Your swing is private by default.

Who is responsible

PeakWave operates FORM and is responsible for deciding how FORM uses personal data. Contact hello@peakwave.co with a privacy question or request. The exact operating-entity details and lawful-basis register will receive final legal review before public release.

Data FORM may use

• Account details such as your email address, sign-in provider and internal account identifier.
• Your Athlete Profile, including handedness, age band, build, goals, practice context, equipment, mobility responses and any injury or discomfort flags you choose to provide.
• Golf recordings you deliberately capture, bounded derived frames and measurements, declared shot outcomes, analysis evidence, confidence and coaching history.
• Private groups, invitations, challenge entries, cards and other content you choose to share.
• Notification tokens and preferences, security events, cost receipts and technical diagnostics needed to operate the service.
• Optional product analytics only after you opt in. FORM excludes footage, frames, prompts, unrestricted free text, contact details and Athlete Profile facts from product analytics.
• Purchase and entitlement records if paid features are enabled. Payment providers process the payment credentials.

Why FORM uses it

FORM uses data to provide the service you request, keep private history comparable, protect safety and integrity, prevent abuse, operate support and deletion, and meet legal obligations. Separate consent controls optional analytics, population studies, campaign entry and proactive notifications. Security and reliability processing is limited to what is necessary to operate and protect FORM.

AI and coaching outputs

FORM uses automated models to observe and explain bounded movement evidence. Deterministic, versioned rules control scoring eligibility, ranking and important safety gates. AI observations can be wrong, so FORM shows confidence and evidence, lets you disagree and does not use technique analysis to make legal, employment, insurance or similarly significant decisions.

Who receives data

FORM does not sell personal data and does not use it for third-party advertising. Carefully selected providers may process the minimum data needed for hosting, authentication, storage, AI routing and inference, error monitoring, optional analytics, notifications and purchases. The current technology includes Supabase, Vercel, model providers reached through Vercel AI Gateway, Sentry, PostHog EU, Expo and RevenueCat where the relevant feature is enabled. A person receives a FORM Card, group item or challenge context only when you deliberately share or join it.

Storage, transfers and security

FORM uses encrypted transport, private storage, expiring media access and row-level database controls. Providers may process data outside the UK. Before public release, PeakWave will record the applicable provider agreements, locations and international-transfer safeguards. No service can promise absolute security.

Retention and deletion

Source recordings and derived evidence remain only while needed for the feature and your selected retention state. You can delete an individual recording and its derived graph, revoke a share, or delete the whole account from FORM settings. Public snapshots expire or are revoked with their source. FORM may retain minimal audit, security, transaction or deletion tombstone records where necessary, but deletion tombstones contain identifiers or hashes rather than the deleted coaching content.

Your choices and rights

You can correct Athlete Profile facts, withdraw optional consent, disable notification categories, delete source data and close the account in the app. Depending on where you live, you may also have rights to access, correct, erase, restrict, object to or receive a portable copy of personal data, and to complain to a data protection authority. Email us to exercise a right. We may need proportionate identity verification.

Age and changes

FORM is intended for adults aged 18 or over during this beta. We will date material notice changes and present them in the app when appropriate. This implementation notice must be checked against real production providers, retention settings and legal entity details before public release.