Privacy policy

Last updated: October 19, 2026

This Privacy Policy describes how ALLOWIN SYSTEM ("GooseGolf," "we," "us") collects, uses, and shares personal information when you visit goosegolf.com (the "Site"), purchase our products, or use the GooseGolf mobile app (iOS and Android).

Who We Are

GooseGolf is operated by ALLOWIN SYSTEM, a French société à responsabilité limitée (SARL) with €7,622.45 share capital, SIREN 391 850 518, VAT FR30391850518. Registered office: Les Arcades Escalier C, 76-78 avenue des Champs-Élysées, 75008 Paris, France. Contact: info@goosegolf.com. ALLOWIN SYSTEM is the data controller responsible for your personal information.

We sell our products to customers in the European Union, the United Kingdom, Switzerland, the United States, Australia, New Zealand, Hong Kong, Singapore, South Korea, and the United Arab Emirates. The GooseGolf app is available in these countries and in some others, including Canada. Depending on where you live, different privacy laws apply to you, including the EU and French General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection, the California Consumer Privacy Act (CCPA/CPRA), and Canadian privacy law (PIPEDA and, in Québec, Law 25). Your region-specific rights are described in the "Your Privacy Rights" section below. Because some of our service providers operate outside your country, your personal information may be transferred to and processed in France, Ireland, the United States, Canada, and other countries (see "International Data Transfers").

1. Information We Collect on the Site

Contact details: name, billing address, shipping address, phone number, email address.

Payment information: processed securely by Shopify Payments (operated with Stripe) and, depending on the method you choose, by Shop Pay, Apple Pay, PayPal, Klarna, or a local payment service (for example Bancontact, EPS, MB WAY, MobilePay, or Satispay). Full payment card numbers are never stored on our servers.

Account information: your email address and preferences. Customer accounts use a one-time code sent by email, with no password.

Transaction information: items viewed, added to cart, purchased, returned.

Communications: customer service inquiries and correspondence.

Device information: IP address, browser type, device identifiers.

Usage information: how you interact with the Site (via cookies, see the Cookies section below).

Advertising and marketing information: the pages and products you view, items you add to your cart, checkouts you start and purchases you make on the Site, with cookie identifiers and, once you give them to us, your email address and phone number in hashed (scrambled) form. If you sign up for our emails, we also record which emails you open and click. See sections 5 and 7.

2. Information We Collect via the Mobile App (iOS and Android)

The GooseGolf app is a companion to GooseGolf physical golf training products and is available in the countries where we sell our products, and in some others, including Canada.

2.1 Account and activation

When you create and activate an account, we collect: email address, your name if you sign in with Apple (Apple shares it with us at sign in), Firebase user ID, product activation code, activation timestamps, and platform (iOS or Android). If you answer the optional onboarding questions, we also store your golf profile: first name, dominant hand, experience, how often you play, your usual misses, your goal, and whether you take lessons.

2.2 Your swings stay on your device

To analyze your swing, the app uses your device camera to record video and, if you choose, lets you select an existing video from your device's photo library. On iOS the camera recording also uses the microphone, so a recorded swing may contain an audio track.

Recording, pose detection, and swing analysis all run on your device. We do not receive, host, or store your swing videos, your audio, or your pose data. None of it is uploaded to GooseGolf servers, and no video leaves your phone unless you choose to share it yourself using your device's own sharing features.

2.3 Usage and analytics

We measure how the app is used so we can fix what fails and improve the product. This is done with Google Analytics for Firebase (GA4) and with our own event log stored in Firebase (Firestore). Together they record:

  • your Firebase user ID, so a problem you report can be matched to the sessions that produced it;
  • the screens you open in the app;
  • a fixed list of product events: session started, sign in and activation steps, onboarding steps, swing detected, no swing detected, slow motion source, import settings, analysis completed, analysis failed, swing checks, faults shown, lesson opened, lesson article opened, swing exported, swing share opened, review prompt shown, database load failed, recording failed;
  • parameters attached to those events, for example the reason an analysis failed, or the result of each swing check and your tempo ratio after an analysis;
  • app version, build number, distribution channel (App Store, TestFlight, or debug), device model, operating system version, and a timestamp.

These events describe how the app behaves. They never contain your swing video, your audio, your images, or your pose data.

2.4 Diagnostics and crash reports

We use Firebase Crashlytics to collect crash and error reports. A crash report contains a stack trace, the device model, the operating system version, the app version, and your Firebase user ID.

2.5 Device attestation

The app uses Firebase App Check, which relies on Apple's App Attest (iOS) and Google Play Integrity (Android), to verify that requests reaching our servers come from a genuine, unmodified copy of the GooseGolf app. This produces a device attestation token handled by Apple or Google. We use it only to protect our activation system from abuse, never to identify or profile you.

2.6 What the app does not do

The app contains no third-party advertising SDK, does not track you across other companies' apps or websites, and does not use App Tracking Transparency. We do not sell data collected by the app, and we do not use your swing videos to train AI models. The Site works differently: it uses advertising tags, described in sections 5 and 7.

3. How We Use Information

  • Create and manage your account
  • Process and ship your orders
  • Verify a valid GooseGolf product code has been activated (app)
  • Protect the product code system from misuse, including by verifying that requests come from a genuine copy of the app
  • Detect and fix crashes, failures, and defects
  • Measure how the app is used so we can maintain and improve it
  • Provide customer support
  • Send order-related and support emails
  • Send marketing emails to people who sign up for them or ask for a restock alert (you can unsubscribe at any time)
  • Measure the performance of our ads and show Goose Golf ads on other platforms such as Facebook, Instagram, and Google, with your consent where the law requires it
  • Prevent fraud and ensure security
  • Comply with our legal obligations

We use Firebase, operated by Google, for authentication, product activation, device attestation, crash reporting, and analytics.

To place an order, you must give us your name, shipping address, email address, and payment details: without them we cannot sell and deliver your product. Everything else, including marketing emails and non-essential cookies, is optional.

4. Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information only when we have a legal basis to do so:

Performance of a contract: to create and manage your account, process and ship your orders, verify and protect product activation codes, provide the app (including your golf profile), and provide customer support.

Legitimate interests: to secure our Site and app, prevent fraud and product-code misuse, verify through device attestation that requests come from a genuine copy of the app, diagnose crashes, and measure how the app is used so we can maintain and improve our products, where these interests are not overridden by your rights. You can object to our analytics and crash reporting at any time by emailing info@goosegolf.com: we will delete the usage events linked to your account.

Consent: to send you marketing emails, to place analytics and advertising cookies on the Site, to share your browsing and purchase events with our advertising partners Meta and Google, and to access your device camera, microphone, and photo library in the app. You can withdraw your consent at any time: for the app, in your device settings; for cookies on the Site, by deleting the goosegolf.com cookies in your browser, so that the cookie banner appears again on your next visit.

Legal obligations: to comply with accounting, tax, and other legal requirements.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects. On-device swing analysis is not used to make decisions about you.

5. Sharing

We do not sell personal information for money. We do work with advertising partners on the Site, as described below. In the EEA, the United Kingdom, and Switzerland, their tags only run if you accept them in our cookie banner (see section 7).

5.1 Advertising partners (Site only)

When you visit the Site, tags (pixels) from Meta Platforms (Facebook and Instagram) and Google (Google Ads, Google Merchant Center, and Google Analytics) collect information about your visit: pages and products viewed, items added to your cart, checkouts and purchases, your IP address, browser, and cookie identifiers. We also share your email address, phone number, name, and address with Meta and Google in hashed (scrambled) form so they can match your visit or order to their users, and Meta receives these events directly from our servers as well (Meta Conversions API).

We use this to measure which ads work and to show Goose Golf ads to people who visited the Site or who resemble our customers. Meta and Google also use this information under their own privacy policies: Meta, Google. In the EEA, the United Kingdom, and Switzerland, advertising cookies are set only if you accept them in our cookie banner.

5.2 Email marketing

If you sign up for our emails, your email address and sign-up details are stored in Shopify, which we also use to send our marketing emails. Shopify records which emails you open and click, so we can measure them. You can unsubscribe at any time with the link in every email.

5.3 Service providers

We also share information with service providers that operate the Site and app for us: Shopify (hosting, orders, checkout), our payment providers (Shopify Payments and Stripe, PayPal, Klarna, and the local payment services listed in section 1), Judge.me (product reviews), Google Firebase (app authentication, product activation, device attestation, Crashlytics crash reporting, and Google Analytics for the app), Resend (delivery of account emails such as password resets), shipping carriers, and authorities if legally required.

5.4 Joint responsibility with Meta

For the collection of data by the Meta pixel on the Site and its transmission to Meta, ALLOWIN SYSTEM and Meta Platforms Ireland Limited are joint controllers. Meta is responsible for its own processing after that transmission. The essence of our arrangement is available at facebook.com/legal/controller_addendum.

5.5 Other providers

Our forms are protected against spam by hCaptcha (Intuition Machines, Inc., United States), which processes your IP address and technical data about your browser for security only. If you pay with Shop Pay or use the Shop app, Shopify processes your information as an independent controller under its own privacy policy.

We use Shopify Network Intelligence. This means Shopify may use your information together with information from other Shopify stores to provide improved products and personalization, better store performance, and better ad targeting (Shopify calls these "Enhanced Services"). No other store can access your information. If you decline non-essential cookies, data from your device is not used for these purposes. Shopify explains how it handles this information, and how to exercise your rights, in the Shopify Consumer Privacy Policy and on its privacy portal.

Your swing videos are never shared with anyone, because they never leave your device.

Drill pages in the app load video thumbnails from YouTube, which receives your IP address and the identifier of the video shown.

6. International Data Transfers

We are based in France, and some of our service providers operate in the United States, Canada, and other countries. As a result, your personal information may be transferred to and processed outside your country of residence, including outside the EEA. This applies to the account, activation, analytics, and crash data we hold on Google, Shopify, and Resend infrastructure, and to the data received by Meta and Google for advertising, which may be located in the United States. It does not apply to your swing videos, which stay on your device.

When we transfer personal information outside the EEA, the United Kingdom, or Switzerland, we rely on: the adequacy decision for Canada (Shopify Inc.); the EU-U.S. Data Privacy Framework and its UK and Swiss extensions for Meta Platforms, Inc. and Google LLC; and the European Commission's Standard Contractual Clauses for our other providers. You can ask for a copy of these safeguards by emailing info@goosegolf.com.

7. Cookies and App Identifiers

The Site uses cookies and similar technologies of four kinds:

  • Necessary: set by Shopify to run the cart, checkout, security, and your country and currency settings. They don't require consent.
  • Personalization: set by Shopify to remember your preferences.
  • Analytics: Shopify and Google Analytics, to measure traffic and how the Site is used (for example _ga).
  • Marketing: Meta (_fbp) and Google Ads (_gcl_au), to measure our ads and to show you our ads on other platforms.

These cookies last from 90 days to 2 years, depending on the cookie and your browser. In the EEA, the United Kingdom, and Switzerland, a cookie banner lets you choose on your first visit. To change your choice later, delete the goosegolf.com cookies in your browser: the banner will appear again. Anywhere, you can also block cookies in your browser settings. In the EEA, the United Kingdom, and Switzerland, personalization, analytics, and marketing cookies are set only with your consent. You can also limit ad personalization in your Meta and Google account settings.

The app does not use cookies. Google Analytics identifies your installation with an app instance identifier generated by Firebase, which is reset if you delete and reinstall the app. On iOS, Google Analytics also reads the identifier for vendor (IDFV) that Apple assigns to our apps on your device.

8. Your Privacy Rights

The rights available to you depend on where you live. To exercise any of the rights below, email info@goosegolf.com. We may need to verify your identity before responding.

8.1 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, the UK, or Switzerland, you have the right to:

  • Access the personal information we hold about you.
  • Rectify inaccurate or incomplete personal information.
  • Erase your personal information (the "right to be forgotten").
  • Restrict or object to certain processing, including processing based on our legitimate interests such as analytics and crash reporting, and object to direct marketing at any time.
  • Data portability: receive your personal information in a structured, commonly used, machine-readable format.
  • Withdraw consent at any time, without affecting processing carried out before withdrawal.

You also have the right to lodge a complaint with a data protection supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France (www.cnil.fr). You may also contact the authority in your own country of residence. In the United Kingdom, this is the Information Commissioner's Office (ico.org.uk). In Switzerland, it is the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

If you live in France, you can also give us instructions on what should happen to your personal information after your death.

8.2 California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

  • Right to Know: request the categories and specific pieces of personal information we have collected.
  • Right to Delete: request that we delete personal information we collected from you.
  • Right to Correct: request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: the advertising tags described in section 5.1 may count as "sharing" for cross-context behavioral advertising, or as a "sale", under California law. To limit them, you can block cookies in your browser settings and limit ad personalization in your Meta and Google account settings. We do not knowingly sell or share the personal information of consumers under 16.
  • Right to Limit Use of Sensitive Personal Information.
  • Right to Non-Discrimination for exercising these rights.

8.3 Canada (PIPEDA and Québec Law 25)

If you are located in Canada, you have the right to:

  • Access the personal information we hold about you and request information about how it is used and disclosed.
  • Correct inaccurate or incomplete personal information.
  • Withdraw consent to our use of your personal information, subject to legal or contractual limits.

You may also file a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca). Québec residents may contact the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

8.4 Other regions

Australia: you can access and correct your personal information and complain to us first, then to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand: you can access and correct your personal information under the Privacy Act 2020 and complain to the Office of the Privacy Commissioner (privacy.org.nz).

Singapore: our Data Protection Officer can be reached at info@goosegolf.com. You can withdraw your consent and access or correct your personal information.

Hong Kong: we use your email address to send you news and offers about Goose Golf training products only if you sign up for our emails or ask for a restock alert. You can access and correct your personal information by writing to us.

South Korea: our privacy officer can be reached at info@goosegolf.com. Your information is transferred over the network, when you use the Site or place an order, to the providers listed in section 5, in the countries listed in section 6, for the purposes and periods described in this policy. Transfers needed to process an order cannot be refused if you want to buy from us. Transfers for analytics and advertising can be refused by declining non-essential cookies.

United Arab Emirates: you can access, correct, and delete your personal information and object to marketing by writing to us.

9. Account Deletion and Local Data

You can initiate account deletion within the app (Profile > Account > Delete account) or by emailing info@goosegolf.com. Account deletion removes your Firebase Auth user, your account document in Firestore, and the usage events in our own event log, and releases the activation slot held by your product code so it can be used again. Usage data held by Google Analytics is not deleted immediately and expires after the retention period described below.

After server deletion succeeds, the app removes your local swing history and stored videos from that device. Videos you saved elsewhere yourself, for example in your photo library, are not affected: only you can delete those.

Some limited activation and security records may be retained to prevent fraud, protect product codes, resolve disputes, or comply with legal obligations.

10. Data Retention

  • Orders, invoices, and payment records: 10 years, as required by French accounting law.
  • Customer account on the Site: until you ask us to delete it.
  • Customer service messages: as long as needed to handle your request and any follow-up, or until you ask us to delete them.
  • App account, activation data, and golf profile: retained while your account exists, and deleted with your account.
  • Usage events: Google Analytics keeps them for up to 14 months. Our own event log keeps them while your account exists, and they are deleted with your account.
  • Crash reports: retained for up to 90 days.
  • Account emails (password resets): kept by Resend for up to 30 days.
  • Email marketing data: kept until you unsubscribe. After you unsubscribe, your contact record is kept, marked as unsubscribed, so we don't email you again.
  • Advertising data: cookies on your device expire on their own (see section 7). Data received by Meta and Google is kept under their own retention rules.
  • Limited activation and security records: may be kept after account deletion where needed to prevent fraud, protect product codes, or comply with the law.
  • Swing videos, audio, and pose data: stay on your device until you delete them, delete your account from that device, or uninstall the app. We hold no copy.

11. Children

GooseGolf is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 in the United States, under 14 in Québec (Canada), or under 16 in the European Economic Area (under 15 in France). If you believe a child has provided us with personal information, please contact info@goosegolf.com and we will delete it.

12. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is perfectly secure.

13. Changes

We may update this policy as our Site and app evolve. We will update the "Last updated" date and, for material changes, provide additional notice where appropriate.

14. Contact Us

ALLOWIN SYSTEM
Les Arcades Escalier C, 76-78 avenue des Champs-Élysées
75008 Paris, France
info@goosegolf.com