Your privacy at the club.

What information we use

• Accounts: your email address, account identifier, password authentication records, verification status, display name and handicap index. Your password is handled by our authentication provider; the app does not store it in readable form.
• Groups and golf: memberships and roles, invitation details, plans, date and destination votes, attendance, match-ups, scores, handicap information, league results and golf-trip records.
• Content you share: messages, comments, photos and their associated upload information. Photos may contain embedded information from your device; avoid uploading anything you do not want your group to receive.
• Information supplied by others: a group admin may enter your email to invite you. An organiser may add a guest’s name, handicap and scores without the guest having an account. Other members may include you in their messages or photos. Please tell guests about this notice before adding them.
• Support and preferences: feedback, deletion requests, replies, notification preferences and privacy choices. In-app feedback includes your account identity and the app section where it was sent; it does not automatically attach scorecards or screenshots.
• Technical information: hosting and authentication providers process connection and security information, such as IP addresses, request times and browser information. If you allow optional usage statistics, we store your latest visit time against your account to count active members.

Account information is needed to sign in and operate private groups. Your display name and handicap are needed for the app’s playing features. Photos, social posts and optional statistics are not required to use the core service.

Why we use it

• Providing the service — contract: creating and securing your account, managing your groups and plans, recording scores, displaying results and delivering requested account communications.
• Running and protecting the service — legitimate interests: preventing misuse, troubleshooting, dealing with support, managing shared competition records and understanding aggregate counts of accounts, groups and rounds. We consider the effect on people’s privacy and limit information to what is needed. Invitations and guest records also support the legitimate interests of members organising their golf.
• Optional features — consent: optional visit statistics and optional group-update emails. You can withdraw these choices. Password resets, verification and essential security emails are separate service communications.
• Legal obligations: responding to applicable legal requirements and data-protection requests.

We do not sell your personal information or currently share it for cross-context behavioural advertising. We do not use your data to make automated decisions that have legal or similarly significant effects. Golf scores and league standings are calculated from the information entered into the app.

Who can see your information

Group members can see the group’s plans, scores, relevant player profiles and shared content. Group admins have additional management controls. A shared invitation can allow another person to join, so only send it to intended members.

The operator and authorised service providers may access information where needed to run, secure or support the service. Feedback and deletion requests are available to you and the founder, not your group. The founder dashboard includes service-wide counts, including optional activity totals.

Private access cannot prevent a member from copying a message or downloading a photo they can see. Removing a member or deleting content does not remove copies they have already made.

Our service providers

• Supabase: account authentication, database, private photo storage, live updates and server functions. The app’s database project is configured in Frankfurt, Germany. See Supabase privacy information and its data processing terms.
• OpenAI ChatGPT Sites and its infrastructure providers, including Cloudflare: website hosting, delivery and security. See the Sites data processing terms and subprocessor list. The app does not currently offer an AI chat feature or send golf content to an AI model as an app feature.
• Resend: account emails and opted-in group-update emails. It receives recipient addresses and the message being sent, which can include a group update. See Resend’s processing and retention information.
• Microsoft 365, supplied through GoDaddy: correspondence sent to our hello, support, suggestions and privacy addresses. See Microsoft’s privacy statement and GoDaddy’s privacy policy.
• GolfCourseAPI: course search text and selected course identifiers are sent through our server to retrieve course data. Our integration does not include your email, account identifier, group messages or scorecards in those requests. Do not enter personal details in course searches.

Providers and their support or infrastructure suppliers may process information outside the UK, including in the EEA and United States. A European database location does not mean every part of the service stays in Europe. Provider data-processing terms describe applicable safeguards, including standard contractual clauses and UK addenda where relevant. Contact us for information about the safeguards applicable to your data.

Links you choose to open, including WhatsApp sharing and third-party websites, are governed by those services’ own privacy arrangements.

How long information is kept

• Account and shared golf records: retained while needed to provide your account and the group’s ongoing history. There is no automatic deletion just because you stop using the app. You can request deletion at any time. Shared records are reviewed individually when a person or group asks for removal.
• Visit statistics: only the latest visit timestamp is held. A daily cleanup removes it after 90 days without a visit or once there is no valid opt-in. Switching statistics off removes your recorded timestamp immediately when the choice is saved.
• In-app notifications: removed by daily cleanup once older than 90 days.
• Invitations: invitations normally expire after seven days; their stored records are removed by daily cleanup 30 days after expiry.
• In-app feedback: open requests remain while being handled. Closed requests and replies are removed by daily cleanup 12 months after their last update.
• Usage-statistics preferences: choices are valid for six months. The current choice record is retained for up to 12 months after expiry, then removed by daily cleanup.
• Email correspondence: handled manually. Our retention policy is to review and remove resolved support correspondence after 12 months unless still needed for an outstanding request, dispute or legal obligation.
• Provider logs and backups: separate service-provider retention cycles apply. Deletion from the live app is not a promise of immediate erasure from every backup or delivery log. Resend publishes its email/log retention; other provider periods depend on the service and account configuration. Contact us for the relevant details for a request.

Daily cleanup means a record may remain until the next run after its stated period. We may retain limited information where necessary to resolve a dispute or meet a legal obligation, and will explain this when relevant to a deletion request.

Cookies, device storage and privacy choices

The app uses browser storage and a service worker for sign-in, pending invitations, selected groups, saved scorecards, unsent scores and offline app files. These support the features you request. Local scorecard data may include members’ names and handicaps.

Session storage normally ends with the browser session. Sign-in and offline data can persist until you sign out or clear site data. Sign-out clears this device’s cached round data through the app; clearing browser site data also removes stored app files. Sync pending scores before clearing storage, or unsent scores may be lost.

Optional visit statistics are off by default. Signed-in users can choose “Keep optional statistics off” or allow them, and change the choice using Account → Privacy choices or the footer. This choice applies to your account. Declining does not restrict golf features. Essential security records and counts derived from operational records are separate from optional visit statistics.

Advertising choices are separate from optional visit statistics. See Advertising privacy choices.

To stop optional group-update emails, open Notifications → Preferences and switch off email updates. This does not stop necessary account or security messages.

Advertising privacy choices

Before advertising starts

We will activate and test Google’s consent system before enabling adverts. We intend to use one labelled placement on the signed-in clubhouse home page. Scoring, chat and sign-in pages will not contain ad placements. Your golf features will remain available if you decline optional advertising technologies.

When enabled, Google and the advertising partners listed in its consent message may receive technical information such as your IP address, browser and device details, page address, cookie or device identifiers, and information about ad views and interactions. These can be used to deliver and measure ads, prevent fraud, and, with the required permission, personalise advertising. We do not plan to send account emails, names, handicaps, scorecards, photos or group messages as advertising targeting data. Private-page handling must be checked before activation.

In the UK, EEA and Switzerland, the Google message will offer consent, refusal and settings. This page will provide access to change or withdraw advertising consent. Relevant US visitors will also have a “Do not sell or share my personal information” option. Advertising disclosures and controls will be updated to match the actual integration before it goes live. The current usage-statistics choice does not grant advertising consent.

Google’s storage and retention depend on the technologies and choices in use; the six-month account statistics preference above is not an advertising-cookie retention period. See how Google uses information from partner sites, Google’s cookie information and Google’s privacy policy. No advertising data is being sent by this app’s prepared integration today.

For privacy questions or requests, contact privacy@thelastputtclub.com.

Your rights and deletion requests

Depending on your circumstances and applicable law, you may ask for access to your information, correction, erasure, restriction of processing, a portable copy, or object to processing based on legitimate interests. You can withdraw consent without affecting processing that was lawful before withdrawal.

Email privacy@thelastputtclub.com. Signed-in members can also use Account → Request account deletion. Guests and people who cannot sign in can use email. We may need proportionate information to verify your identity; do not send a password.

Deletion requests are reviewed manually. Submitting one does not instantly delete your account. We review account details, uploaded content and shared records, including group ownership. Where shared results must be retained for a justified reason, we consider removing identifying details and explain any information retained. Ownership may need to be transferred so other members do not lose their group.

We normally respond to rights requests within one month, subject to applicable identity-checking and extension rules. If an extension or exception applies, we explain it. You can complain to the UK Information Commissioner’s Office or the relevant regulator where you live.

Changes to this notice

We update this page when the service’s data use changes and will draw attention to material changes in the app. The effective date is shown at the top.