1. Our approach
CoachTalk is operated by Quantum Surprise, Unipessoal Lda. We recognise that golfers may share personal reflections and detailed records of their game. We aim to design, operate and improve the service using safeguards proportionate to the risks of that information.
No online product can promise perfect security, continuous availability or that every possible security incident will be prevented.
2. Controls and responsibilities
Our security programme is intended to include secure connections, provider-managed protections for stored data, identity verification, access restrictions, suitable logging, environment and credential management, security review of changes, and processes for responding to suspected incidents.
Access to customer information should be granted only where necessary for legitimate operations. Different parts of the system can use different providers and technical controls. We do not claim that every feature offers the same offline or recovery capability.
3. Coaching, audio and third parties
CoachTalk may need to send selected conversation context or audio-related information to AI or voice providers to deliver a requested interaction. We review those flows as part of data protection and security. Different services can apply different processing, retention and access conditions. See Service Providers or contact privacy@coachtalk.golf for information about your data.
We don't use microphone or location permissions as a substitute for a clear user choice to activate a feature. Mobile device permissions can be changed in device settings.
4. Backup, deletion and recovery
Operational backup and recovery processes may retain copies for a limited period. Deleting an active account or coaching record does not necessarily erase every backup immediately. This statement does not promise a fixed erasure period for every backup or external provider. See Account & Data Deletion.
5. Security incidents
We investigate suspected security incidents and take appropriate measures to contain them, protect users and meet legal notification requirements. Where a personal-data breach is notifiable under GDPR, the relevant supervisory authority and affected individuals will be notified as required by law. We avoid promising that every issue can be resolved within a fixed time regardless of circumstances.
6. How you can help
Protect your account email and password, do not share sign-in or verification codes, keep devices updated and sign out of shared devices. If you suspect unauthorised access, contact us promptly.
7. Responsible disclosure
Report suspected vulnerabilities privately to security@coachtalk.golf with the subject Security. Do not access, disclose, change or retain another person's data while reporting a concern.