Privacy Policy
Last updated: 7 November 2026
1. Who we are
Approach ("Approach", "we", "us") is run by Jack Warrilow, a sole trader based in Dubai, United Arab Emirates. We are the controller of the personal data described in this policy.
Approach has two parts:
- The web platform, where golf coaches subscribe, manage players and review analysis.
- The Approach iOS app, which is free for players.
This policy covers both, plus our website and coach survey.
2. What data we collect
| Who | What we collect | Where it comes from |
|---|---|---|
| Coaches | Name, email, login details, business name and logo, subscription status | You, when you sign up and use the web platform |
| Coaches | Billing details | Stripe processes payments; we don't see or store full card numbers |
| Players | Name, email, login details (email and password, or Sign in with Apple or Google) | You, or your coach if they add you |
| Players | Golf data: scorecards, rounds, clubs, answers to round questions, and how you felt about a round | You, or your coach (including CSV uploads) |
| Players | Analysis results and coach feedback | Generated by Approach and your coach |
| iOS app users | Push notification token, AI consent record (date and version) | Your device and your choices in the app |
| Survey respondents | Survey answers and contact details | You, via our coach survey |
The iOS app does not use advertising or tracking SDKs, and does not collect location, contacts or health data.
Our website doesn't use analytics or advertising cookies. If we add them, we'll ask for your consent first and update this policy.
3. How we use your data
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, and let coaches and players work together | Contract |
| Analyse golf data with AI and show the results | Your consent (see section 4) |
| Send account, coaching and analysis emails and push notifications | Contract |
| Take coach subscription payments | Contract |
| Keep the service secure, fix problems and prevent misuse | Legitimate interests |
| Improve Approach using aggregated or de-identified data | Legitimate interests |
| Follow up on coach survey responses | Legitimate interests |
| Keep billing and tax records | Legal obligation |
We don't sell your personal data or use it for advertising. When a coach emails a player through Approach, the email shows the coach's and player's names; other automated emails don't include more personal data than they need.
4. AI analysis
Approach uses Claude, an AI model provided by Anthropic, to analyse golf data. We only do this after you give permission in the app or on the web platform.
- What we send: golf data needed for the analysis, such as scores, clubs and round answers. We don't send your name or email.
- What Anthropic does with it: processes it to return the analysis, on our behalf. Anthropic does not use this data to train its models.
- Your coach's role: analysis is automated and your coach may review or add to it.
- Withdrawing consent: you can withdraw it at any time in settings. We'll stop sending new data for analysis; past results stay in your account until you delete them or your account.
If a coach uploads player data by CSV, the coach must confirm they have the player's permission for this analysis.
5. Who we share data with
We share personal data only with service providers that help us run Approach, under contracts that limit how they use it.
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Hosting, database, file storage and login | All account and golf data |
| Anthropic | AI analysis | Golf data, without names or emails |
| Stripe | Coach subscription payments | Coach billing details |
| Resend | Sending emails | Email address, email content |
| Apple and Google | Sign-in, and push notifications (Apple) | Login identifiers, push token |
| Slack | Internal alerts to our team | System events only; no personal data |
Coaches and players linked to each other can see the shared coaching data. We may also disclose data if the law requires it, or to a buyer if the business is sold, in which case this policy continues to apply.
6. International transfers
Approach is run from the UAE, and some of our providers are based in the United States. Your data may therefore be accessed or stored outside the UK.
Our main database is hosted in London, UK (Supabase, AWS eu-west-2). Where a provider outside the UK accesses your data, we rely on UK adequacy regulations (including the UK-US data bridge for certified providers) or the UK International Data Transfer Addendum to standard contractual clauses.
7. How long we keep data
We keep account and golf data until the account is deleted. You can delete your account at any time in the iOS app or on the web platform.
| Data | How long |
|---|---|
| Account and golf data | Until you delete your account, then erased from our live systems |
| Backups | We do not currently retain backups that would restore data after deletion |
| Coach survey responses | 12 months |
| Billing and tax records | Up to 7 years, as tax law requires |
| AI consent records | For as long as the account exists |
When a player deletes their account, we erase their login, profile, scorecards, analyses, answers and clubs.
When a coach deletes their account, we cancel their subscription and erase their login and business data. Players without their own login are erased; players with their own account keep their data and are unlinked from the coach.
8. Your rights
Under UK data protection law you can ask us to:
- give you a copy of your data
- correct inaccurate data
- delete your data
- restrict or object to how we use it
- give you your data in a portable format
- stop processing based on consent, by withdrawing it
Email us to make a request. We'll respond within one month. If you're a player added by a coach, you can contact us directly or ask your coach.
If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to resolve it first.
9. Age, security and changes
Age: Approach is for people aged 18 and over. Coaches must not add anyone under 18. If we learn an account or player profile belongs to someone under 18, we'll delete it and its data.
Security: data is encrypted in transit, access is limited by account permissions and database access rules, and only authorised people on our team can access user data.
Changes: we'll update this policy when Approach changes, and tell you in the app or by email before significant changes take effect.