Privacy Policy

1. Data controller

The data controller is GuidiSoft di Marco Guidi.

2. Data collected

While using the app, we may collect or process the following categories of data, depending on the features you choose to use:

• Account and profile data: public handle, email address used for login, nickname, first and last name when provided, avatar, handicap, gender, country, privacy preferences, user identifiers, Apple sign-in provider, and data related to any anonymous account.
• Technical and session data: device information, IP address, operating system, technical identifiers, session tokens, essential logs, Parse sync data, local cache required for the app to work, and, when enabled, technical data for push notifications and diagnostics.
• Game data: matches, courses, clubs, course layouts, players, flights, teams, tees, playing handicap, holes, par, gross and net score, putts, penalties, bunkers, lost balls, contests, statistics, notes, and sharing settings.
• Location, GPS, AR, and distance data: drive start and end coordinates when recorded, drive distance, distance to the pin, AR measurements, and technical data needed to calculate or save those distances, only when you enable or use the relevant features.
• Social and communication data: friendships, friend requests, invites, messages, selected recipients, read status or technical conversation handling, and visibility preferences.
• Golf course data: courses created or edited, locations, holes, tees, par, coordinates, and information submitted for review, moderation, or publication in the shared database.
• Scorecard data: scorecard images uploaded by the user, compressed base64 image sent to the backend for analysis, file name, MIME type, country, and preferred number of holes.
• AI Caddie and player profile data: context data about matches, courses, scores, history, goals, and feedback; the AI profile with handicap, level, goals, dominant side, and club distances may be stored locally on the device through app preferences.
• Subscription and purchase data: Free or PRO plan status, entitlement, technical purchase identifiers, renewal status, and information received from RevenueCat and the Apple or Google stores to verify purchases, renewals, cancellations, refunds, and restores. We do not directly process complete payment-card details.
• Data entered manually by the user:
  • Match scores, hole details, and statistics.
  • Match name, participants, teams, notes, and sharing settings.
  • Golf courses created or edited.

3. Purposes of processing

Your data is processed for the following purposes:

• Enable registration, login, email or Apple authentication, anonymous access where available, Parse session handling, multi-device synchronization, and local cache.
• Provide and improve app features, including scorecards, statistics, match management, players, handicaps, courses, and history.
• Allow you to save, edit, retrieve, and synchronize matches, scores, settings, and privacy preferences.
• Provide social features: friends, requests, invites, messages, LiveQuery, or real-time updates when available.
• Allow match sharing with the public, all friends, or selected friends, according to the user's settings and participants' preferences.
• Provide AI Caddie, pre-round coach, hole advice, post-round analysis, and feedback features using match, course, score, history, goal, and AI profile payloads when configured.
• Analyze scorecards through backend and technical AI services by processing a compressed/base64 image, file name, MIME type, country, and preferred number of holes to extract editable user data.
• Allow the creation, review, moderation, and sharing of new golf courses.
• Manage the Free plan and PRO subscription, in-app purchases, entitlement verification, renewals, purchase restores, and availability of premium features.
• Prevent abuse, fraud, spam, or misuse, protect accounts, ensure shared data quality, and provide support.
• Handle requests, reports, operational communications, or relevant service updates.

4. Golf courses submitted by users

If you submit a new golf course, you accept that non-personal data entered, such as course name, location, and hole-by-hole par, may be:

• Shared with other app users.
• Subject to review and validation by reviewers or moderators.
• Published in the global database accessible to all users.

No personal data is published automatically.

5. Legal basis for processing

Processing is based on:

• Performance of the contract and services requested by the user, such as accounts, matches, synchronization, messages, sharing, premium features, and support.
• User consent when required for device permissions or optional features such as location, camera, photo library, notifications, image uploads, or other revocable integrations.
• The controller's legitimate interest in maintaining security, preventing abuse, improving the app, fixing errors, moderating content, and protecting shared data quality.
• Legal, tax, or accounting obligations, where applicable to payments, purchases, administrative records, or requests from competent authorities.

6. Match sharing and name visibility

Fairway Friends allows users to share a match publicly, with all friends, or with selected friends. When a match is shared, data such as match name, club, course, match status, scores, and flight or team composition may be shown.

The sharing record may include technical and functional data such as match identifier, sharing user, club, course, match name, sharing type, participant visibility, and any selected recipients.

Participant name visibility follows a minimization and privacy-by-default approach:

• Each participant may set a global preference to show or hide their name in shared matches.
• Each participant may also set a different preference for a single match.
• If the name is not visible, the app may show an anonymous alias or neutral label instead of the real name.
• Public sharing does not automatically imply publication of all participants' personal data.

The user who shares the match must use the feature in compliance with the privacy settings applied to participants.

7. Data retention

Data is retained for as long as necessary for the purposes described and in a way proportionate to the category of data processed. Account data is retained while the account remains active or while needed for support, security, or applicable obligations. Matches, shared data, messages, and user-entered content remain available for as long as needed for the service, until deleted by the user, or while retention is justified by technical, security, or legal requirements.

Local cache and preferences saved on the device may remain until logout, data deletion, uninstall, or manual removal. Data relating to purchases, subscriptions, tax, or accounting records is retained by the stores, RevenueCat, or the controller according to their respective terms and applicable obligations.

8. Data sharing

We do not sell your personal data. We may share data with recipients or technical providers needed to operate the service, in compliance with the GDPR and with appropriate protection measures:

• Parse Server backend, database, hosting, and cloud infrastructure for accounts, sessions, profiles, matches, courses, friends, messages, scorecards, preferences, and synchronization.
• RevenueCat, Apple App Store, and Google Play to manage in-app purchases, subscriptions, entitlements, renewals, cancellations, restores, and technical verification.
• Apple as an authentication provider when you choose Sign in with Apple.
• Firebase or equivalent services, when configured, for push notifications, crash reporting, technical diagnostics, and operational security.
• AI providers and technical services through backend or cloud functions for AI Caddie, scorecard analysis, and related features. For these features, context data such as match, course, scores, history, goals, feedback, and configured AI profile may be sent; for scorecard import, compressed/base64 image, file name, MIME type, country, and preferred number of holes may be sent.
• Support, security, technical monitoring, and operational analysis providers, limited to what is necessary to resolve issues, prevent abuse, and maintain the service.

Shared match data is shown to other users only according to the selected sharing level and applicable participant privacy preferences.

9. International data transfers

Some technical providers may process data in countries other than the user's country of residence. Where this occurs, we take reasonable steps to use providers that declare appropriate safeguards, including contractual clauses, security settings, and organizational measures consistent with the GDPR where applicable.

10. User rights

You have the right to:

• Access your data.
• Request correction or deletion.
• Restrict processing.
• Receive your data through portability.
• Object to processing.
• Withdraw consent where applicable.
• Lodge a complaint with the competent supervisory authority, especially in the EU country where you live, work, or believe the violation occurred.

11. Security

We use appropriate technical and organizational measures to protect your data from unauthorized access, loss, or disclosure, including access controls, backend ACLs and permissions where applicable, session management, limiting device permissions to requested features, and secure local storage where supported by the platform.

No system can guarantee absolute security; we invite you to protect your credentials, devices, and linked accounts.

12. Minors

Fairway Friends is not intended for children or minors who cannot validly use digital services or consent under applicable law without the support of a parent or guardian. If you believe a minor has provided personal data unlawfully, contact us to request verification or deletion.

13. Changes to this notice

We reserve the right to modify this Privacy Policy. Changes will be published on this page and, in case of material changes, may also be communicated through the app or other reasonable channels.

Contacts

For any question or support request, you can write to support@fairwayfriends.it.