Privacy Policy

My Golf Passport is operated by Thomas Bloch, based in Denmark. Our database is hosted in the EU (Ireland), via Supabase.

Account information: email address, full name, home club, home country, handicap.

Profile photo: if you upload one, stored as an image file linked to your account.

Activity data: every round you log — course, date, your rating, and any notes — plus badges earned and your friend connections. Because rounds are tied to courses and dates, this data can reveal where you were and when, over time.

Location (temporary):if you use the “Nearby courses” feature, we ask your device for your current location to find courses close to you. This is used only in the moment to run that search — we do not store your device location.

Communications: messages you send to other users through the app, and any feedback you submit through in-app surveys.

Referral data:if you invite someone, we store the referral relationship and the invitee's email address so we can send the invite and credit the referral.

Marketing preference:whether you've opted in to receive news and offers from us, and when.

We do not collect payment card details, government ID numbers, or precise device-level advertising identifiers.

• To provide the core service: your profile, your logged rounds, badges, and social features.
• To let you connect and communicate with friends on the platform.
• To send you service emails (confirmations, password resets, referral invites).
• To send you news and offers, onlyif you've actively opted in during onboarding. You can withdraw this consent at any time in your profile settings.
• To improve the app based on survey feedback you choose to give.
• To keep the service secure and prevent abuse.

We don't sell your data. We share it only with the service providers who help us run the app, and only to the extent needed for them to do their job:

• Supabase — our database, authentication, and file storage provider (EU region).
• Resend — sends transactional and opt-in marketing emails on our behalf.
• Mapbox — renders map tiles used in the app (e.g., course locations, invite cards). Loading a map tile can share your IP address with Mapbox.
• Vercel — hosts our website.
• Apple / Expo— delivers push notifications to your device; no additional personal data is shared beyond what's needed to route a notification to your device.

Other users: your profile (name, home club, handicap if you choose to show it, course count) is visible to other users depending on your privacy settings. Messages you send are visible to the recipient.

Booking links:we may include links to third-party golf course booking or tee-time services. If you follow one of these links and book, that service's own privacy policy applies to any information you give them — we do not pass your account data to them automatically.

We may disclose data if required by law, or to protect our rights, users, or the public.

Our database is hosted in the EU. Some of our service providers (e.g., Mapbox, Vercel) may process data outside the EU/EEA as part of their infrastructure. Where that happens, we rely on their standard contractual safeguards for cross-border transfer.

We keep your account and activity data for as long as your account is active. If you delete your account, we delete your personal data, except where we're required to retain limited records for legal or security purposes.

If you're in the EU/EEA or UK, under GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent (e.g., marketing) at any time, without affecting past processing.

To exercise any of these rights, email hello@mygolfpassport.golf. You can delete your own rounds, edit your profile, and manage your marketing preference directly in the app; for full account deletion, contact us.

You also have the right to lodge a complaint with your local data protection authority.

My Golf Passport is not directed at children under 16, and we don't knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we'll remove it.

We use industry-standard measures (encrypted connections, access controls, row-level security on our database) to protect your data. No system is 100% secure, and we can't guarantee absolute security.

We may update this policy as the app evolves — for example, when we add new features. We'll update the “last updated” date above when we do. Significant changes will be communicated in-app.

Questions, requests, or concerns about this policy or your data: hello@mygolfpassport.golf.