GolfedIn logo GolfedIn

Privacy Policy

Last updated: November 2, 2026

This Privacy Policy explains how GolfedIn ("GolfedIn", "we", "us", or "our") collects, uses, shares, and protects information when you use the GolfedIn mobile apps, website (including golfedin.com), and related services (together, the "Service"). By creating an account or using the Service, you agree to this Policy.

1. Who we are

GolfedIn is a golf companion product for scoring, scorecard scanning, trip planning, group expenses, tournaments, and social features among golfers you choose to connect with. Contact for privacy matters: support@golfedin.com.

2. We do not sell your personal information

We do not sell your personal information to anyone. We do not sell, rent, or trade your personal data for money or other valuable consideration, including as "sale" or "sharing" for cross-context behavioral advertising is commonly defined under laws such as the CCPA/CPRA.

We may disclose information only as described in this Policy: to operate the Service, to processors who help us run it under contract, to people you choose to share with, or when required by law.

3. Information we collect

  • Account: email address (via authentication), user ID, and sign-in related metadata.
  • Profile: display name, optional phone, handicap, avatar, and optional payment handles you add for settlement convenience (e.g. Venmo) — we do not process card payments ourselves unless we later notify you of a change.
  • Golf content: rounds, hole scores, course selections, tee choices, scorecard photos you upload, and related notes.
  • Expenses & groups: amounts, splits, participants (including "ghost" names for people without accounts), venues, settlement status, and group chat/photos you post.
  • Social: friend relationships, invites, notifications, and shared rounds.
  • Safety & moderation: who you block (and when), and, if you report a user, the reported user, your short reason, and any optional details you add (up to 2,000 characters). If you report a group chat message or photo, or an AI trip planner reply, the report also keeps a copy of that message or reply and a link to the photo, so we can review it even if it is later deleted. Reports are only visible to our team.
  • Device & usage: basic technical logs, crash/diagnostics if enabled, and security signals needed to run and protect the Service.
  • Permissions you grant: camera/photos (scorecards), and location when you use nearby course search — we do not build a continuous location history beyond what you save to a round or expense.

4. How we use information

  • Provide core features (auth, scoring, OCR assist, expenses, trips, tournaments, social).
  • Send service emails and notifications you initiate or that are required for the product (OTP codes, invites, settlement/friend notifications, and — if you are a group admin — an email when a post in your group is reported).
  • Secure the Service, prevent abuse, and debug failures.
  • Improve the product using aggregated or de-identified insights where practical.
  • Comply with law and enforce our Terms.

We do not use your personal information for third-party advertising networks or data brokers.

5. AI scorecard scanning & other processors

If you scan a scorecard, the image is sent through our backend to an AI provider (currently Google Gemini) solely to extract scores and related card fields. You should review OCR results before relying on them for handicaps, bets, or official scoring. AI output can be wrong.

We use service providers ("processors") to operate GolfedIn, which may include:

  • Supabase — authentication, database, storage, realtime, Edge Functions.
  • Google — Gemini (OCR / limited AI features) and Google Places (course/venue search).
  • OpenGolfAPI — golf course catalog for starting a round (our server sends only course searches, never anything about you).
  • Firebase Cloud Messaging — push notifications on supported devices.
  • Cloudflare Turnstile — bot protection at sign-in.
  • Hosting / email / security vendors as needed to run the website and deliver OTPs.

These providers process data on our instructions to provide the Service. Their use is not a "sale" of your personal information. Their own terms and privacy notices also apply to their processing.

6. Sharing with other users

Content you share (rounds, groups, expenses, chats, invites) becomes visible to the people you share it with. We cannot fully erase copies held by those users after sharing. Ghost names you enter are visible to your group.

Photos are stored privately and shown only through short-lived links to people allowed to see them. Scorecard photos you scan are visible to you, the people you share that round with, and the players and group members of the group round it was saved from — not to friends unless you share the round.

Blocking & reporting:

  • From any user's profile you can Block user or Report user. In a group chat, long-press someone's message to report it or block them; in a group gallery, long-press a photo to report it. In the trip planner, tap the flag on an AI reply to report it. Manage blocks any time in Profile → Blocked users.
  • Blocking removes any friendship or pending request between you, hides you from each other in search and on profiles (including profile photos), and stops new friend requests between you in either direction. You can unblock later; you would then need to add them as a friend again.
  • Blocking is a boundary, not an eraser: it does not delete group messages, expenses, rounds, or tournaments you already share, and a blocked person may still appear in a group you both belong to. Leave the group, or delete your own content, if you do not want that.
  • We do not read or scan group chats, but reporting a group message or photo alerts the group's admins (in the app, by push and by email) so they can remove it, and our team sees what was reported. The alert names who posted it, never who reported it.
  • Reporting sends us the user, your reason, and any details you add. We review reports and act on them: we may remove content and suspend or permanently ban the account, as set out in our Terms of Service. The person you report is not told who reported them. Reports are rate-limited to prevent abuse of the reporting system itself.

7. Retention

We keep account and app content while your account is active and as needed to provide the Service. Security and operational logs may be retained for a limited period (typically 30–90 days) unless a longer period is required for security, abuse prevention, or legal reasons.

8. Account deletion

Delete your account in the app: Profile → Delete my account. Deletion is immediate and permanent: your account, profile, rounds, round and scorecard photos, and tournaments you created are deleted right away, and you are signed out.

If you can't use the app, you can instead request deletion of your personal account and associated personal data we control by emailing support@golfedin.com from the email address on your account and include:

  • Subject line indicating an account deletion request;
  • Your user ID (as shown in the app / profile where available); and
  • The email address associated with the account.

We will complete an emailed deletion request within six (6) months after we receive a valid request containing the required information. We may contact you to verify identity before deleting. We aim to complete deletion sooner when practical, but six months is our maximum commitment for completing deletion of account data under our control.

Deletion means we will remove or irreversibly de-identify, as applicable:

  • Your profile and authentication association we control;
  • Your rounds, scorecard images, your files in our avatar, round-photo and scorecard storage, and personal content stored in our systems;
  • Expense and social records tied to your user ID, and your block list, subject to the exceptions below. In tournaments other people created, your participation is removed and the tournament itself stays.

So shared records stay accurate for everyone else, an expense share that was yours becomes a guest share under your display name (with no account linked to it), shares sent only to you are removed, and activity records may keep a display name with the account link removed.

Group chat messages, chat photos and gallery photos you posted stay in the group after your account is deleted, so the conversation and the group's shared memories stay complete. They are shown as from "Deleted user", with no link to you. If you want them removed, delete them yourself before deleting your account, or ask a group admin to remove them.

Exceptions / what may remain:

  • Data you shared with others may remain in their accounts until they delete it;
  • Aggregated or de-identified data that cannot reasonably identify you;
  • Records we must keep for legal, tax, fraud-prevention, dispute, or security purposes;
  • Reports you filed, or that were filed about you, may remain for safety review with the account identifiers removed;
  • Backups that rotate out on a normal schedule after deletion from live systems.

Deletion cannot be undone. If you sign in again with the same email afterwards, you start over with a new, empty account.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal data, or to object to certain processing. Email support@golfedin.com. We will respond within the time required by applicable law (and in any event we endeavor to respond within 30 days to access/correction inquiries). For account deletion completion, see Section 8.

You can also control social data yourself, without emailing us: unblock people in Profile → Blocked users, and delete your own messages, photos and rounds in the app.

If you are a California resident, we affirm: we do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are commonly defined.

10. Children

GolfedIn is only for people aged 16 or older. We do not knowingly collect personal information from anyone under 16. If you believe someone under 16 has an account, contact support@golfedin.com and we will delete it promptly.

11. Security

We use industry-standard measures including encryption in transit, access controls, and row-level security on application data where implemented. No method of transmission or storage is 100% secure. You are responsible for securing your devices and access to your email inbox used for OTP login.

12. International transfers

We and our processors may process data in the United States and other countries. By using the Service, you understand your information may be transferred to jurisdictions with different data-protection laws.

13. Disclaimers related to privacy & product data

  • The Service and AI features are provided "as is." OCR and other AI outputs may be inaccurate.
  • Expense splitting and settlement helpers are convenience tools, not legal, tax, or payment guarantees. Deep links to third-party payment apps (if offered) are not payment processing by GolfedIn; those providers' terms apply.
  • To the maximum extent permitted by law, GolfedIn is not liable for indirect, incidental, special, consequential, or punitive damages, or for disputes between users. Our total liability relating to the Service is limited to the greater of (a) amounts you paid us for the Service in the prior 12 months or (b) zero if the Service is free.

Some jurisdictions do not allow certain limitations; in those places, our liability is limited to the fullest extent permitted by law.

14. Changes

We may update this Policy from time to time. The "Last updated" date will change, and material changes may be highlighted in-app, on the website, or by email. Continued use after the effective date means you accept the updated Policy.

15. Contact

Privacy questions, access requests, or deletion requests: support@golfedin.com. For deletion, include your user ID as described in Section 8.