Short Game

Privacy policy

Last updated: 26 September 2026

This policy covers the Short Game mobile app. It says what the app stores about you, why it is allowed to, how long it keeps it and what you can demand at any moment. The same text is available inside the app, under Profile → Privacy policy.

  1. Who is responsible for your data

    The controller of your personal data is the publisher of the Short Game app, Mateusz Janiszewski. For anything concerning your data — questions, requests, complaints — write to golfmaster@janiszewski.art.pl

  2. What the app stores

    • Account: display name, email address and password, or the basic Google profile data (name, email) if you sign in with Google.
    • Sessions: dates, clubs, shots played, shots that finished within three feet, distances, durations and your notes.
    • Photos: images you attach to a session yourself.
    • Your bag: club names and loft angles.
    • Settings: weekly goal, language, theme and the consents you gave, with their dates.
    • Device: basic identifiers needed to keep you signed in, and — only with your consent — diagnostics sent when the app stops working.

    The app does not collect your location, contacts, calendar or advertising identifiers, and there are no ads in it.

  3. Why it is allowed to

    • Art. 6(1)(b) GDPR — to deliver what you signed up for: the account, your session records and your statistics.
    • Art. 6(1)(a) GDPR — your consent, for optional things such as crash diagnostics. You can withdraw it at any time in Settings.
    • Art. 6(1)(f) GDPR — a legitimate interest in keeping your account secure.
  4. What it is used for

    • Recording your practice and working out your accuracy, streaks and trends.
    • Keeping your sessions in sync between your devices.
    • Signing you in and protecting the account.
    • Keeping your history safe from a lost or replaced phone.

    Your data is not used to profile you, to advertise to you, or to train anything.

  5. Where it is kept

    On Google Firebase: Firebase Authentication for sign-in, Cloud Firestore for your sessions and settings, Firebase Storage for photos. Everything is encrypted in transit and at rest, and access rules allow each account to reach only its own records.

  6. Who else sees it

    Nobody. Your data is not sold, exchanged or handed to third parties for their own purposes. Google acts only as the processor running the infrastructure described above, on the publisher’s instructions.

  7. Signing in with Google

    If you choose Google Sign-In, the app receives your name and email address — nothing else from your Google account, and it never reads your Gmail, Drive or contacts.

  8. Transfers outside the EEA

    Data is processed on Google infrastructure (Google LLC, United States). Those transfers rely on Standard Contractual Clauses approved by the European Commission.

  9. How long it is kept

    For as long as the account exists. After you delete the account the data is removed immediately, and Google infrastructure backups are purged within 30 days.

  10. Your rights

    • Access your data and get a copy of it — the app exports it as a file, without asking anyone.
    • Correct anything that is wrong.
    • Delete your data or the whole account.
    • Restrict processing, or object to it.
    • Withdraw a consent you gave, without it affecting what was lawful before.
    • Lodge a complaint with your supervisory authority — in Poland, the President of the Personal Data Protection Office.

    The first three you can exercise yourself in Settings → Your data. How deletion works

  11. Children

    Short Game is not intended for anyone under 16. Under Art. 8 GDPR, consent from a child under 16 requires authorisation by a legal guardian. The app does not knowingly collect data from children under 16.

  12. Other services

    The app uses Google Firebase and, optionally, Google Sign-In. Google describes its own practices here:

  13. Changes to this policy

    If anything material changes, the app says so before you carry on using it, and the date at the top of this page moves.

Questions about your data

Write from the address your account uses, and you get an answer within 30 days, as GDPR requires.