dados (LGPD) in Brazil, and the Privacy Act in Australia.

Effective Date: August 13, 2026
Last Updated: August 13, 2026

Your Golf Data Stays on Your Device

The MyBagCaddie iOS app is designed to work offline and does not require an account. The golf data you create in the app — your club setup, carry distances, bag audit results and BagScore, carry log entries, plays-like calculations, and wedge matrix — is stored locally on your device only. We do not upload it to our servers, and we cannot see it. Deleting the app deletes that data.

The information that leaves the iOS app is limited to: subscription and purchase data (processed by Apple and RevenueCat), product analytics about how you use the app (PostHog), and crash and error diagnostics (Sentry) — each described below. Because the app has no accounts, none of this is linked to your name or email address.

Information We Collect

We collect personal information from you in several ways:

Information You Provide Directly

• Waitlist / Launch List: If you join the MyBagCaddie waitlist on our website, we collect your email address so we can email you when MyBagCaddie launches and send occasional updates about the product. Every email includes an unsubscribe link, and unsubscribing stops them immediately.
• Account Registration (web app): If you create an account on the MyBagCaddie web app, we collect your email address and any other information you provide during registration. The iOS app does not use accounts.
• Payment Information: Subscriptions purchased through the iOS App Store are processed by Apple Inc. We never see your payment card details; we receive only a limited purchase-receipt identifier (routed through RevenueCat, Inc., our mobile subscription infrastructure provider) confirming your entitlement.
• Customer Support: When you contact us for support, we collect the information you provide in your message, including your name, email, and the details of your inquiry.
• Forms and Surveys: If you fill out forms on our website or participate in surveys, we collect the information you voluntarily provide.

Information Collected Automatically

• Device Information: We automatically collect information about the devices you use to access MyBagCaddie, including device type, operating system, browser version (web), app version (iOS), and device settings.
• Usage Data: We collect data about how you interact with the Service, including features used, pages or screens visited, time spent, actions taken, and performance metrics.
• Diagnostic and Performance Data: When the iOS app, web app, or website crashes or encounters an unhandled error, we collect a diagnostic event (stack trace, device and OS metadata) and send it to Sentry, our crash and error monitoring provider. See "Crash and Error Monitoring" below for what is and is not included.
• Cookies and Tracking Technologies: We use cookies and similar technologies to collect information about your browsing behavior, preferences, and interactions with our website and web app (see the Cookies and Tracking Technologies section for details).
• Analytics Data: Our analytics tools collect information about your usage patterns to help us understand how users interact with MyBagCaddie and to improve the Service.

How We Collect Information

We collect information through the following methods:

• Forms: The waitlist signup form, account registration forms, contact forms, and survey forms on our website and web app.
• Analytics Tools: PostHog measures how you use the iOS app, web app, and website. Google Analytics tracks usage of our website and web app (with your consent). We also use DataFast, a privacy-focused web analytics service that measures aggregate site traffic and conversion goals without building cross-site profiles of you.
• Crash and Error Monitoring: Sentry (Functional Software, Inc.) receives diagnostic events when the iOS app, web app, or website encounters an error.
• Payment Processors: Apple Inc. collects and processes payment information when you purchase an iOS App Store subscription. RevenueCat, Inc. is used to verify and deliver App Store subscription entitlements.
• Automatic Collection: Cookies, log files, and similar technologies automatically collect data about your device and usage of our website and web app.
• Customer Support Channels: Email correspondence where you voluntarily provide information.

How We Use Your Information

We process your personal information for the following purposes:

• Provide the Service: To deliver, maintain, and improve MyBagCaddie, including account management (web app) and technical support.
• Billing and Payments: To verify subscriptions, manage entitlements, and maintain billing records.
• Communication: To respond to your inquiries, send transactional emails (confirmations, receipts, password resets), notify the waitlist at launch, and provide customer support.
• Analytics and Research: To analyze usage patterns, understand user behavior, and conduct research to improve our Service and user experience.
• Marketing and Promotional Communications: To send promotional emails and updates about new features (you can opt out at any time).
• Security and Compliance: To detect, prevent, and address fraud, abuse, security incidents, and other harmful activities; to comply with legal obligations; and to protect the rights, property, and safety of MyBagCaddie, our users, and the public.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and government requests.

Lawful Bases for Processing (GDPR/UK GDPR)

For users in the EU, EEA, and UK, we process personal information on the following lawful bases:

• Contract: Processing necessary to provide the Service and fulfill our obligations to you.
• Legitimate Interests: Processing for analytics, marketing, security, fraud prevention, and service improvement, balanced against your privacy rights.
• Consent: For marketing communications, non-essential cookies, and certain tracking activities (obtained via cookie consent banners and opt-in mechanisms).
• Legal Obligation: Processing required to comply with applicable law.

Information Sharing and Disclosure

We Do Not Sell Your Data

MyBagCaddie does not sell, rent, or share your personal information with third parties for their marketing or commercial purposes.

Limited Sharing with Service Providers

We share personal information with third parties only when necessary to provide our Service or comply with legal obligations:

• Payment Processors: We share purchase and entitlement identifiers with Apple Inc. (for iOS App Store subscriptions) and RevenueCat, Inc. (for subscription entitlement verification) strictly to process payments and manage subscriptions.
• Analytics Providers: We share usage data with PostHog, Inc. (iOS app, web app, and website) and, with your consent, Google Analytics (Google LLC) on our website and web app, to analyze how users interact with MyBagCaddie and improve performance. We also share aggregate, non-cross-site usage and conversion data with DataFast, a privacy-focused analytics service that runs on our website without advertising cookies. In the iOS app, analytics events are not linked to your name or email — the app has no accounts.
• Hosting and Data Storage: Our website and web app are hosted on Google Cloud (Google LLC), and waitlist and account data is stored in Google Cloud Firestore.
• Legal and Compliance: We may disclose information when required by law, court order, or government request, or to protect the security, rights, and safety of our users and the public.

All third-party service providers are contractually obligated to use your information only as necessary to provide their services to us and to maintain the confidentiality and security of your data.

Crash and Error Monitoring

We use Sentry, a service operated by Functional Software, Inc., to monitor application stability and diagnose problems in the iOS app, web app, and website. When the Service encounters a crash or an unhandled error, Sentry receives a diagnostic event from your device.

The information sent to Sentry includes:

• Stack Traces: The technical record of what code was running when the issue occurred.
• Device and OS Metadata: Basic information such as operating system version, device model, browser version, and app version.
• Account Identifier (web app only): If you are signed in to the web app, the opaque user ID that identifies your MyBagCaddie account. The iOS app has no accounts, so its diagnostic events are not linked to your identity.

Sentry is configured not to collect personally identifying information by default. We do not send your email address, your name, or your IP address to Sentry, and we do not enable Sentry's Session Replay feature, so we never record your screen.

Diagnostic data is retained by Sentry per the data retention settings on our project. For Sentry's own privacy practices, seehttps://sentry.io/privacy/.

No Third-Party Marketing

We do not share your personal information with third parties for their own marketing or advertising purposes without your explicit consent.

Data Retention

We retain your personal information for as long as necessary to provide MyBagCaddie, fulfill the purposes described in this policy, and comply with applicable legal and tax regulations.

Retention Periods by Data Type

• Waitlist Emails: Retained until you unsubscribe or request deletion.
• Account Information: Retained for the duration of your account and for a reasonable period after account deletion to comply with legal and tax obligations.
• Purchase Records: Retained as required by tax and financial regulations, typically as long as necessary for accounting, auditing, and legal purposes.
• Usage and Analytics Data: Retained for a reasonable period to improve our Service; older analytics data may be aggregated or deleted periodically.
• Customer Support Records: Retained for a reasonable period to assist with future inquiries and resolve disputes.
• Marketing Communications: If you unsubscribe, we retain your email address on our suppression list to honor your opt-out preference.
• Cookies: Retained for the duration specified in each cookie's settings; most session cookies expire when you close your browser.
• iOS App Data: Your golf data lives only on your device and is never in our possession; it is deleted when you delete the app.

We review our retention practices regularly and delete data when it is no longer necessary. You may request deletion of your personal information at any time by contacting us (subject to legal and contractual limitations).

Your Privacy Rights

The rights available to you depend on your location. Below is a summary of your privacy rights under applicable laws.

Rights for EU/EEA and UK Residents (GDPR/UK GDPR)

You have the following rights:

• Right of Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal information, subject to legal and contractual exceptions.
• Right to Restrict Processing: You may request that we limit how we process your information for certain purposes.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests or marketing communications.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw that consent at any time.
• Right to Lodge a Complaint: You may file a complaint with the European Data Protection Board (https://edpb.europa.eu/) or your local supervisory authority.

Rights for California Residents (CCPA/CPRA)

You have the following rights:

• Right to Know: You may request what personal information we collect, use, and share about you.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: You may direct us not to sell or share your personal information. (Note: We do not sell or share your data for cross-context behavioral advertising, but you may submit an opt-out request.)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Appeal: If we deny your request, you may appeal our decision.

California residents may submit requests by emailingsupport@mybagcaddie.com. You may also designate an authorized agent to submit requests on your behalf.

Rights for UK Residents (UK GDPR)

UK residents have substantially the same rights as EU/EEA residents under the UK GDPR (see above). You may lodge complaints with the Information Commissioner's Office (https://ico.org.uk/).

Rights for Canadian Residents (PIPEDA)

• Right to Access: You may request access to personal information we hold about you.
• Right to Accuracy: You may request correction of inaccurate personal information.
• Right to Withdraw Consent: You may withdraw consent for processing, subject to legal obligations.
• Right to Complain: You may lodge a complaint with the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca/).

Rights for Australian Residents (Privacy Act)

• Right to Access: You may request access to personal information we hold about you.
• Right to Correction and Completion: You may request correction of inaccurate personal information.
• Right to Complain: You may lodge a complaint with the Office of the Australian Information Commissioner (https://www.oaic.gov.au/).

Rights for Brazilian Residents (LGPD)

• Right of Access: You may request access to your personal information.
• Right of Rectification: You may request correction of inaccurate data.
• Right of Deletion: You may request deletion of data (subject to LGPD exceptions).
• Right to Data Portability: You may request your data in a portable format.
• Right to Complain: You may file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) (https://www.gov.br/anpd/).

How to Exercise Your Rights

To exercise any of your privacy rights, please contact us at:

Email:support@mybagcaddie.com

Please include sufficient detail in your request so we can identify you and locate your information. We will respond to your request within the timeframes required by applicable law, typically within 30 days. In some cases, we may request additional information to verify your identity. If we cannot fulfill your request, we will explain the reason and provide information about appeals or complaints.

Note: because your golf data in the iOS app is stored only on your device, we cannot access, export, or delete it for you — deleting the app removes it.

Children's Privacy

MyBagCaddie is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Users under 18 may use MyBagCaddie only with the involvement and supervision of a parent or legal guardian. For users between 13 and 18 years old, we collect minimal personal information and use it only to provide the Service. We do not use data from minors for advertising or marketing.

If you are a parent or guardian and believe your child has provided personal information to MyBagCaddie without your consent, please contact us immediately atsupport@mybagcaddie.com, and we will take appropriate action.

International Data Transfers

MyBagCaddie operates globally, and your personal information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your home country.

Transfer Mechanisms

When we transfer personal information internationally, we implement appropriate safeguards:

• Standard Contractual Clauses (SCCs): For transfers from the EU/EEA to countries outside the EU/EEA, we use Standard Contractual Clauses approved by the European Commission.
• Adequacy Decisions: Where applicable, we rely on adequacy decisions by relevant authorities that deem recipient countries to have adequate privacy protections.
• Consent: We may obtain your explicit consent for transfers to countries without equivalent data protections.

Data Processing Locations

Your information is primarily processed in the United States. By using MyBagCaddie, you consent to the transfer of your personal information to countries outside your country of residence, including the United States, for the purposes described in this policy.

Security Measures

We implement technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, and destruction:

• Encryption: Data transmitted to and from MyBagCaddie is encrypted using industry-standard TLS/SSL encryption.
• Secure Storage: Personal information is stored on secure Google Cloud infrastructure with restricted access.
• Access Controls: We limit access to personal information to people and service providers who need it to perform their job functions, and we require them to maintain confidentiality.
• Data Minimization: We collect and retain only the personal information necessary to provide the Service — most of your MyBagCaddie data never leaves your device at all.
• Regular Security Reviews: We conduct regular security assessments to identify and remediate vulnerabilities.

While we implement strong security measures, no system is completely secure. We cannot guarantee absolute security of your personal information. If you believe your personal information has been compromised, please contact us immediately atsupport@mybagcaddie.com.

Cookies and Tracking Technologies

Our website and web app use cookies and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns.

Types of Cookies Used

• Essential Cookies: Necessary for basic functionality, including authentication, session management, and security. They do not require consent.
• Analytics Cookies: We use cookies from Google Analytics and PostHog (with your consent) to collect information about how you use our website and web app, including pages visited, features used, and time spent. DataFast sets a first-party visitor identifier used only to measure our own site's traffic and conversions. These help us understand user behavior and improve our Service.
• Preference Cookies: Remember your preferences and settings so you don't have to reconfigure them on each visit.
• No Advertising Cookies: We do not use advertising or marketing cookies, and no partner places cookies on your device to track your activity across other websites for advertising purposes.

Managing Your Cookie Preferences

• Browser Controls: Most web browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may limit certain features.
• Opt-Out of Analytics: You can opt out of Google Analytics tracking by visitinghttps://tools.google.com/dlpage/gaoptout or installing the Google Analytics Opt-out Browser Add-on.
• Cookie Consent Banner: Where required, we display a cookie consent banner allowing you to accept or decline non-essential cookies.

The iOS App and Tracking

Our iOS app does not track you across other companies' apps or websites. It does not use the Identifier for Advertisers (IDFA), does not request App Tracking Transparency permission (because it performs no tracking that would require it), and it contains no advertising SDKs. The third-party SDKs in the iOS app are RevenueCat (App Store subscriptions), PostHog (product analytics), and Sentry (crash and error monitoring). PostHog and Sentry measure only your use of MyBagCaddie itself and, because the app has no accounts, their events are not linked to your name or email address.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated policy on mybagcaddie.com with a new "Last Updated" date
• Sending an email notification to the address associated with your account or waitlist signup, where appropriate

Your continued use of MyBagCaddie after such notifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

Platform Privacy Requirements

Apple iOS App Store

MyBagCaddie is available on the Apple App Store and complies with Apple's App Store Review Guidelines regarding privacy and data protection.

App Privacy Details and Data Transparency: The data practices described in this Privacy Policy align with the App Privacy Details (privacy nutrition labels) configured in App Store Connect.

Data Collection and Use: The iOS app stores your golf data (club setup, carry distances, bag audits, carry log, wedge matrix) locally on your device only. The app has no accounts, and we do not collect your name or email address through it. The data that leaves the app is: purchase and entitlement information (processed by Apple and RevenueCat to deliver your subscription), product-interaction analytics such as features used and screens visited (PostHog), and crash and error diagnostics (Sentry). The third-party SDKs in the app are RevenueCat, PostHog, and Sentry. This aligns with our App Privacy Details: usage and diagnostic data is collected but not linked to your identity and not used for tracking.

No Tracking: The iOS app performs no cross-app or cross-site tracking, does not use the Identifier for Advertisers (IDFA), and does not present an App Tracking Transparency prompt because none is required. We do not share personal information with third parties for their marketing purposes.

Push Notifications: The iOS app does not currently send push notifications and does not collect push device tokens. If we add push notifications in the future, we will update this policy and request the standard iOS notification permission first.

Data Deletion: Because your golf data is stored only on your device, deleting the app deletes it. To request deletion of analytics or diagnostic data held by our providers, contactsupport@mybagcaddie.com — requests are processed within 30 days. To cancel a subscription, use your Apple ID subscription settings.

Children: MyBagCaddie is not intended for children under 13, and under-18 use requires parental involvement as described in the Children's Privacy section above.

Contact Information

Privacy Contact Email:support@mybagcaddie.com

Company / Legal Entity: MyBagCaddie - Software Secrets LLC

Service / Product Name: MyBagCaddie

Website: https://mybagcaddie.com/

Mailing Address:
155 31st Street
Ogden, UT 84401

Response Time: Privacy requests are answered within the timeframes described in the Your Privacy Rights section.

Supervisory Authority Links (for applicable jurisdictions):

• European Union / European Economic Area:https://edpb.europa.eu/
• United Kingdom: https://ico.org.uk/
• California: https://cppa.ca.gov/
• Canada:https://www.priv.gc.ca/
• Brazil:https://www.gov.br/anpd/
• Australia:https://www.oaic.gov.au/