Last updated: 26 August 2026
This Privacy Notice for Aron Schüler IT Services (“R10Progress”, “we”, “us”, or “our”) describes how and why we access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, contact us at [email protected].
What personal information do we process? We process the email address you register with, the golf shot data you upload, the sessions, goals, and AI reports you create in the app, and technical data such as your IP address and device information. Learn more in What information do we collect?.
Do we process any sensitive personal information? No. We do not process special categories of personal data (e.g. health data, racial or ethnic origin, religious beliefs, sexual orientation). Golf performance metrics are not treated as health data by us and are not used for any health-related purpose.
Do we collect information from third parties? We receive supporter name, email address, and membership status from Buy Me a Coffee when you support R10Progress or buy a membership.
How do we process your information? To operate your account, store and visualise your shot data, generate AI analyses and practice recommendations, verify membership status, keep the Services secure, improve the product, and to communicate with you — including occasional emails about R10Progress. See How do we process your information?.
With whom do we share personal information? With the service providers who run our infrastructure — Google Firebase, Cloudflare, OpenAI, Sentry, Mouseflow, and Buy Me a Coffee. See When and with whom do we share your personal information?.
Do we use AI? Yes. Shot data you choose to analyse is sent to OpenAI to generate written analyses and practice recommendations. See Do we offer artificial intelligence-based products?.
How do we keep your information safe? We use organisational and technical measures to protect your personal information. No transmission over the internet or storage technology can be guaranteed 100% secure.
What are your rights? Depending on where you live, you may have rights of access, rectification, erasure, restriction, portability, and objection. See What are your privacy rights?.
How do you exercise your rights? Email us at [email protected]. We act on requests in accordance with applicable data protection law.
In Short: We collect the personal information you provide when you create an account and use the app.
Account information. To register, you provide an email address and a password. Passwords are handled by Google Firebase Authentication; we never see or store your password in plain text.
Golf and practice data. When you import a CSV file exported from the Garmin Approach R10 app (or a comparable device export), we store the contents of that file, which typically include per-shot metrics such as club type, club head speed, ball speed, launch angle, spin rate, carry and total distance, side deviation, smash factor, date and time of the shot, and any session or note fields contained in the export. We also store the sessions, session names, and AI reports you create in the app, together with your app settings (for example unit preferences). Goals and targets you set are currently held only in your browser during a session and are not stored on our servers.
Support and correspondence. If you email us or contact us through our subreddit or other channels, we process the content of that correspondence and your contact details.
Third-party information. If you support R10Progress or purchase a membership through Buy Me a Coffee, we receive your supporter name, supporter ID, supporter email address, membership level, amount, currency, and membership status from Buy Me a Coffee in order to unlock membership features for your account.
Sensitive information. We do not process sensitive information.
All personal information you provide must be true, complete, and accurate, and you must notify us of any changes.
In Short: Some information — such as your IP address and browser and device characteristics — is collected automatically when you visit our Services.
Log and usage data. Our providers automatically collect service-related, diagnostic, usage, and performance information, which may include your IP address, device and browser type and settings, operating system, language preferences, referring URLs, country, date/time stamps of your usage, pages and features viewed, and error reports (sometimes called “crash dumps”). This information is primarily needed to maintain the security and operation of our Services, and for internal analytics and reporting.
Error and crash reports. We use Sentry to receive automated error reports from the app. These reports can include the URL you were on, browser and operating system information, an IP address, a technical stack trace, and — where relevant to the error — the identifier of your account.
Analytics. We use a privacy-friendly, cookieless analytics setup (Plausible, served through our own domain) to count page views and a small number of product events, such as “Sign up”, “Demo mode”, and “Upload CSV”. These measurements are aggregated and do not build a cross-site profile of you.
Session recording (only with your consent). If you consent to it in the app, Mouseflow records how you interact with the interface (mouse movement, clicks, scrolling, and page navigation) so we can find usability problems. You can decline this, and it is not activated unless you consent.
Local storage. The app stores some information in your browser’s local storage, including your login session, your app preferences, and your tracking-consent choice.
In Short: We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for the following purposes:
We do not sell your personal information, and we do not use your shot data for advertising or profiling unrelated to the Service.
In Short: We only process your personal information when we have a valid legal reason to do so.
If you are located in the EU, the EEA, or the UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on. We rely on:
If you are located in Canada, this section applies to you. We process your information where you have given express consent, or where consent can be implied. In limited cases permitted by law we may process information without consent, for example for fraud detection and prevention, for investigations, or where disclosure is required to comply with a subpoena, warrant, or court order.
In Short: We share information with the service providers that operate our infrastructure, and in a small number of other specific situations.
We use the following third-party providers (“processors” or, where they act for their own purposes, independent controllers). They may process your personal information as described below:
| Provider | Purpose | Privacy notice |
|---|---|---|
| Google Firebase / Google Cloud (Google Ireland Ltd. / Google LLC) | Authentication, database (Firestore), serverless functions, hosting | https://firebase.google.com/support/privacy |
| Cloudflare, Inc. | Website and app hosting, CDN, DDoS protection, DNS | https://www.cloudflare.com/privacypolicy/ |
| OpenAI Ireland Ltd. / OpenAI, L.L.C. | Generating AI shot analyses and practice recommendations | https://openai.com/policies/privacy-policy |
| Functional Software, Inc. (Sentry) | Application error and crash reporting | https://sentry.io/privacy/ |
| Mouseflow ApS | Session recording and usability analysis — only with your consent | https://mouseflow.com/privacy/ |
| Buy Me a Coffee (Yeap Solutions Inc.) | Payments, donations, and memberships | https://buymeacoffee.com/privacy-policy |
| Plausible Insights OÜ | Cookieless website and product analytics | https://plausible.io/privacy |
We may also share or disclose your personal information:
We do not sell your personal information and we do not share it with third parties for their own advertising purposes.
In Short: Yes. When you request an AI analysis, the relevant golf shot data is sent to OpenAI and processed there to produce the report.
R10Progress offers AI-powered features (“AI Products”), specifically:
How this works. These features run only when you actively request them. When you do, aggregated shot metrics and derived statistics for the selected sessions, together with the context needed to interpret them (for example club types, units, and your stated goals), are transmitted to OpenAI’s API and processed on OpenAI’s infrastructure. The generated report is stored in your account so you can read it again later. We do not send your email address or password to OpenAI.
Training. We use OpenAI’s API, and under OpenAI’s API terms data submitted through the API is not used to train their models by default. OpenAI may retain API data for a limited period for abuse monitoring, as described in their policies. We do not use your data to train our own models.
Automated decision-making. AI reports are informational coaching content. They are not automated decisions producing legal effects or similarly significant effects for you, and they are not medical, health, or fitness advice.
You must not use the AI Products in a way that violates the terms or policies of our AI service providers.
In Short: Payments are handled entirely by Buy Me a Coffee. We never receive your card details.
R10Progress is free to use; some features require a membership or are unlocked for supporters. Payments, donations, and memberships are processed by Buy Me a Coffee. Your payment instrument details are collected and stored by Buy Me a Coffee and their payment providers — never by us.
When a payment, donation, or membership event occurs, Buy Me a Coffee sends us a webhook containing the supporter name, supporter ID, supporter email address, amount, currency, membership level, and status. We store this information and match it to your account by email address so that membership features can be enabled or disabled. Please review Buy Me a Coffee’s privacy notice at https://buymeacoffee.com/privacy-policy.
In Short: Occasionally, yes — and you can opt out at any time.
In addition to service emails (such as password resets, security notices, and notices about material changes to the Services or this notice), we may occasionally email you at the address associated with your account about R10Progress itself: new features and releases, product improvements, changes to memberships, occasional requests for feedback or beta testing, and related golf-analytics content of ours.
In Short: We keep your information for as long as you have an account with us, unless a longer retention period is required by law.
We keep your account information, uploaded shot data, sessions, and AI reports for as long as your account exists, because they are the substance of the Service. When you delete your account, or ask us to delete it, we delete or anonymise your personal information from our active systems. Where deletion is not immediately possible — for example because information is held in backups — we securely store it and isolate it from further processing until deletion is possible. Backups are typically superseded within 30 days.
Records relating to payments, donations, and memberships may be retained for as long as required by tax and accounting law (in Germany, generally up to 10 years). Error reports in Sentry and analytics data are retained for a limited period in line with those providers’ default retention settings.
In Short: We aim to protect your personal information through organisational and technical security measures.
Your data is stored on Google Firebase infrastructure, protected by authentication and per-user database security rules so that a signed-in user can only access their own data. Traffic to and from the Services is encrypted in transit (HTTPS/TLS), and data is encrypted at rest by our infrastructure providers. Administrative access is limited to the operator of the Service.
Despite our safeguards, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that unauthorised third parties will never defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.
In Short: You may review, change, or terminate your account at any time, and depending on where you live you have further rights over your personal information.
In some regions (like the EEA, UK, Switzerland, and Canada), you have rights under applicable data protection law. These may include the right:
To exercise any of these rights, email us at [email protected]. We will consider and act upon any request in accordance with applicable data protection law, normally within one month.
Withdrawing your consent. Where we rely on your consent, you may withdraw it at any time — for example by declining or revoking tracking consent in the app, by using the unsubscribe link in our emails, or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal, nor processing based on another lawful ground.
Complaints. If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you may lodge a complaint with your local supervisory authority. In Germany, the competent authority for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (https://www.ldi.nrw.de). If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Account information. You can review and change information in your account by logging in and using the app’s settings. To close your account, email us at [email protected]. Upon your request, we will deactivate or delete your account and information from our active databases. We may retain limited information to prevent fraud, troubleshoot problems, assist investigations, enforce our legal terms, or comply with legal requirements.
In Short: We do not knowingly collect data from or market to children under 16 years of age.
We do not knowingly collect, solicit data from, or market to children under 16, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 16, or that you are the parent or guardian of such a minor and consent to that minor’s use of the Services. If we learn that personal information from a user under 16 has been collected without appropriate consent, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from a child under 16, contact us at [email protected].
We keep this minimal:
Most browsers let you block or delete local storage and cookies; doing so may prevent you from staying logged in.
Do-Not-Track. No uniform standard for recognising and implementing Do-Not-Track (“DNT”) signals has been finalised. We therefore do not currently respond to DNT browser signals. Because our analytics are cookieless and session recording is consent-based, our default behaviour is already close to what a DNT signal asks for. California law requires us to disclose how we respond to DNT signals; as there is no accepted standard, we do not respond to them at this time.
We are based in Germany. Some of our service providers (in particular Google, Cloudflare, OpenAI, Sentry, and Buy Me a Coffee) are located in, or transfer data to, the United States and other countries outside the EEA. Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards, such as the EU Standard Contractual Clauses, the EU–US Data Privacy Framework where the recipient is certified, and additional technical measures such as encryption in transit and at rest. You may request further information about these safeguards at [email protected].
In Short: If you live in a US state with a comprehensive privacy law, you may have the right to request access to, correction of, a copy of, or deletion of your personal information.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the rights described below. These rights may be limited in some circumstances by applicable law.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Email address, account identifier, IP address, online identifier | YES |
| B. Personal information as defined in the California Customer Records statute | Name (if provided via Buy Me a Coffee), contact information | YES |
| C. Protected classification characteristics | Gender, age, race, ethnicity, marital status | NO |
| D. Commercial information | Membership and donation records, supporter status | YES |
| E. Biometric information | Fingerprints, voiceprints | NO |
| F. Internet or other network activity | Product usage events, pages and features viewed, and — with consent — session recordings | YES |
| G. Geolocation data | Precise device location | NO (approximate country may be derived from IP address) |
| H. Audio, electronic, sensory, or similar information | Call or video recordings | NO |
| I. Professional or employment-related information | Job title, work history | NO |
| J. Education information | Student records | NO |
| K. Inferences drawn from collected personal information | Performance summaries and practice recommendations generated from the shot data you upload | YES |
| L. Sensitive personal information | Health data, precise geolocation, government IDs | NO |
We may also collect personal information outside these categories when you contact support, take part in a survey or beta, or otherwise correspond with us.
We retain the collected personal information as long as you have an account with us, except where a longer retention period is required by law (see section 8).
Will your information be shared with anyone else? We disclose personal information to service providers under written contracts, as described in section 4. We may use personal information for our own business purposes, such as internal research and product development; this is not “selling”. We have not sold or shared personal information for cross-context behavioural advertising in the preceding twelve months, and we will not do so.
Depending on your state, you may also have the right to obtain a list of the categories or the specific third parties to which we disclosed personal data, the right to limit use and disclosure of sensitive personal data, and the right to question how personal data has been profiled.
How to exercise your rights. Email us at [email protected]. We will honour Global Privacy Control (GPC) opt-out signals where applicable. You may designate an authorised agent to make a request on your behalf; we may deny a request from an agent who does not submit proof of valid authorisation.
Request verification. We will need to verify your identity before acting on your request, and will only use the information you provide for verification, security, and fraud prevention. If we cannot verify your identity from the information we already hold, we may ask for additional information.
Appeals. If we decline to act on your request, you may appeal by emailing [email protected]. We will inform you in writing of any action taken or not taken, with reasons. If your appeal is denied, you may submit a complaint to your state attorney general.
California “Shine The Light” law. California residents may request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes, and the names and addresses of those third parties. We do not disclose personal information to third parties for their direct marketing purposes. To make a request, contact us using the details in section 16.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top. If we make material changes, we may notify you either by prominently posting a notice or by sending you a direct notification. We encourage you to review this Privacy Notice regularly.
If you have questions or comments about this notice, email us at [email protected], or contact us by post at:
R10PROGRESS Aron Schüler IT Services Karlstraße 17 50679 Köln Germany
We are the controller of the personal data described in this notice. We are not legally required to appoint a Data Protection Officer; privacy requests are handled by the operator of the Service directly.
You have the right to request access to the personal information we collect from you, details about how we have processed it, correction of inaccuracies, or deletion of your personal information. You may also have the right to withdraw your consent to our processing. These rights may be limited in some circumstances by applicable law.
You can review and change much of your data directly in the app: log in at https://app.r10progress.com, and use the settings and sessions screens to view, edit, or remove your data. To request an export of your data, or deletion of your account and all associated data, email [email protected] and we will action it.
© 2026 R10Progress — Aron Schüler IT Services. All rights reserved.