BLH GOLF LAB
Privacy policy
Updated October 23, 2026
This policy explains how BLH Golf Lab handles information in the iPhone and iPad app and its supporting services. Contact support@blhgolflab.com for privacy questions or requests.
Information you provide
The app lets you record golf rounds, dates, course and tee selections, hole details, notes, handicap differentials, simulator measurements and imported shots, club distances, practice goals and scored practice tests. Optional information is provided when you enter or import it.
A golf account uses your email address and a service-generated account identifier. Passwords and recovery codes are stored as hashes, rather than readable passwords or codes. Session tokens are stored in the device’s Keychain; the server stores token hashes. If you email support, we receive your email address, message and attachments.
When email password recovery is enabled, Resend processes the recipient email and a one-use reset link to deliver the requested message. The server stores only a hash of the reset token; it expires after 30 minutes. Expired tokens are periodically removed, and a successful reset removes all outstanding reset tokens for that account and revokes its sessions. No password is sent by email.
How information is used
We use this information to operate accounts, save and sync golf records, calculate statistics and handicap estimates, personalize practice recommendations, manage Pro access, answer support requests and protect the service from abuse. The native app does not include advertising or cross-app advertising tracking, and we do not sell your golf records.
Device storage and account sync
Records entered without signing in are kept in a separate device journal. When you sign in, your account journal is saved on the device and synced to the hosted service. Importing the separate device journal into your account requires your explicit choice. Account records are associated with the signed-in golf account.
The hosted service uses Cloudflare Workers and D1 for processing and storage. Transfers use HTTPS, and account journal files use iOS file protection. This is not end-to-end encrypted storage: the service processes account records to provide its features. Your device settings and operating system can also affect backups of ordinary app data.
Swing review – Beta
You choose videos through the system Photos or Files picker. Imported copies, review notes and drawn reference lines are stored locally in a separate swing library for each golf account. Older versions may also have saved timing markers and automated observations. The current app does not upload these videos or their analysis to our server or an external AI service.
Current releases provide manual video review and reference-line tools. Earlier experimental releases used Apple’s Vision framework on the device and may have saved body-point coordinates and derived observations locally. Those older observations are not uploaded to our service.
The swing library does not sync between devices. Its imported copies and review data are excluded from the app’s golf JSON export and automatic device backups. Keep original videos in Photos or Files. Deleting an imported clip removes the app’s copy and associated review information, not your original video.
Simulator player-profile preferences, including an optional self-reported handicap, benchmark group, improvement goal and club model/loft details, currently stay on each device separately for each golf account. These preferences do not yet sync between devices.
Apple subscriptions
Apple handles payment and subscription management. We receive signed purchase information and verify subscription status with Apple. We retain subscription transaction identifiers, the product, environment, expiry and verification time, linked to your golf account. Your account identifier is supplied to Apple to associate the purchase with that account. We do not receive your payment-card details.
Deleting your golf account does not cancel Apple billing. Cancel or change your plan through your Apple subscriptions. Apple retains its own purchase records under its policies.
Course lookup and simulator imports
When you search for a course, the hosted service sends the search to GolfCourseAPI. We do not send your golf-account password to that provider.
You can import simulator data by selecting a CSV file or supplying a Back Nine public sharing link. For a sharing link, the server retrieves that specific shared session through the provider’s public sharing service. We do not request your Back Nine password, sign into your Back Nine account, or continuously synchronize it. The shared response is processed without a separate persistent import cache. Measurements you confirm become journal records and sync when you use an account.
Service providers and security information
Service providers process information needed to host and secure the service, retrieve course or shared-session information, handle Apple subscriptions, or deliver support email through Gmail. Their own policies apply to their services. Requests may include IP addresses and other technical metadata. The app uses hashed IP and email identifiers for authentication rate limits; old rate-limit buckets and expired server sessions are periodically cleared.
Application code does not intentionally log passwords, private keys, session tokens or journal bodies. Hosting providers may maintain operational or security logs. No storage or transfer method can be guaranteed completely secure.
Retention, exports and deletion
Golf-account records remain available until you remove them or delete the account; subscription expiry alone does not delete your journal. You can edit or delete journal entries and export a golf-data backup in the app. Exporting or sharing a file sends it to the destination you choose, whose handling of that copy is outside the app’s control.
Delete Account requires password confirmation. It removes the native server account, cloud journal, subscription linkage and active sessions, plus that account’s journal, merge-recovery copies and swing library on the device performing deletion. Separate records entered without signing in, original Photos/Files videos, exported backups, website records and offline copies on other devices remain. Other devices lose server access; separately remove their local copies if needed. Provider-managed backups and security logs may remain subject to their retention practices.
Support correspondence is retained as needed to answer and resolve your request and maintain relevant support records. Contact us to request access, correction or deletion of information we hold. We may need to verify account ownership. Never email your password, recovery code or payment-card details.
Children and policy updates
The service is not directed to children under 13. Contact us if you believe a child under 13 has provided personal information so we can investigate and address it.
We will update this page when our practices change and revise the effective date. Material changes may also be communicated in the app.
Contact
BLH Golf Lab
support@blhgolflab.com