Privacy Policy

• Account info: your email and the name you choose. Passwords are handled entirely by our authentication provider (Supabase) — we never see or store your password. If you sign in with Google, we receive only the basic profile info Google shares.
• Your golf data:courses you've played, rounds and scores, your manually-entered handicap, rankings, your Dream 18, photos you upload, and notes you write.
• Location: when a course is added, we use its location to drop a map pin for that course. We store the course's location only — we never track or keep a history of where you physically are.
• Images you upload:photos of physical scorecards and screenshots of your golf history are sent to Google Gemini, an AI service that reads their contents so you don't have to retype them. The extracted data is always shown to you to review before anything is saved. We use a provider whose terms state they do not retain or train on this data.
• Course contributions:if you add a course or its scorecard details to our shared database, that information becomes part of the app's course data so other members benefit.

• Your scores, photos, and profile are private by default. Only friends you accept as Playing Partners — and members of any Golf Trip you join — can see the rounds and photos you share with them.
• Photos you upload live at unguessable web links and are shown only to your accepted Playing Partners and fellow Golf Trip members. If you explicitly choose to share a photo to a course's page, it becomes visible to all members on that course page.
• We do not sell your data, and we do not show ads.
• The “Playing Partners” feature is for sharing scores, photos, and trips. It is deliberately not a tool for gaining access to private courses.

We use only the essential browser storage required to keep you signed in (your Supabase Auth session). We do not use advertising or tracking cookies, and there is no third-party analytics. If we ever add analytics, we'll update this policy and ask for your consent where required.

Supabase (database, authentication, and file storage), Vercel (hosting), Google (if you choose Google sign-in), and Google Gemini (to read the scorecard and history images you upload).

Data is encrypted in transit (HTTPS) and at rest. Access is restricted at the database level so other members cannot read your private information.

You can edit or delete individual rounds and photos at any time. You can also delete your entire account from Settings. Deleting your account permanently removes your rounds, your photos (including the underlying image files), your comments, your Playing Partner connections, your Golf Trip memberships, and your notifications.

Course data you contributed to the shared database stays so other members aren't left with gaps — but it is no longer credited to you; it's shown anonymously.

Depending on where you live (for example, California or the EU/UK), you may have additional rights to access, correct, or delete your personal data. Email us to exercise them.

Scorecard is not directed to children under 13 (or the minimum age in your region), and we don't knowingly collect their data.

We'll update this page and the “last updated” date whenever this policy changes.

Questions or requests: scorecardgolfapp@gmail.com.

Scorecard is an invite-only beta. This policy is written in plain English and is not legal advice.