Privacy Policy

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Information Sharing and Disclosure
4. Data Storage and Security
5. Location Data
6. Your Rights and Choices
7. Children's Privacy
8. Third-Party Services
9. Payment Information
10. Data Retention
11. International Users
12. Changes to This Privacy Policy
13. Contact Us

1. Information We Collect

1.1 Information You Provide

• Account Information: First name, last name, and email address
• Golf Data: Scores, shot locations, club selections, course data, and game statistics
• User Content: Team game participation data, bag configurations, and user interactions
• Communications: Support requests and feedback

1.2 Information Collected Automatically

• Location Data: Precise GPS location for distance measurements and shot tracking
• Device Information: Device type, OS, identifiers, and network information
• Usage Data: Features used, time in app, and performance data
• Log Data: IP address, browser type, access times

1.3 Information from Third Parties

• Authentication: AWS Cognito security data
• Payment: Transaction confirmations from Stripe (no card storage)
• Course Data: Golf course information from providers

2. How We Use Your Information

2.1 To Provide Services

• Account management and authentication
• GPS distance measurements and shot tracking
• Course maps and hole layouts
• Statistics and performance analytics
• Team play and multiplayer features
• Cross-device synchronization

2.2 To Improve Experience

• Analyze usage patterns
• Develop new features
• Personalized recommendations
• Optimize performance

2.3 Communications

• Service notifications
• Support responses
• Subscription reminders
• Update notifications
• Promotional communications (with consent)

2.4 Business Operations

• Payment processing
• Fraud prevention
• Legal compliance
• Terms of Service enforcement

3. Information Sharing and Disclosure

3.1 With Your Consent

• Team Play: Name, scores, and game data shared with team members
• Shared Rounds: Round data viewable by anyone with share link (Premium)

3.2 Service Providers

• AWS: Cloud hosting, storage, and authentication
• Stripe: Payment processing
• Mapbox: Maps and geolocation
• Analytics: App analytics and monitoring

3.3 Legal Requirements

• Legal processes and court orders
• Government authority requests
• Protection of rights and safety
• Fraud prevention

3.4 Business Transfers

Your information may be transferred in mergers, acquisitions, or asset sales. We will notify you of ownership changes.

3.5 Aggregated Data

We may share anonymized, aggregated data that cannot identify you.

4. Data Storage and Security

4.1 Security Measures

• HTTPS/TLS encryption in transit
• Encryption at rest in AWS databases
• AWS Cognito secure authentication
• Regular security audits
• Access controls

4.2 Storage Location

Data stored on AWS servers (US-East-1 region). AWS maintains SOC 2, ISO 27001 certifications.

4.3 Security Disclaimer

No internet transmission is 100% secure. We will notify you of breaches as required by law.

5. Location Data

5.1 Usage

• Distance to green and course features
• Shot tracking and distances
• Position on course maps
• Round data recording

5.2 Collection

Location collected only when:

• Actively using app during a round
• Location permissions granted
• App is open

We do not collect location when app is closed, except during active round tracking.

5.3 Control

• iOS: Settings > Privacy & Security > Location Services > Golfi
• Android: Settings > Apps > Golfi > Permissions > Location

5.4 Retention

Location data stored with rounds. Delete rounds or account to remove.

6. Your Rights and Choices

6.1 Access and Update

Access and update information in app settings.

6.2 Delete Account

• Use "Delete Account" in settings
• Email privacy@golfi.app

Deletion completed within 30 days.

6.3 Export Data

Request portable data copy at privacy@golfi.app. Provided within 30 days.

6.4 Marketing

Opt out via:

• Unsubscribe links in emails
• App notification settings
• Email request

6.5 Regional Rights

• California (CCPA): Know, delete, opt-out rights
• EU (GDPR): Access, rectification, erasure, portability rights

7. Children's Privacy

Golfi is not for children under 13. We do not knowingly collect data from children. Contact privacy@golfi.app if concerned.

8. Third-Party Services

8.1 Mapbox

Map rendering and geolocation. See Mapbox Privacy Policy.

8.2 AWS Cognito

Authentication services. See AWS Privacy Policy.

8.3 Stripe

Payment processing. See Stripe Privacy Policy.

9. Payment Information

• Processed by Stripe
• No complete card storage by Golfi
• We receive only transaction IDs
• Subscription status stored
• Apple IAP processed by Apple

10. Data Retention

• Account: While active
• Rounds: Until deleted
• Payments: 7 years (legal requirement)
• Logs: 90 days
• Deleted accounts: 30 days

11. International Users

Data processed in United States. By using Golfi, you consent to US data transfer.

11.1 EU Users

Legal grounds for processing:

• Contractual necessity
• Legitimate interests
• Consent
• Legal obligations

12. Changes to Privacy Policy

• Updates reflected in "Last Updated" date
• Material changes notified via email/app
• Continued use = acceptance

13. Contact Us

Response within 30 days.