Privacy Policy

• Account info: your email and the username and display name you choose (your username and display name are visible to other members). Passwords are handled entirely by our authentication provider (Supabase) — we never see or store your password. If you sign in with Google, we receive only the basic profile info Google shares.
• Waitlist: if you request access, we keep your email to send you a confirmation and, if you're approved, your invite link. Requests we decline are deleted.
• Your golf data: courses you've played, rounds and scores, your manually-entered handicap, rankings, your Dream 18, photos you upload, and notes you write.
• Location: when a course is added, we use its location to drop a map pin for that course. We store the course's location only — we never track or keep a history of where you physically are.
• Images you upload: photos of physical scorecards and screenshots of your golf history are sent to Google Gemini, an AI service that reads their contents so you don't have to retype them. The extracted data is always shown to you to review before anything is saved. We use a provider whose terms state they do not retain or train on this data.
• Photo check: when you upload an on-course photo, a small copy is checked for posed or close-up people and for a visible course name — by the same AI service, or, if the app is set to on-device checking, on your own phone without leaving it. Photos with people start private and are never used in Guess the Course.
• Course contributions: if you add a course or its scorecard details to our shared database, that information becomes part of the app's course data so other members benefit.

• Your scores and profile are private by default. Only friends you accept as Playing Partners — and members of any Golf Trip you join — can see your rounds and the photos you keep private.
• Photos you upload live at unguessable web links. A photo you add to a round is public by default — shown to all members on that course's page and in the Guess the Course game — unless you switch it to private when uploading or any time after (one tap on the photo). Photos with posed or close-up people start private. Private photos are shown only to your accepted Playing Partners and fellow Golf Trip members.
• Inside a Golf Trip, its members see the trip's plan, budget, votes and payments, and the rounds and photos attached to it. If a trip round is played with handicaps, the course handicap used for each player is saved with that round and visible to everyone on the trip — even members who aren't your Playing Partners.
• To suggest trips, Scorecard compares your rounds with your Playing Partners' (same course, same day) — rounds you can already see. Nothing is shared or created until someone taps to make it a trip, and you choose whether to attach your rounds.
• A public photo you tag with a hole number can be picked by other members for their Dream 18, where it's shown with your @username as credit. Making the photo private or deleting it removes it from their lists.
• Any member can report a photo they can see. Reports go only to the app's owner, who sees who sent each one; the uploader isn't told who reported it.
• We do not sell your data, and we do not show ads.
• The “Playing Partners” feature is for sharing scores, photos, and trips. It is deliberately not a tool for gaining access to private courses.

We use only the essential browser storage required to keep you signed in (your Supabase Auth session). We do not use advertising or tracking cookies, and there is no third-party analytics. If we ever add analytics, we'll update this policy and ask for your consent where required.

Supabase (database, authentication, and file storage), Vercel (hosting), Resend (to deliver our emails — waitlist confirmations, invites, and account emails like password resets), Google (if you choose Google sign-in), and Google Gemini (to read the scorecard and history images you upload).

Data is encrypted in transit (HTTPS) and at rest. Access is restricted at the database level so other members cannot read your private information.

You can edit or delete individual rounds and photos at any time. You can also delete your entire account from Settings. Deleting your account permanently removes your rounds, your photos (including the underlying image files), your comments, your Playing Partner connections, your Golf Trip memberships, and your notifications.

Course data you contributed to the shared database stays so other members aren't left with gaps — but it is no longer credited to you; it's shown anonymously.

Depending on where you live (for example, California or the EU/UK), you may have additional rights to access, correct, or delete your personal data. Email us to exercise them.

Scorecard is not directed to children under 13 (or the minimum age in your region), and we don't knowingly collect their data.

We'll update this page and the “last updated” date whenever this policy changes.

Questions or requests: scorecardgolfapp@gmail.com.

Scorecard is an invite-only beta. This policy is written in plain English and is not legal advice.