Privacy Policy

Fairway ("we", "us") helps you track your golf rounds and understand your game. This policy explains what we collect and why. We keep it minimal and never sell your data.

What we collect

• Account: your email address and name.
• Date of birth: asked once at sign-up to verify you are 16 or older.
• Profile: handicap index, unit preference, and home course.
• Rounds: the scores, putts, and courses you record.
• Precise location (GPS): while you play a hole — to show live distances to the green — and when you search for courses near you. Location is used only while the app is open, never tracked in the background, and not stored with your account.
• Caddie photos (camera, iOS app): if you use the photo caddie, the photo you take of your ball's lie is sent for one-time AI analysis to produce your shot advice. We never store these photos — not on your device, not on our servers. Frame your ball and the course, not people.
• Notifications: a device token if you turn on push notifications, so we can deliver them. The iOS app's practice reminders are scheduled on your device and send us nothing.
• Subscriptions: if you go Pro, our payment providers process your purchase and tell us your subscription status. We never see your card details.
• Product analytics (web app only, optional): only if you opt in on the web app, we record which features you use — together with your account email and handicap — to improve the app. It stays off until you allow it, and you can turn it off anytime in your profile. The iOS app contains no analytics or tracking at all.

How we use it

To provide the app: store your rounds, compute your stats and insights, find nearby courses, and keep you signed in.

Where the law (such as the GDPR, UK GDPR or Swiss FADP) requires a legal basis, we rely on: performing our contract with you to run the app and your account; your consent for optional product analytics and for device location, which you can withdraw at any time; and our legitimate interest in keeping Fairway secure and working.

Service providers

We share the minimum necessary with: Supabase (authentication & database), Vercel (hosting), PostHog (product analytics, only if you opt in), Apple (purchases & push notification delivery), GolfCourseAPI (course data), Open-Meteo (weather), OpenStreetMap (place names & course maps), and Anthropic (AI analysis of caddie photos and the distances for your shot advice — under their API terms, inputs are not used to train models). When you use GPS or the map, your coordinates are sent to the location, weather and map services to return distances and nearby courses. In the iOS app, your GPS position is processed on your device and raw coordinates are not sent to our servers.

Some providers (for example PostHog) process data on servers in the United States. Where we transfer data internationally, we rely on those providers' standard contractual clauses and equivalent safeguards.

Your privacy choices

Product analytics is opt-in: it stays off until you allow it, and you can turn it on or off anytime under Profile → Product analytics.

Course Insights is opt-in too: it stays off until you turn on "Share my rounds" under Profile. When on, your scores are included in anonymous, aggregated course statistics (such as the course record, scoring average and per-hole difficulty). Only these aggregates are ever shown to other golfers — never your individual rounds, your name, or anything identifying you — and you can turn it off anytime.

If you add friends, they see your name and handicap on your shared leaderboard; removing a friend (or them) ends that immediately.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We treat precise location as sensitive information and use it only to provide the features you ask for — live distances, weather and nearby courses — never to build advertising profiles.

Data retention & your rights

Most of your data — your profile, rounds and scores, friends and matches — is kept until you delete it. You can delete your account and all of its data at any time from Profile → Delete account. A few items expire automatically sooner: push-notification device tokens are removed after 180 days of inactivity, and subscription/billing event records after 90 days. Precise location is never stored, caddie photos are analysed once and never stored by us, and product analytics (only if you opt in) follow our analytics provider's retention period. Deleted data may persist in encrypted backups for a short period before those backups expire.

Subject to applicable law, you have the right to access, correct, delete, export (data portability), and object to or restrict our use of your personal data, and to withdraw consent for analytics or location at any time. To exercise any of these, or to ask a question, email us at the address below; we aim to respond within 30 days. Your rounds are protected by row-level security so only you can read them. You may also complain to your local data-protection authority.

Security

Data is encrypted in transit. Access is scoped per user via row-level security. No method is 100% secure, but we work to protect your data.

Age

Fairway is for golfers aged 16 and over. We don't knowingly collect data from anyone under 16, and we ask for your date of birth when you sign up. If you believe someone under 16 has given us data, contact us and we'll delete it.

Changes

We may update this policy; material changes will be reflected by the date above.

Contact

Questions or data requests: liviomaro@gmail.com