Privacy Policy

Information we collect

• Account information: your email address and, optionally, your name, handicap, and goal handicap. Authentication and accounts are managed through our account provider, Supabase.
• Golf data you enter: rounds, scores, shot data, putting data, clubs, course selections, goals, and any notes you add.
• Payment information: Apple handles App Store subscriptions purchased in the iOS app; Stripe handles subscriptions purchased through our website. We receive subscription status and transaction or customer references needed to provide access. We do not receive your full payment card details from either provider.
• Usage data: basic product analytics about how the app is used (e.g. which features are opened), used to improve the product. See "Analytics & cookies" below.

What we never do

We do not sell your data. Your golf data is used to compute your own numbers and for nothing else.

How we use your information

• To provide the features you request.
• To compute your strokes gained and benchmarks.
• To manage your account, subscription, and billing.
• To send transactional emails (e.g. a welcome message and account notices).
• To understand aggregate usage and improve the product.

Service providers

We share data only with the providers needed to run PinFlag:

• Supabase: accounts, authentication, database hosting, and account email (sign-in, confirmation, password reset).
• Vercel: application and file hosting.
• Stripe: subscription payments.
• Apple: App Store subscription payments and distribution of the iOS app; Apple Maps, which receives your device's location to draw the hole you are playing; and Apple Weather, which receives the course location when a wind reading is shown.

Each one receives only the data described for it, and none of them is permitted to use your data for their own purposes. We do not use an advertising identifier or send your account, location, or golf records to advertising networks, and no outside provider analyses your golf data for us. Apple may report anonymous conversion information. The analytics we run are described in full in "Analytics & cookies" below.

Coaching, families & shared access

PinFlag supports coaches, players, parents/guardians, and facilities. Access is scoped by relationship and by consent:

• Coaches: when a player joins a coach's roster using the coach's code, the player consents to share their golf data (strokes gained, rounds, and stats) with that coach. The player can leave the roster at any time to revoke this access. A coach may also enter a player's name and email to invite them; until that player signs up and accepts, the entry is used only to connect them to the coach, and the player can decline the connection or leave the roster at any time.
• Parents / guardians: a guardian who links to a player (using the player's code) gets read-only access to that player's stats and strokes gained. Linking is the guardian's consent to view; either side can remove the link.
• Facilities / programs: members who join a facility or college program consent to share their analytics with that organization's administrators.

Children & junior golfers

Junior golfers are a core audience. We ask that minors use PinFlag with the involvement of a parent, guardian, or coach. We collect only the golf and profile data needed to provide the service, and a guardian can link to a minor's account for read-only oversight. We do not sell minors' data.

Parents and guardians may request access to, or deletion of, a child's data via the contact below. We will apply the children's privacy requirements that apply to your region (such as COPPA and GDPR-K) before processing certain requests.

Aggregate benchmarks

We may use anonymized, aggregated data to build performance benchmarks (for example, average strokes gained for a handicap band). These benchmarks never identify you and are never tied to your individual account.

Analytics & cookies

The iOS app records membership-flow events, including screens viewed, plan selection, purchase and restore outcomes, permission-prompt results, and the start and completion of your first round. These events are linked to an install identifier and, when signed in, your account, and include the membership-flow variant shown. We use them to understand and improve the product. They are processed through our first-party service and hosting providers, without an advertising identifier.

The app also updates anonymous install, trial, and subscription conversion values through Apple's SKAdNetwork. When applicable, Apple may report this conversion information to the advertising network that referred an install. These updates contain no PinFlag account identifier, location, or golf records.

Apple's on-device diagnostics (MetricKit) may deliver technical performance and failure reports, which we use to diagnose problems. Reports sent to our service contain technical summaries, not your location or shot records.

Our website uses only the essential cookies needed to keep you signed in; it loads Vercel Web Analytics and Vercel Speed Insights on every page (page views and page-speed measurements, without cookies or an advertising identifier), and its cookie banner controls only our own optional product analytics, which is off unless configured.

Data retention & your rights

We keep your data for as long as your account is active. You can edit your profile and golf data at any time. You can delete your account, and the data associated with it, from inside the app and from your account page. Deleting removes your uploaded files and deletes your rounds, shots and profile. App Store subscriptions must be cancelled separately through Apple; deleting your PinFlag account does not cancel those subscriptions. You can also request an export of your golf data (rounds and shots as a CSV) at any time by emailing the address below. If you would rather we delete your account for you, or you can no longer sign in, email the same address. Downgrading or cancelling a subscription preserves your data.

Security

Data is transmitted over encrypted connections and stored with access controls so that your data is scoped to your account. No system is perfectly secure, but we take reasonable measures to protect your information.

Contact

Questions about this policy? Email support@pinflag.io. See also our Terms of Service.