Privacy policy
Last updated: 7 October 2026
This policy describes the personal data Kolibri Golf processes when you create and use a Kolibri account, why, for how long, and what your rights are. The French version is the original; in case of discrepancy it prevails.
1. Controller
Kolibri Golf SAS, 37 rue Saint-Nestor, 69008 Lyon, France, registered with the Lyon Trade and Companies Register under number 895 193 027.
For any question about your data: contact@kolibri-golf.com.
2. Data we process
Account data, given at sign-up: first name, last name, email address.
Authentication data: a hash of your password (the password itself is never stored), or the public key of your passkey, and, if you enable one, your second-factor secret.
Shot data: the measurements of your shots captured by the sensors of the Kolibri kiosks you sign in on (for example ball and club speed, direction and trajectory), with the date, time and practice site.
Technical data: IP address, timestamp and pages visited when you sign in, in the authentication server's logs; date of last sign-in.
We collect no payment data: the service is free.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, authenticating you | Performance of the contract (terms of use) |
| Recording and analysing your shots, showing them back to you | Performance of the contract |
| Sending the emails the service needs (address verification, password reset, security alerts) | Performance of the contract |
| Improving the service, in particular calibrating and refining the sensors and analysis methods | Legitimate interest: service improvement |
| Producing anonymised, aggregated statistics that no longer identify you | Legitimate interest; once anonymised, the data is no longer personal data |
| Protecting the service against abuse (sign-in rate limits, logs) | Legitimate interest: security |
| Meeting our legal obligations | Legal obligation |
We send no marketing communications. Should that change, we would ask for your consent first.
4. Recipients
Your data is processed by Kolibri Golf and by the following processors, acting on our instructions:
| Processor | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting | Falkenstein, Germany |
| Scaleway SAS | Storage of backups, encrypted before upload | Paris, France |
| Proton AG | Delivery of the service's emails | Switzerland (recognised as adequate by the European Commission) |
The operator of the practice site you sign in at has no access to your shot data.
We neither sell nor rent your data. We may disclose it where the law requires.
5. Retention
| Data | Period |
|---|---|
| Account, authentication and shot data | As long as the account exists, then deleted |
| Copies in encrypted backups | Up to seven months after account deletion, until the backups expire |
| Authentication server logs | 14 days |
6. Your rights
You may at any time access your data, have it corrected or erased, ask for its processing to be restricted, object to processing based on our legitimate interest, receive a copy of your data in a machine-readable format, and give instructions about it after your death.
To exercise these rights, write to contact@kolibri-golf.com. We reply within one month. Deleting your account deletes your account and shot data.
If you believe your rights are not respected, you may lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
7. Security
Connections are encrypted (TLS). Passwords are stored as hashes. You can protect your account with a passkey or a second factor. Backups are encrypted before they leave our servers.
8. Minors
The service is open to everyone. If you are under 15, signing up requires the agreement of the holder of parental authority.
9. Cookies
The authentication server (auth.kolibri.golf) and the application (app.kolibri-golf.com) use only session cookies strictly necessary to keep you signed in. No third-party advertising or analytics trackers are used.
10. Transfers outside the European Union
Your data is hosted in the European Union. Only the sending of emails passes through Switzerland, whose level of protection is recognised as adequate by the European Commission.
11. Changes
We may change this policy. The date at the top shows the current version; significant changes are announced by email or when you sign in.