Privacy Policy

Last updated: September 3, 2026

The Cut is operated by Drift Lab Studio Inc. ("Drift Lab Studio", "we", "our", or "us"). We are the data controller for the personal data described in this policy. This policy explains what data we collect, how we use it, who we share it with, and the rights you have over it.

1. Information We Collect

We collect information you provide directly:

We also collect limited technical data automatically:

2. Location Data

Location is optional. The app asks for your permission before accessing it, and you can turn it off at any time in your device settings. If you decline, the app still works — you can search for and select courses manually and log shot distances by hand.

When you grant permission, we use location for three things:

We do not collect location in the background. Location is accessed only while you are actively using the app, and precise location only during an in-progress round or when you are searching for a course. We do not build a location history of your movements, we do not use location for advertising, and we do not share your location with data brokers.

Shot coordinates recorded during a round are stored with that round as part of your golf data and are deleted along with it when you delete the round or your account.

3. How We Use Your Data

We do not sell your personal data to third parties. We do not use your data for advertising, and we do not share it for cross-context behavioural advertising.

4. Legal Bases for Processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on these legal bases:

5. AI and Third-Party Processing

Chase is powered by Anthropic's Claude API. When you send a message, relevant context from your golf data is included in the request. Anthropic processes this data to generate a response. We do not store your messages with Anthropic beyond what is needed to complete the request. Anthropic's privacy policy applies to that processing.

Photos you upload for scorecard extraction are sent to Anthropic's vision API for processing and are not retained by Anthropic beyond the request.

Your data is not used to train third-party AI models.

6. How We Share Your Data

We share personal data only with service providers who process it on our behalf, under contract, and only for the purposes described here:

The coach-sharing snapshot is the one case where your data goes to another person. It is generated only when you explicitly choose to share it, and it contains a summary of your recent rounds, stats, and trends — not your coaching conversations, photos, phone number, or location history. Anyone holding the link can view that snapshot, so share it only with people you intend to.

We may also disclose data if required by law, to enforce our Terms of Service, or in connection with a merger or acquisition — in which case we will notify you before your data becomes subject to a different privacy policy.

7. Website Analytics and Cookies

This section applies to our website (cut.coach), not the app.

We set no analytics cookies unless you accept them. On your first visit we show a banner with a clear Accept and Decline choice. Until you accept, Google Analytics is not loaded, no analytics cookies are written, and no measurement data is sent. Declining does not limit any part of the site.

If you accept, we use Google Analytics 4 to understand how people find and read our pages — page views, referring source, approximate region derived from IP address, device type, scroll depth, and clicks on links and buttons. We use this only to improve the site. We do not use advertising, remarketing, or cross-site tracking cookies, and we do not share this data for advertising purposes. Google Consent Mode is configured to deny advertising storage at all times.

The only strictly necessary storage we use is a small record of your own cookie choice, so we do not ask again on every page.

Changing your mind. Select "Cookie settings" in the footer of any page to withdraw or change your consent at any time. Withdrawing is as easy as giving consent, and takes effect immediately.

We also honour Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a decline automatically, we do not show the banner, and analytics never loads. You can also block cookies in your browser or use Google's opt-out browser add-on.

The app itself does not use advertising or tracking cookies.

8. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure in the US. Data is encrypted at rest and in transit (TLS 1.2+). Access is restricted by row-level security policies — you can only read your own data. Internal access to production data is limited to personnel who need it to operate or support the service.

No system is perfectly secure, and we cannot guarantee absolute security, but we work to protect your data using measures appropriate to its sensitivity.

9. International Data Transfers

We are based in the United States and our infrastructure is hosted in the US. If you use The Cut from outside the US, your data will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) with our service providers as the transfer mechanism.

10. Data Retention

Your data is retained as long as your account is active. If you delete your account, all personal data (rounds, sessions, coaching history, location and shot coordinates, profile) is permanently deleted within 30 days. Backups containing your data are overwritten on a rolling basis and purged within 90 days. Global course and hole data contributed to our shared dataset is retained in anonymised form and can no longer be linked to you.

11. Data Breach Notification

If a security incident affects your personal data, we will notify you without undue delay once we have assessed the scope, and we will notify the relevant supervisory authorities within 72 hours where the law requires it. Notice will describe what happened, what data was involved, and what steps you should take.

12. Your Rights

You can exercise most of these directly in the app:

If you are in the EEA or UK, you also have the right to object to or restrict processing based on our legitimate interests, and the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion or correction, to request portability, and not to be discriminated against for exercising those rights. As stated above, we do not sell or share your personal information as those terms are defined by the CCPA/CPRA. We do not process sensitive personal information for purposes requiring a right-to-limit disclosure.

We will not charge you or degrade your service for making a request. For anything you can't complete in the app, email hello@driftlabstudio.com and we will respond within the timeframe required by applicable law (45 days under the CCPA, one month under the GDPR). We may need to verify your identity, typically by confirming control of the phone number on the account. You may use an authorised agent to submit a request on your behalf.

13. Children

The Cut is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

14. Changes to This Policy

We may update this policy as the product evolves. We'll notify you of material changes via the app before they take effect. The "last updated" date at the top always reflects the current version. Continued use after changes constitutes acceptance.

15. Contact

Drift Lab Studio Inc. is responsible for the data described in this policy.

Questions, requests, or privacy complaints? Email hello@driftlabstudio.com or use our support page.