Golf SimLink Privacy Policy

Golf SimLink (“we”, “us”, or “our”), a product of Unreal Golf, is committed to protecting your privacy. This policy explains what information the Golf SimLink app, the PC Companion, and this website collect, how it’s used, and the choices you have. In short: Golf SimLink is built to control your simulator on your own local network, and we collect as little as possible.

Information we collect

• Waitlist email. If you join our waitlist, we store the email address you provide so we can notify you about availability and updates.
• App connection data. The app and PC Companion exchange commands (aim, club, mouse, keyboard, macros) directly over your local WiFi network. This dispatch traffic stays between your phone and your PC. Optional voice interpretation and generated speech send text to online services separately, as explained below.
• Purchase information. If you start the free trial, buy a Home simulator, or subscribe to Pro, we receive confirmation of those App Store purchases, together with the app and device identifiers described below, so the app can unlock and restore them. We never receive your payment card or billing details. See “Purchases and subscriptions” below.
• Custom branding. If you white-label the app with your own logo, that image is stored on your device and sent over your local network to your paired PC, which uses it to watermark Shot Highlights clips. It is not uploaded to our servers.

Purchases and subscriptions

• Apple processes payments. Home purchases and Pro subscriptions are bought and billed by Apple through your Apple Account. Apple’s handling of payment information is governed by Apple’s privacy policy. We do not see or store card numbers or billing addresses.
• The 14-day free trial. The trial is a free item obtained through the App Store with your Apple Account. In the paid candidate, “Start my 14-day trial” requires a saved pairing and a verified connection with your PC. The 14 days begin when you confirm the free App Store purchase that follows; installing the app, pairing, or cancelling that confirmation never starts it. It runs for 14 consecutive days and ends without any automatic charge. It does not turn into a subscription, and nothing is billed unless you later choose to buy Home or subscribe to Pro.
• RevenueCat confirms access. The app uses RevenueCat, a purchase-management service, to check which Golf SimLink purchases belong to your Apple Account and to restore them on reinstall or another device. RevenueCat receives your App Store purchase history for this app (the trial, Home purchases, and Pro subscriptions, including renewals, cancellations, and refunds); an app user ID, which is a random identifier the app creates and keeps using on that installation; your device’s identifier for vendor (IDFV), an identifier Apple provides that is the same across one developer’s apps on a device and changes after all of that developer’s apps are removed from it; and basic technical information such as app version, device model, operating system, storefront country and currency, and the network address a request comes from. Because these identifiers stay the same over time, your purchase information can be linked to your device and app installation, and restoring on a reinstall or another device can connect it to the same App Store purchase history. The app has no sign-in, so we do not send your name, email address, or any account details, and we do not know who a purchaser is by name. The app does not collect the advertising identifier (IDFA) and does not ask for permission to track you. RevenueCat’s processing is described in its privacy policy.
• How purchase information is used. We use RevenueCat purchase information for two purposes. App functionality: unlocking, restoring, and ending access correctly, including the trial’s end date and access removed after an Apple refund. Analytics: purchase and subscription reports in RevenueCat, such as how many trials start and how many purchases, renewals, cancellations, and refunds occur. We do not use it for advertising, and we do not use it to track you across other companies’ apps or websites.
• Managing and refunds. Pro renews unless cancelled; you can manage or cancel it in your Apple Account subscription settings. Refund requests go through Apple’s own process at reportaproblem.apple.com. Purchases in the app are governed by Apple’s Standard License Agreement (Terms of Use).

Voice processing and online services

• Speech recognition. Phone voice control uses Apple Speech; Watch voice input uses Apple dictation. Apple may process audio on its servers. Recognition availability depends on device, language, permissions, and network access. Local command matching does not mean transcription is guaranteed offline. We do not save microphone recordings.
• Optional AI interpretation. Unrecognized command text can be sent through Rork’s service to Google Gemini to identify a simulator command. This path sends text, not microphone audio. Avoid personal details in spoken commands. In the updated app, one revocable choice in phone Settings applies to both phone and Watch. Older beta versions may not apply the phone choice to Watch; avoid loose-phrase Watch commands on those versions if you do not want online interpretation.
• Optional generated speech. Natural-voice confirmations and samples send their text and selected voice through Rork to ElevenLabs. Text may include a custom macro name. The updated app asks separately before enabling this; older betas may generate speech when natural-voice replies or previews are used. Turn off natural/generated speech to use the installed system voice instead. Downloaded speech is cached on-device and can play offline while that cache remains available. In the paid version of the app, generated speech, including speech already cached on your device, plays only while you have an active trial or Pro; otherwise the installed system voice is used.
• The protected paid cloud-voice candidate sends command or confirmation text, the RevenueCat installation ID and an Apple-signed purchase transaction to a SimLink gateway hosted through Rork and Cloudflare. A separately hosted Node verification service receives the signed purchase proof and a one-request digest, not your spoken text or RevenueCat installation ID. That service verifies Apple's signature, certificate chain and online certificate status before the gateway reconciles current RevenueCat access and contacts a voice provider. Production and Apple sandbox/TestFlight verification use separate configurations and credentials. The gateway stores usage counters keyed by hashed original-purchase identifiers for abuse prevention and spending control; these remain linked to purchase history rather than being described as anonymous. It no longer reads or retains your IP address or network-address hashes in its application counters. Before purchase verification, admission limits use only environment-wide aggregate counts. Counter expiry is fixed: minute and day windows end on their UTC boundary and monthly windows end at the next UTC month boundary. Durable cleanup is scheduled every five minutes while rows remain, including when you stop using the app; logical retention is at most 31 days, with cleanup targeting the next scheduled run (up to 32 days under normal operation). Scheduling failure blocks new reservations. Infrastructure outages, alarm delivery delays and provider-managed backups may delay physical deletion and must be covered by the hosting retention policy. The Node service stores only random server-to-server request IDs temporarily in memory to reject replay (a 30-second request lifetime plus up to five seconds of clock skew, followed by a five-second cleanup interval while the process runs). Host CPU suspension can delay memory cleanup until the process resumes or another authenticated request arrives; shutdown discards the cache. It does not persist purchases or request digests. Neither service deliberately logs or stores raw phrases, audio, purchase proofs or raw IP addresses in its application database. Hosting and provider infrastructure may retain raw network addresses and technical request information under their terms; that handling must be verified before release. This service remains disabled until production protections and configuration are verified; the candidate does not fall back to a direct provider credential. Earlier beta builds used direct Rork toolkit requests. Online providers receive the submitted content and technical request information needed to serve it. Their processing and retention are governed by their service terms and privacy policies; we do not promise zero retention by every provider. We do not use these requests for advertising or tracking.

Pairing and local access

The phone and the PC Companion talk directly over your local network. Companion 3.0 / v4 implements secure pairing and must be used with a matching secure-pairing iOS build. Older v2 installations work differently; their limitations are retained below so upgrading does not hide how an older installation handles data.

• Older installations (Windows companion v2). The PC window shows a six-digit pairing code, and a new code is created each time the companion starts. Entering it gives your phone an access key that it sends with every command. Traffic between the phone and PC travels over your local network and is not encrypted. The companion announces itself on your local network so the app can find it; this helps the app locate the PC but does not grant control. Finished Shot Highlights clips can be downloaded through a local-network link, also shown as a QR code, without pairing. Anyone on the same network who has that link can download the clip while it remains on the PC. Use a private home network, not guest or public Wi-Fi.
• Secure pairing (Windows companion 3.0 / v4 and matching iOS builds). Phone-to-PC traffic is encrypted with HTTPS and the app verifies the paired PC’s certificate identity. The phone saves PC identity and its device credential in iOS Keychain; the PC saves its identity and device access in Windows-protected storage for the Windows user. Private invitations work once and expire after five minutes. Individual paired devices can be revoked from the PC window; forgetting a PC on the phone only removes that phone’s saved pairing. Matching iOS builds download verified highlights through authenticated, encrypted in-app transfer; browser and tokenless QR clip downloads are disabled. Clips stay on the PC until deliberately downloaded, then iOS sharing uses a local video file without pairing credentials. Upgrading from v2 requires matching phone and PC versions and one-time re-pairing. Pairing is remembered, but the PC’s local Safety approval for a simulator is still required each companion start. This describes the v4 implementation, not proof that every Windows, iOS or simulator combination has passed release testing.

What we do not collect

• We do not upload your scores or simulator gameplay to our servers. Optional Shot Highlights records the selected PC screen locally. Clips stay on your PC until you download or share them; with an older v2 companion, others on your local network who have a clip’s link can also download it; v4 requires authenticated in-app access, as described under “Pairing and local access.”
• We do not track your location.
• We do not sell, rent, or share your personal information with third parties for advertising.
• The PC Companion does not transmit your keystrokes or commands to our servers.

How we use information

We use the email you provide only to send you product updates, launch notifications, and important information about Golf SimLink. We use purchase information to unlock, restore, and support what you bought, and for purchase and subscription analytics, as described under “Purchases and subscriptions”; never for advertising or tracking. We may use anonymous, aggregated analytics to understand how the website is used and improve it. We never link this to your identity.

Device permissions

The app uses your local network to discover and connect to the PC Companion. It may use the microphone for hands-free commands with your permission. Apple speech services and optional third-party text processing are described above. Basic touch control over your local network does not require cloud AI.

Data retention & your choices

We keep your waitlist email until you ask us to remove it or you unsubscribe. You can request that we delete your information at any time by contacting us. App settings, macros, scores, and session summaries are stored locally. Purchase records are kept by Apple and RevenueCat for as long as needed to provide and restore your purchases and to meet legal and accounting obligations. You can turn off voice control, revoke microphone/speech access in system Settings, and disable online interpretation and generated speech in the app. Revocation stops future requests; it cannot undo content already sent to a provider. You can clear saved sessions in the app and delete local clips on your PC.

Every email we send includes an unsubscribe link, or you can opt out here at any time — no login needed. Once you opt out we stop sending, and we keep a record of the opt-out only so future sends skip you.

Children’s privacy

Golf SimLink is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we’ll revise the “Last updated” date above.

Contact us

Questions about this policy or your data? Reach out at [email protected].