Aimpin.ai Privacy Policy

Version 2026-10-03 · Effective 2026-10-03 · 繁體中文

This policy explains how MEGASOUND AI TECHNOLOGY LIMITED ("we") collects, processes, uses and protects your personal data when you use the Aimpin.ai app and related services (the "Service"). It also serves as our Personal Information Collection Statement under the Hong Kong Personal Data (Privacy) Ordinance and our notice under Article 8 of Taiwan's Personal Data Protection Act.

1. Who we are

Data user (controller): MEGASOUND AI TECHNOLOGY LIMITED（鉅聲智科有限公司）
Address: Unit 1003, 10/F, Tower 2, Silvercord, 30 Canton Road, Tsim Sha Tsui, Hong Kong
Contact: support@aimpin.ai

2. Data we collect

• Account data: phone number, email, Apple or Google account identifier, and the verified email Apple or Google provides (Apple may give a relay address).
• Optional profile data: display name, avatar, gender, birth year, height, weight, handicap, average score, favorite brands. Leaving these blank does not limit your use.
• Golf data: your bag (clubs, carry, handedness), courses, rounds, per-hole conversations, speech transcripts (audio is deleted after transcription and never stored), photos and screenshots you attach, shot results and coach reports.
• Location: only when you use features such as weather or range hole reading; course and practice locations are stored with that record. We do not track you in the background.
• Payment data: subscription status and purchase records, handled by Apple and RevenueCat. We never receive your card number.
• Technical data: device language, app version, error logs, AI call logs (model, usage, cost). SMS and email verification codes and sign-in credentials are never written to general logs.

3. Purposes

1. Providing the Service: creating your account, signing in, saving and syncing your records across devices.
2. AI caddie advice and coach reports (requires your separate consent, see section 5).
3. Account security, abuse and fraud prevention, payments and subscriptions.
4. Customer support.
5. Improving the Service using de-identified data (see section 4).
6. Recommending new gear and practice content (only if you opt in, see section 6).

You must provide one sign-in identifier (phone, email, Apple or Google) to create an account. Everything else is optional; not providing it only means related features are unavailable or advice is less precise.

4. De-identification and service improvement

• We use de-identified usage data and feedback you choose to send to improve advice quality and the app, for example average distance error per club or the distribution of common misses.
• De-identification removes names, contact details and avatars, replaces account identifiers with random codes, and coarsens locations so they cannot single you out.
• Anything shared outside the company, including with partners, is aggregated statistics that cannot identify any individual. We never share data about a single user.
• We will not attempt to re-identify de-identified data.

5. AI services

With your consent, we send the text you enter, speech transcripts, photos and screenshots you attach, your bag and hole context, and — for coach reports — a summary of your past shots, through our servers to third-party AI model services (OpenRouter and the model providers it routes to), solely to generate advice. We never send your phone number, email, verification codes or credentials.

For text and image analysis we only route to providers that do not retain your data or use it for training; speech-to-text and the scoring model are handled under their providers' policies. You can withdraw consent at any time in Settings › Privacy & AI Data; you can still view and log records manually.

6. Recommendations and direct marketing

• We send recommendations only if you opt in and are 18 or older.
• Data used: email, bag, handicap, a summary of your shot records, favorite brands.
• Categories: new clubs and equipment, test-hit and fitting events, course and range offers, lesson videos and practice content.
• Occasional, never spammy. Every email has a one-tap unsubscribe, and you can turn this off anytime in Settings › Profile.
• We send recommendations ourselves. We do not give your contact details or personal data to partners for their own marketing. If we ever wish to, we will first ask for your separate written consent.

7. Service providers and cross-border transfers

We share data only as needed to run the Service, with providers bound to confidentiality:

• Supabase: database and file storage (Japan)
• Vultr: server hosting (Japan)
• OpenRouter and the AI model providers it routes to: AI analysis
• EngageLab: SMS and email verification codes
• Apple, RevenueCat: subscriptions and payments
• Apple, Google: sign-in
• QWeather: weather (coordinates only)

These providers may be located outside Hong Kong, including Japan, the United States, Singapore and mainland China. We do not sell your personal data. We may disclose data to authorities where required by law.

8. Retention

We keep your data while your account exists. When you delete your account in the app, we immediately delete your account, records, images and verification records from the cloud; system backups are overwritten within 30 days. Aggregated de-identified statistics are not personal data and may be kept.

9. Your rights

You may access, obtain a copy of, supplement or correct your personal data, ask us to stop collecting, processing or using it, ask us to delete it, and withdraw any consent. Most of this can be done in the app (Settings › Profile, Privacy & AI Data, Delete Account and All Data), or email support@aimpin.ai. We respond within statutory time limits (Hong Kong data access requests: 40 days; Taiwan: 15 days for access, 30 days for correction or deletion).

10. Minors

The Service is intended for users aged 16 and over. Users under 16 must have the consent of a parent or legal guardian. Recommendations are sent only to users aged 18 and over; if your birth year shows you are under 18, we will not send them.

11. Security

All traffic is encrypted; the database refuses all direct access so only our servers can read or write it; service keys live only on our servers; images are accessed through short-lived links. No system is perfectly secure; if a breach occurs we will notify you and regulators as required by law.

12. Tracking

We do not track you across apps and do not use the advertising identifier.

13. Changes

If we make material changes, we will update the version number and ask you to confirm again in the app.

14. Contact

Questions about this policy or your personal data: support@aimpin.ai.