Golf One Privacy Policy

1. Scope and responsibility

In this policy, “Golf One,” “we,” “us,” and “our” refer to the Golf One services that collect or process the information described below. A golf course, tee-time marketplace, payment provider, mapping provider, or streaming service may separately control information it receives under its own privacy policy.

This policy covers golfers, website visitors, CartPass and App Clip users, and people who submit business, support, or early-access requests. It does not replace a separate written agreement with a golf course or business customer.

2. Information we process

Account and profile information

When you create or use a Golf One account, we process your email address, name, a Golf One user identifier, account-access status, and authentication or recovery information. Supabase provides the current authentication, database, and realtime infrastructure and processes credentials and session tokens on our behalf.

A Social profile may include a handle, display name, optional first and last name, avatar URL, bio, home course, discoverability setting, and default round visibility. Other signed-in users may see profile information when your settings, friendship, block status, or shared round relationship permit it.

Friends, invitations, rounds, and scorecards

Social features process friend requests and responses, blocks, round hosts and members, invitation status and expiring invite links, write-in guest names, course and tee details, scheduled times, roster status, and round visibility. Shared-round members can see the profile and scorecard information that the app makes available within that round.

Signed-in scorecards can sync to Golf One and include the course, selected tee, round length, start and completion times, and hole-level par, yardage, score, fairway result, green-in-regulation result, and putts. We use those records for round history, group scoring, and factual golf-performance summaries. We do not represent these statistics as an official GHIN or World Handicap System record.

Location, course search, maps, and weather

With your permission, the iOS app uses precise location while you are using the app to find nearby courses and tee times, show your location on a map, calculate GPS yardages, and support on-course and shot features. Golf One does not request continuous background location access. You can search with a manually entered place instead of current location.

Nearby-course and tee-time requests can send and retain a search query or precise coordinates together with filters such as radius, date, time, and player count. Our search service keeps request and response diagnostics so we can deliver results and troubleshoot provider coverage. Current search records are not intentionally keyed to a Golf One user ID, although ordinary network infrastructure may process an IP address and request metadata.

Apple MapKit supports native maps and user-location display. Apple WeatherKit receives the selected course coordinates needed to return course wind and attribution. Diamond GPS can request course imagery and map tiles from Esri and the imagery sources named in the map's attribution. Those providers receive the network and map-request information needed to return their services.

Camera, microphone, photos, and Shot Tracer

If you grant permission, Golf One can use the camera to scan Golf One codes and record golf swings, the microphone to include audio with a recording, and the Photos library to import or save videos. Shot Tracer recording, tracing, editing, and local transfer normally occur on your device or over a local connection and do not by themselves upload the recording to Golf One.

Live streaming is different. If you enable it and configure YouTube, Twitch, Instagram, or another RTMP destination, the app sends the selected camera and microphone stream from your device to that destination. The destination and its privacy terms control what happens to the stream after receipt. The current app keeps RTMP destination settings and stream keys on the device; you are responsible for protecting and revoking those credentials.

Golf One does not automatically publish local recordings. A third-party stream occurs only after you configure and start it, and Golf One's servers are not the destination unless you deliberately configure a Golf One-controlled endpoint.

CartPass, App Clip, and payment information

CartPass and the Golf One App Clip process the course, cart, device assignment, QR or unlock token, cart-session status, and transaction details needed to quote, reserve, pay for, and unlock a cart. Transaction records can include billing email, amount, currency, payment status, a Stripe payment-intent identifier, course and cart identifiers, timestamps, and limited payment metadata.

Apple Pay and Stripe process payment credentials. Golf One receives the information needed to verify and record the payment and queue the cart unlock, but does not receive or store your full card number. A participating course or its connected Stripe account may also receive transaction information needed to fulfill the purchase.

Website, business, and support information

Website forms may collect the information you submit, such as name, work email, optional phone number, role, course and location, fleet size, monthly rounds, product interest, timeline, market, favorite course, and a message. We use this information to respond to demo, support, and early-access requests. Support requests may be stored in Golf One's access-controlled support queue so they are not lost if email delivery is unavailable. When configured, our email-delivery provider also processes form contents to notify Golf One.

Our websites, APIs, and hosting providers also process standard technical information needed to serve and secure a request, such as IP address, browser or app information, requested URL, timestamp, response status, and error details. We do not use the Apple advertising identifier or a mobile advertising SDK in the current Golf One iOS app.

3. How we use information

• Create, authenticate, recover, secure, and administer Golf One accounts.
• Enforce app-access permissions and prevent unauthorized or abusive use.
• Operate Social profiles, friendships, blocks, round invitations, and shared scoring.
• Save round history and calculate scorecard and golf-performance summaries.
• Return course, tee-time, GPS, map, imagery, wind, and AI Caddy features.
• Process CartPass and App Clip payments, reservations, and physical cart unlocks.
• Respond to support, demo, partnership, and early-access requests.
• Diagnose failures, monitor reliability, secure the services, and prevent fraud.
• Comply with legal obligations and establish, exercise, or defend legal claims.

4. When information is shared

We share information only as needed for the uses described above:

• Supabase processes authentication, account data, social data, scorecards, and realtime updates.
• Apple processes MapKit, WeatherKit, Apple Pay, and operating-system services such as permission prompts and the Share Sheet.
• Stripe and participating courses process payment and transaction data for CartPass, App Clip, and related purchases.
• Map and imagery providers, including Esri and sources identified in map attribution, receive map or tile requests.
• Course, tee-time, and booking providers may receive search or transaction details needed to return inventory or complete an action you request. If you leave Golf One for a provider page, that provider's policy applies.
• Your chosen streaming provider receives camera and microphone content only when you configure and start a third-party RTMP stream.
• Hosting, storage, email-delivery, and security providers process the limited information needed to run and protect the services.
• Other golfers receive profile, invitation, roster, or scorecard information according to Social settings and shared-round membership.

We may also disclose information when required by law, to protect rights or safety, or in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable legal requirements.

We do not sell personal information, and we do not use Golf One mobile information to track you across apps or websites owned by other companies for targeted advertising.

5. Contacts and round invitations

Golf One does not request Contacts permission and does not read, copy, or upload your phone address book. When you share a round invitation, Golf One supplies invitation text and an expiring link to Apple's Share Sheet. You choose the receiving app and recipient in the Apple interface. Messages, Mail, or another app you select handles the recipient information under its own privacy policy.

6. Your controls and choices

• Change location, camera, microphone, and Photos permissions in iOS Settings. Some features will not work without the related permission.
• Use a manually entered city or course instead of current location for discovery where the app offers that option.
• Control profile discoverability and round visibility, respond to or revoke invitations, remove friends, and block users through Social controls.
• Choose whether to save, share, transfer, or live-stream a Shot Tracer recording. Stop a stream in the app and revoke its stream key with the destination provider when needed.
• Update supported account details, sign out, or use the in-app Delete account control while signed in.

7. Retention and account deletion

We retain information for as long as reasonably necessary to provide the related feature, keep the services secure and reliable, resolve disputes, comply with law, and maintain required business and transaction records. The period therefore depends on the data and why it is processed.

• Account-owned profiles, friendships, shared-round membership, and synced scorecards are generally retained while the account exists or until the relevant content is removed.
• Invite links expire, but invitation status and security records may remain as needed to operate and protect Social features.
• Course-search and provider diagnostics remain while needed to deliver, troubleshoot, and secure discovery services.
• Cart sessions, payment records, and related transaction information may be retained for accounting, tax, chargeback, fraud-prevention, course-fulfillment, and legal purposes.
• Local recordings remain on your device or Photos library until you delete them. A third-party streaming or sharing recipient controls its own copy.

The in-app Delete account control hard-deletes the authenticated Golf One identity and account-owned data configured to be removed with that identity. Some business, payment, security, or legal records may be retained with account attribution removed, or kept when retention is required or permitted by law. Backups and logs may take additional time to age out. Deleting Golf One data does not delete copies held by a payment, booking, messaging, or streaming provider.

If you cannot use the in-app control, or want to request access, correction, or deletion of CartPass or website information that is not attached to an account, contact us using the address below. We may need to verify your identity and the relevant transaction.

8. Security

We use safeguards designed to protect information, including encrypted network transport, authenticated access, server-side authorization, and database row-level access controls for account and Social data. No storage or transmission system is perfectly secure. Keep your Golf One password, device passcode, payment account, invite links, and streaming keys private, and notify us if you believe your account has been compromised.

9. International processing

Golf One and its service providers may process information in the United States and other countries where they operate. Data-protection laws may differ from those in your location. Where required, we use appropriate safeguards for cross-border processing.

10. Children

Golf One services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, contact us so we can review and, where appropriate, delete it.

11. Changes to this policy

We may update this policy when products, providers, or legal requirements change. We will post the revised policy with a new “Last updated” date and provide additional notice when required.

12. Contact and privacy requests

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal information and to appeal or opt out of certain uses. To submit a privacy request or ask a question, email privacy@golfone.ai.