Biometric Data Policy

How we handle the body points we compute from your swing videos.

Effective: September 30, 2026

In short. To analyze your swing, TheLAB computes the positions of your joints and your club from the video. Some U.S. state laws treat such data as biometric information. We collect it only with your written consent, use it only to analyze your swing, never sell it, and delete it when you delete the swing or your account — and at the latest three years after your last use of TheLAB.

1. Who we are

LAB-B (Sebastian Burges), Wettmarser Weg 14, 59846 Sundern, Germany · info@customgolflab.de. This policy applies to TheLAB app and complements our Privacy Policy.

2. What we collect

Body points — for each analyzed frame of a swing video, the positions of 17 body points (such as shoulders, elbows, wrists, hips, knees, ankles, and points on the head: nose, eyes and ears) and of the club.
Measurements derived from them — angles, positions and timings such as swing plane, posture, hip rotation or tempo.

We do not create a scan of your face or hand geometry, do not use face recognition, do not create a template that could identify you, and do not compare your body points with those of other people to recognize you. Grip photos are evaluated as images; we do not derive or store hand geometry from them.

3. Why we collect it

Solely to analyze your golf swing and show you the result: your swing score, the phases of your swing, fault patterns, drill recommendations and your progress over time. We do not use body points for identification, advertising, profiling or any other purpose.

4. Consent

Before your first swing analysis, the app informs you that body points are computed from your videos, for which purpose and for how long they are kept, and asks for your consent. Without it, the swing analysis is not available. You can withdraw your consent at any time in the app under "Privacy & consents"; the swing analysis is then no longer available, and you can delete existing swings and their body points.

5. No sale, no profit

We do not sell, lease, trade or otherwise profit from body points or other biometric information.

6. Who receives it

We disclose body points and measurements derived from them only to the service providers that process them on our behalf to provide the analysis, and only with your consent:

Amazon Web Services (Frankfurt, Germany) — the servers that compute the body points.
Supabase (data hosted in Frankfurt, Germany) — the database in which your results are stored.
Google (Gemini) — receives individual frames and measured values to evaluate swing phases and write coaching text; under its API terms it may not use them to train its models.

For the quick analysis, individual frames (images, not body points) are also evaluated by models from OpenAI and Anthropic, as described in our Privacy Policy.

Beyond that, we disclose biometric information only if required by law, a court order or a subpoena. Using body points to train our own analysis models requires a separate, optional consent (see our Privacy Policy, section 2.14).

7. Retention and destruction

We permanently destroy body points and the measurements derived from them at the earliest of the following:

when you delete the swing in question;
when you delete your account;
three years after your last use of TheLAB;
when the purpose for which they were collected no longer applies.

Video files on the analysis server are deleted right after the analysis. Deletion from backups follows within 30 days.

8. Security

We store, transmit and protect biometric information using a reasonable standard of care, and in a manner at least as protective as the way we store, transmit and protect other confidential and sensitive information: encrypted connections, row-level access rules in the database (every user sees only their own data) and access for our own staff only where necessary for troubleshooting.

9. Questions and requests

To ask what body points we hold about you, to have them deleted or to withdraw your consent, email info@customgolflab.de. We respond within 45 days.