Privacy Policy

Golfr · Effective October 22, 2026

Golfr is a social golf app: you log rounds, rank courses and share with friends. This policy explains what we collect, why, who we share it with, and the choices you have. "Golfr", "we" and "us" mean Jake Shockley, doing business as Golfr, an individual based in California.

What we collect

Account. Your email address, or the name and email (which may be a private relay address) that Sign in with Apple shares with us. If you verify a school email, that address and a temporary code.
Profile. Username, name, profile photo, bio, school, header color or header photo, and the handicap you choose to enter.
Date of birth. We ask for your birthday when you create an account, only to confirm you're old enough to use Golfr. It's never shown on your profile or to anyone else, and only you can see it.
What you post. Rounds (course, date, score, optional hole-by-hole scores, putts, fairways and greens), captions, photos (course shots and scorecards), playing partners you tag, @mentions, comments, likes, course rankings, and courses you save to Want to play.
Your connections. Friend requests, friends, and people you block. Reports you file and reports about your content.
Contacts, only if you sync them. If you tap Sync contacts and allow access, Golfr reads the email addresses and phone numbers in your address book on your phone, standardizes them, and turns each one into a one-way hash (SHA-256 with a secret value) before anything is sent. We receive only those hashes, never names, notes or the raw addresses and numbers. We keep them so we can show you which contacts are on Golfr and tell you when one joins later. We never text, email or invite your contacts.
Location, only while you use the app. If you allow it, we use your device's location to show courses near you and distances. We don't track your location in the background or store a location history.
Notifications. A push token for your device and your notification settings.
Purchases. If you subscribe to Golfr Premium, whether your subscription is active and when it renews or ends. Apple handles payment; we never see your card details.
Diagnostics. Crash reports and technical details (device model, OS and app version) so we can fix problems.

We don't record your screen or sessions. Golfr has no session replay or screen recording, and our crash reporting has it switched off.

How we use it

To run Golfr: show your rounds, rankings and profile, your friends' rounds, and course pages.
To compute course scores. Course averages combine rankings from many golfers anonymously; nobody can see who gave which score unless you're friends.
To send notifications you've switched on (likes, comments, tags, mentions, friend requests, and a contact joining Golfr).
To match synced contacts. We compare your contacts' hashes with the hashes of verified email addresses of Golfr members who allow it, and show you the matches. Matching only works one way: nobody can see who has them in their contacts.
To provide Golfr Premium to subscribers.
To keep Golfr safe: review reports, enforce our rules, and prevent abuse.
To fix bugs and improve the app.

We don't sell your personal information, and we don't use it for third-party advertising.

Who can see what

Everyone signed in to Golfr can see your profile (username, name, photo, bio, school, header) and your round photos that appear on a course's page.
Course pages. When you post a round, its course photos (never your scorecard) may be shared to that course's page by default ("Add to course photos" starts on). We review each photo before it appears. You can turn it off for any round when you post it, and remove a photo from the course page later from your round.
Your friends can see your rounds, rankings, and your friends list.
Only you see your Want to play list, your stats, who you've blocked, and the contacts matched from your address book.
People who have your email address in their contacts and sync them can see your profile in their Find friends list, unless you turn off "Let people who have my contact info find me" in Settings › Privacy and safety. People you've blocked, or who block you, never see you there.
People you block, and people who block you, can't see each other's profile or content.

Service providers

We use these companies to run Golfr. They process data only on our behalf:

Supabase (database, authentication, file storage)
Apple (Sign in with Apple, push notifications, App Store purchases)
Expo (push notification delivery)
RevenueCat (subscription status)
Sentry (crash reports)
Resend (sign-in and account emails)
Google (course search via the Places API; we send search text and approximate location, not your identity)

We may also share information if the law requires it, or to protect the safety of our users.

Your choices

Edit your profile, delete rounds, comments and photos, stop sharing course photos, and unfriend or block people at any time.
Turn location, contacts and notifications on or off in your device settings.
Contacts. Turn off Sync contacts in Settings › Privacy and safety to delete every contact hash you uploaded right away, and turn off "Let people who have my contact info find me" to stop appearing in other people's contact matches.
Delete your account in Settings › Delete account. This permanently deletes your profile, rounds, photos, comments, rankings, friends, saved courses and uploaded contact hashes. Reports about content you posted may be kept for safety records. Deleting your account doesn't cancel an App Store subscription; cancel it in your Apple ID settings.
To request a copy of your data or ask a privacy question, email playgolfr@gmail.com.

Retention

We keep your information while your account exists. When you delete your account we delete it from our systems, except limited records we must keep for legal, safety or fraud-prevention reasons. Backups roll off within 30 days.

Children

Golfr isn't for children under 13, and we don't knowingly collect their information. If the birthday entered when creating an account shows someone is under 13, we don't create a profile: the account and anything stored for it are deleted right away, and that device must wait a day before trying again. If you believe a child under 13 is using Golfr, contact us and we'll delete the account.

Security

Data is encrypted in transit, and access is restricted by row-level security rules so people only see what they're allowed to. No system is perfectly secure, but we work to protect your information.

Changes

If we change this policy in a meaningful way, we'll tell you in the app before the change takes effect.

Contact

Jake Shockley, doing business as Golfr · playgolfr@gmail.com