Privacy Policy
Last updated: June 16, 2026
Who We Are (Data Controller)
CADDIXA ("we", "us") provides tools for golf club calculation, simulation, and club data management. The data controller responsible for your personal data is Rin Sawasaki, Toyama. You can reach us at support@caddixa.com.
Information We Collect
We collect the following categories of information:
- Account data: your email address and authentication details.
- Club & component data you enter: bags, clubs, heads/shafts/grips, lofts, weights, measurements you submit.
- Usage data: calculation logs, feature interactions, and analytics.
- Technical data: IP address, device/browser type, and identifiers stored in cookies or local storage (including authentication tokens).
How We Use Your Data
We use your data to:
- Provide and operate the service and save your club data;
- Authenticate you and keep your account secure;
- Improve calculation features and understand how CADDIXA is used;
- Communicate with you about support requests and service changes;
- Comply with legal obligations.
Legal Bases for Processing (GDPR)
Where GDPR applies, we rely on the following legal bases:
- Performance of a contract — to provide the service you request;
- Legitimate interests — to secure, maintain, and improve the service;
- Consent — for optional analytics or communications, where required;
- Legal obligation — where we must retain or disclose data by law.
Cookies & Local Storage
We use cookies and browser local storage that are strictly necessary to sign you in and keep the app working (e.g., authentication tokens). If we use optional analytics or non-essential cookies, we will request consent where required and provide a way to opt out.
Service Providers & Sharing
We do not sell your personal information. We share data only with service providers ("processors") who help us run CADDIXA under appropriate agreements:
- Supabase — database, authentication, and storage;
- Hosting/CDN provider — application hosting;
- Email provider — transactional email (e.g., sign-up, support);
- Stripe — payment processing, only if/when paid plans are introduced.
We may also disclose data if required by law or to protect our rights and users.
International Data Transfers
Your data may be processed in the United States or other countries that may have different data-protection laws than your own. Where we transfer personal data out of the EU/EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Data Retention
We keep your personal data for as long as your account is active and as needed to provide the service. We delete or anonymize personal data when it is no longer required, when you delete your account, or upon a valid deletion request, unless we must retain it to comply with the law.
Your Rights (GDPR & CCPA/CPRA)
Depending on where you live, you may have the following rights regarding your personal data:
- Access — know what data we hold and obtain a copy;
- Rectification/Correction — fix inaccurate data;
- Erasure/Deletion — request deletion ("right to be forgotten");
- Restriction & Objection — limit or object to certain processing;
- Portability — receive your data in a portable format;
- Withdraw consent — at any time, where processing is based on consent;
- Opt out of "sale"/"sharing" (CCPA/CPRA) — note: we do not sell or share personal information;
- Non-discrimination — we will not discriminate for exercising your rights;
- Complain — lodge a complaint with your local data-protection authority.
To exercise any right, email support@caddixa.com. We will respond within the timeframe required by applicable law (generally within 30 days under GDPR / 45 days under CCPA).
Data Security
We use reasonable technical and organizational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children's Privacy
CADDIXA is not directed to children. We do not knowingly collect personal data from children under 16 (EU) or under 13 (US). If you believe a child has provided us data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide additional notice where required.
Contact
For privacy requests or questions, contact us at support@caddixa.com.