Privacy notice

GNG (Golfers Next Generation) is a practice platform for golf coaches and their players, operated by Magnus Golf Coaching LLC, a Wyoming company. GNG is invite-only during testing: accounts exist only where we or a coach have issued an invitation.

For a Coach's own account data we are the controller. For data about a Player, the Coach is the controller and we act as their processor under the Data Processing Agreement.

• Access requests: name, email, whether you're a coach or player, and your optional answers about how many players you coach, where you coach and what you use today.
• Account data: name, email address and a securely hashed password, plus your role (coach, player or admin), notification preferences and timezone.
• Roster data entered by a coach: a player's display name, email, handicap index and any coaching notes the coach adds.
• Coaching content: drills, tests, practice plans and assignments.
• Practice results: completion, skips, planned versus actual time, scores, attempts and player notes, with a snapshot of how the drill was measured at the time. Results are append-only: each attempt is kept.
• Video: swing recordings uploaded by a coach or by a player, and coach analyses recorded over them.
• Technical data: standard server logs and error reports needed to run and secure the service.

• A coach sees only their own players: their roster data, practice results, times, notes and video. That visibility is the point of the product, and players should expect it. Coaches cannot see other coaches' players, plans or results.
• A player sees only themselves: their own plans, their own attempt history and their own video and analyses.
• Platform administrators see access requests, invitations and platform-published exercises. They cannot browse private coaching content, rosters, results or video.

Access is enforced in the database itself through row-level security, not only in the interface.

Juniors are a core part of golf coaching, so we assume some players are children. GNG's age threshold is 16. Where a player is under 16, their coach must obtain the consent of a parent or guardian before adding them, using the mechanism GNG provides. What the parent reads is the parental consent notice.

We do not knowingly collect a child's data without that consent. A parent can ask to see everything held about their child, have it corrected or deleted, and withdraw consent at any time — withdrawal ends the child's access and their data is deleted or anonymised within 30 days. Requests go to privacy@gng.golf.

[Legal review: confirm the age threshold per jurisdiction (GDPR Art. 8 allows 13–16; the UK uses 13; US COPPA uses 13 with verifiable parental consent) and confirm whether GNG's consent mechanism meets the "verifiable" standard where that applies.]

Video is stored and delivered by Bunny Stream. It is never public: playback is only possible through short-lived signed links issued to a signed-in user who is allowed to see that video — the player it belongs to, and their coach.

A coach analysis is a new recording made from the video, the coach's on-screen drawings and the coach's voice. It therefore contains personal data about both the player and the coach. Analyses are stored the same way as video and are visible only to that player and that coach.

To run your account and the coaching relationship you asked for (contract), to decide on access requests and contact you about them (legitimate interests), to keep the service secure, and — for children — on the basis of parental consent. Emails we send are transactional: access confirmations, approvals, invitations, email verification, a notice to a player when their coach records an analysis, and a weekly digest to a coach. Both of those last two can be switched off in Settings. We don't send marketing email.

Lovable Cloud (Supabase) for database, authentication and hosting; Lovable for transactional email; Bunny Stream for video storage and delivery; and Zoho Mail to host the hello@gng.golf and privacy@gng.golf mailboxes, which receive correspondence including privacy requests. They process data on our instructions only. The current list is also maintained in the DPA.

Our entity is in the United States, the owner is resident in Qatar, our processors operate in the United States and the European Union, and coaches and players are worldwide. Data is therefore transferred across borders, including out of the EEA and the UK.

[Legal review: confirm the transfer mechanism for each flow — Standard Contractual Clauses plus the UK Addendum are the expected route — and whether a transfer impact assessment is required.]

• Account and roster data: while the account is open.
• Practice results: kept as the coach's coaching evidence for as long as the coaching relationship is active. They are append-only — an attempt is never rewritten.
• Video and analyses: while the account is open, or until deleted by the owner or coach.
• Access requests: up to 24 months from the decision, so we know who we've already replied to.
• Invitations: expire after 14 days; the record is kept as an access audit trail.
• After account closure or withdrawal of parental consent: personal data, including video, is deleted or anonymised within 30 days, except where we must keep it by law.

You can ask for a copy of your data, correction, deletion, or restriction of processing, and you can object to processing based on legitimate interests. Where a coach entered your details, ask your coach first — they control that roster — and contact us if that doesn't resolve it.

There is no self-service export or delete tool in the app today. Email privacy@gng.golf and we will action the request. You may also complain to your local data protection authority.

Privacy questions and requests: privacy@gng.golf. Anything else: hello@gng.golf.