Your data, plainly explained

• We collect account info, league activity, payment metadata, and (when you allow it) device location while a round is active.
• We use it to run the app, score rounds, show you and your league on the map, and handle billing.
• We share data with a small set of operational providers (hosting, payments, maps). We do not sell or share your personal info for cross-context advertising.
• Content you post inside a league (photos, captions, locations tied to moments) is visible to other members of that league and to players who follow you, per the app's sharing controls.
• You can ask us to access, correct, export, or delete your data at any time by emailing yourindie101@gmail.com.

You provide to us:

• Account: email, display name, optional avatar image.
• League activity: leagues you create or join, events, seasons, scores, scorecards, course selections, feedback.
• Moments: photos or short videos you upload during an event, captions, the hole they relate to, and the latitude/longitude your device reports at capture time (only when you permit location access).
• Payment details for paid plans and Season Slots: handled directly by Stripe. We store only the resulting subscription and customer identifiers, not card numbers.

Collected automatically:

• Authentication session tokens stored in your browser by our auth provider.
• Approximate device location when you opt in for live tracking, proximity-based hole detection, or moment capture. Location is sent only while the relevant feature is active.
• Standard server logs from our hosting provider (timestamps, request paths, IP, user-agent) used for security and debugging.

From third parties:

• If you sign in with Google, we receive your email, name, and profile image as permitted by your Google account settings.
• Course information (name, location, photos) sourced from Google Maps Platform when you add or look up a course.

We use the information above to (a) operate and maintain Go Golf Leagues, including authentication, scoring, standings, course lookup, and the map canvas; (b) process payments and manage subscriptions; (c) deliver the live-round, location-aware, and moments features you choose to use; (d) communicate about your account or service changes; (e) prevent fraud and abuse and secure the service; and (f) comply with legal obligations.

Under the GDPR/UK GDPR, our lawful bases are: performance of a contract (operating the service you signed up for), legitimate interests (security, abuse prevention, product reliability), consent (location features, future marketing email), and legal obligation (tax, accounting, lawful requests).

We share data with a small set of providers strictly to operate Go Golf Leagues. Each receives only the data it needs.

• Lovable Cloud (built on Supabase): hosting, managed Postgres database, authentication, file storage.
• Stripe: payment processing for subscriptions and Season Slots. Card details go directly to Stripe; we never see them.
• Google Maps Platform: map tiles, geocoding, Places lookup, course photos. Your device contacts Google when the map is on screen.
• Google (for Sign in with Google, if you use it).

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. Content you publish inside a league (moments, photos, captions, the locations tied to them, scores) is visible to other members of that league and to players who follow you, per the in-app sharing controls. We may disclose information when required by law or to protect rights, safety, or the integrity of the service.

Go Golf Leagues uses your browser's local storage to keep your authentication session and a small number of in-app preferences. We do not use third-party advertising cookies or cross-site trackers. Google Maps may set its own cookies when the map loads; those are governed by Google's privacy policy.

Our subprocessors operate globally. If you are in the EU, UK, or another region with data-transfer rules, your information may be processed in the United States or other countries under those providers' standard contractual clauses or equivalent safeguards.

We keep account and league data for as long as your account is active. When you request deletion (see below), we remove associated data from active systems and from backups on their normal rotation. Server logs are retained for short operational periods following our hosting provider's defaults.

Connections to Go Golf Leagues are encrypted in transit (HTTPS). Database access is protected by row-level security policies scoped to your account and league memberships, so members only see data for leagues they belong to. Uploaded media is kept in private storage buckets and served via short-lived signed URLs. Passwords are handled and hashed by our authentication provider; we never store them in plaintext.

No system is perfectly secure. We do not claim certifications (e.g. SOC 2, ISO 27001) or independent audits.

Depending on where you live, you may have the right to access, correct, export, delete, restrict, or object to certain processing of your personal information, and to withdraw consent for processing based on consent. California residents have additional rights under the CCPA/CPRA, including the right to know, the right to delete, the right to correct, and the right to limit use of sensitive personal information. EU and UK residents have rights under the GDPR/UK GDPR and may also lodge a complaint with their local data protection authority.

To exercise any of these rights, email yourindie101@gmail.com. We will respond within the time required by applicable law.

Go Golf Leagues is intended for players age 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, please contact us so we can delete it.

We may update this policy as the product evolves. When changes are material, we will notify you in the app or by email. The “Last updated” date at the top reflects the most recent revision.

Privacy questions, requests, or concerns: yourindie101@gmail.com.