🔒 Security & Trust

Your bag data, protected like it matters.

FitMyGolfClubs is built entirely on certified cloud infrastructure — we don't run our own servers, store card numbers, or sell your personal data. Here's exactly how that works, in plain language.

How your data is protected

Certified infrastructure, end to end.

Infrastructure · Google Cloud

Hosted on certified cloud

Every FitMyGolfClubs service runs on Google Cloud and Firebase — infrastructure independently certified for ISO 27001, SOC 2, and PCI DSS. Physical security, network defense, and platform hardening are handled by one of the most audited cloud providers in the world.

Payments · Stripe & Apple

We never see your card

Web payments are processed by Stripe, a PCI DSS Level 1 certified processor — the highest level. iOS purchases go through Apple's App Store. Your card number never touches FitMyGolfClubs systems, and we couldn't store it if we wanted to.

Encryption

Encrypted in transit and at rest

All traffic between your device and our servers is encrypted with TLS. All stored data — your profile, your bag, your analyses — is encrypted at rest on Google Cloud by default.

Authentication

Sign-in handled by Google's identity platform

Accounts are secured by Firebase Authentication. We never store your password ourselves — credential handling, hashing, and session security are managed by Google's identity infrastructure.

Privacy

Private by default, shared only by you

Your equipment data is private. If you connect with a golf professional, you grant that access explicitly — and you can revoke it at any time. We never sell your personal data, and you can request deletion of your account and data whenever you choose.

AI Analysis

AI that doesn't train on your data

Grades and recommendations are generated through Anthropic (Claude) and OpenAI enterprise APIs, whose terms exclude using API data to train their models. The AI sees your equipment specs and swing profile — that's what it needs, and that's what it gets.

What we claim — and what we don't.

The certifications above belong to the providers we build on: Google Cloud and Stripe hold them, and we inherit the protection of their audited infrastructure. FitMyGolfClubs is an early-stage company and does not yet hold its own SOC 2 or ISO 27001 certification — and we'd rather tell you that plainly than imply otherwise.

If your organization needs a completed security questionnaire before rolling FitMyGolfClubs out to clients or students, contact us through the support page — we'll answer it directly.

Found a security issue? Report it via the support page and we'll respond promptly. We're grateful to anyone who discloses responsibly.

Last reviewed: July 2026

Security sorted. Now about that bag.

Grade all 14 clubs across 8 professional fit factors — free, no credit card required.

Grade My Bag Free →