Privacy Policy

Last updated: July 2026

1. Introduction

On The Green ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and share information when you use our website, mobile apps (iOS and Android), and scoring web app (together, the "Service").

This policy should be read with our Terms of Service and Cookie Policy.

2. Information We Collect

2.1 Account information

When you create an account, we collect:

  • Email address
  • Display name
  • Profile photo (optional)
  • Home golf club (optional)
  • Sign-in method (email/password, Google, or Apple)

2.2 Golf data

When you use the Service, we collect:

  • Round scores, statistics, and scoring format
  • Handicap index and related calculations
  • Course and tee selections
  • Round notes and photos you attach
  • Tournament participation and club-organiser data (where applicable)
  • Friends connections and social round activity you choose to share

2.3 Billing and subscription data

If you subscribe to a paid plan, we process:

  • Subscription tier and status
  • Stripe customer and subscription identifiers (web billing)
  • Apple App Store or Google Play purchase identifiers (mobile in-app purchases via RevenueCat)
  • Billing history and transaction records we store for your account

Payment card details are collected and processed directly by Stripe, Apple, or Google — we do not store your full card number.

2.4 AI features (paid tiers)

If you use AI Caddie or swing analysis, we send to Google's Gemini API:

  • Text you submit in chat (course context, questions)
  • Swing photos or scorecard images you upload for analysis

Do not submit sensitive personal information in AI prompts. AI outputs are generated automatically and may be inaccurate — they are not professional coaching or medical advice.

2.5 Device, location, and diagnostics

We automatically collect:

  • Device type, operating system, and app version
  • Precise device location when you use GPS rangefinder or course-finding features (with your permission)
  • Crash reports and diagnostic logs on mobile (Firebase Crashlytics)
  • Usage analytics on web (Vercel Analytics) and mobile (Firebase Analytics)

2.6 Communications and marketing

We may collect and store:

  • Your email marketing and billing email preferences
  • Waitlist or beta sign-up details (email, consent timestamp, and IP address at sign-up)
  • Emails we send to you and delivery status (via our email provider)

3. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the Service
  • Calculate and track handicaps and statistics
  • Enable friends, tournaments, club tools, and live round sharing
  • Process subscriptions and send billing-related messages
  • Send product updates and announcements (where you have not opted out)
  • Run AI-powered features you request
  • Monitor performance, fix errors, and understand how the Service is used
  • Comply with law and protect the security of our users

4. Third Parties We Use

We use trusted service providers to run the Service. They process data on our instructions and only for the purposes described below. We do not sell your personal data.

  • Supabase — authentication, database, and file storage (primary data hosted in Sydney, Australia where configured)
  • PowerSync — offline sync between your device and our database (mobile app)
  • Stripe — web subscriptions and billing ( privacy policy)
  • RevenueCat — mobile in-app purchase validation ( privacy policy)
  • Resend — transactional and marketing email delivery ( privacy policy)
  • Google — Gemini AI processing, Google Sign-In, and Firebase Analytics/Crashlytics on mobile ( privacy policy)
  • Apple — Sign in with Apple and App Store purchases ( privacy policy)
  • Vercel — website hosting and web analytics ( privacy policy)

See our Cookie Policy for how cookies and similar technologies are used on the website.

5. Data Sharing With Other Users

Depending on how you use the Service, other users may see:

  • Your display name, scores, and statistics in rounds you share or play together
  • Tournament leaderboards and participant lists
  • Friend connections and activity you choose to make visible

You can limit some sharing through in-app privacy and round-sharing choices.

6. Overseas Disclosure

Our primary database is hosted in Australia (Sydney). Some providers listed above are based in the United States or other countries and may process data outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure recipients handle it in line with applicable privacy law and our contractual safeguards.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and encryption at rest for data stored with our cloud providers. Access to production data is restricted and protected by row-level security policies. No method of transmission or storage is 100% secure.

8. Your Rights

Under the Australian Privacy Act 1988 (and GDPR where applicable), you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your account and associated personal data
  • Export certain data (round export is available on eligible paid plans via the member dashboard)
  • Opt out of marketing emails (see below)
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

Account deletion: You can delete your account from Profile & settings in the member dashboard (web) or Settings in the mobile app. Deletion anonymises your profile and removes your login; some round or tournament records may be retained in anonymised form where needed for group history or legal obligations.

Email preferences: Signed-in members can manage marketing and billing email preferences at Email preferences. Security emails (e.g. password reset) are always sent when needed.

9. Data Retention

We retain your data while your account is active. After you delete your account, we anonymise or delete personal data within a reasonable period, except where we must retain certain records for legal, billing, or fraud-prevention purposes.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page and update the "Last updated" date. For significant changes, we may also notify you by email where appropriate.

12. Contact Us

For privacy questions or requests, contact us at:
Email: privacy@onthegreen.app