Privacy Policy

Golfmie · Last updated: 11 October 2026

This policy explains what personal data the Golfmie mobile app ("Golfmie", "the app", "we") collects, why, who it is shared with, how long it is kept and the rights you have. It applies to the Android and iOS apps and to the web pages at golfmie.com.

1. Who is responsible for your data

The data controller is Rehan Mazhar, 7 Avenue du Général de Gaulle, 77600 Bussy-Saint-Georges, France. For any privacy question or request, email privacy@golfmie.com.

2. Data we collect and why

Account and sign-in

• Email address: you sign in with a one-time code sent to your email. There is no password. We use your email to create and secure your account and to send sign-in codes.
• Account identifiers: an internal user ID, your account creation date and your role (user or administrator).

Profile

• Your name, display name and username (and when you last changed it).
• Your profile photo, if you add one.
• Golf details you choose to enter: handicap index, target handicap, target score and home club.

Your name, display name, username, profile photo, handicap and home club are visible to other Golfmie users so they can find you and play with you.

Rounds, scores and stats

• The rounds you create or join: course, tees, date, game format, players, hole-by-hole scores and the statistics and achievements computed from them.
• Rounds are visible to the players in them; your friends can see scores you share with them in the app.

Friends, groups and blocking

• Friend requests and friendships, the groups you create or join (name and optional group photo) and the users you block.

Chats

• Messages you send in one-to-one and group chats: text, photos, voice messages, GIFs, replies and emoji reactions.
• Read receipts (which messages a chat member has read) and last seen (when you were last active). You can hide your last seen in the app's privacy settings.
• Your chat preferences: muted chats, hidden conversations and messages you deleted for yourself.

When you search for a GIF, your search words are sent to GIPHY to return results. We do not send GIPHY your name, email or account ID.

Photos you upload

• Your profile photo, photos in your golf gallery, photos sent in chats, group photos and photos you submit for a golf course. Course photos from players are only published after an administrator approves them.
• Photos are resized and compressed on your phone before upload. Profile, gallery and approved course photos are stored at public web addresses so the app can display them; chat and group photos are only accessible to the members of that chat or group.

Course contributions and reports

• Courses or course details you add or edit, and reports you send about wrong or missing course data, with your account ID so we can follow up.

Location

• Only if you allow it, and only while you use the app (never in the background), the app reads your phone's location to show the nearest golf courses, centre the course map on you and show your current town on your profile.
• Your coordinates are sent to our server to find nearby courses and to OpenStreetMap Nominatim to turn them into a town name. We do not store your location on our servers or show it to other users. The app keeps a short-lived cache of nearby courses on your phone.
• Weather shown for a course is requested from MET Norway using the course's coordinates, not yours.
• When you add a course, the address you type may be sent to OpenStreetMap Nominatim to find its coordinates.

Notifications

• If you allow notifications, we store a push token for your device (and whether it is Android or iOS) to send you notifications (new messages, friend requests, rounds). Notifications are delivered through Expo's push service and Google Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS).
• We also keep your in-app notification list and your notification settings.

Inviting friends by email

• When you invite someone by email, we store the name and email address you enter for them, and send them an invitation email with up to three reminders (about 1, 7 and 30 days later). Every email has an unsubscribe link; after unsubscribing they receive no more invitation emails.
• If the person taps "Activate my account" in the invitation, an account is created for them with that name and email, and they become your friend in the app.
• If you install the app from someone's invite link, the app reads that person's username from the Play Store install referrer (Android) or, once, from your clipboard (iOS) to send them a friend request after you sign up.

AI course lookup

To fill in course details (holes, par, tees, ratings) the app can ask Google Gemini through our server. Only golf course and club information (names, location, country) is sent to Gemini, never your name, email or other personal data. We count how many lookups each account makes per day to apply a daily limit.

App lock

If you turn on app lock, Face ID, fingerprint or your device passcode is checked by your phone's operating system. Your biometric data never leaves your device and we never receive it. The on/off setting is stored on your phone.

Camera and microphone

The camera is used to take photos and to scan a friend's profile QR code (the scan is processed on your phone). The microphone is used only while you record a voice message.

Data stored only on your phone

Some settings and caches stay on your device: app lock setting, chat background, temperature unit and similar preferences, and cached course lists. They are removed when you uninstall the app.

What we do not do

• No advertising, no advertising ID, no tracking across other apps or websites.
• No analytics or crash-reporting SDKs in the app.
• We do not sell your personal data.
• We do not access your contacts, calendar or files.

3. Legal bases (GDPR)

• Performance of a contract (providing the app you signed up for): account, profile, rounds, friends, groups, chats, uploads, notifications you enabled.
• Consent: location, camera, microphone, photo library and notifications permissions, which you can withdraw at any time in your phone's settings.
• Legitimate interests: securing the service and preventing abuse (e.g. AI usage limits, blocking, moderating course photos and reports), and sending the invitations our users ask us to send, with an unsubscribe link in each one.
• Legal obligations, where the law requires us to keep or disclose data.

4. Service providers

We use the following providers to run the app. They process data on our behalf or provide the service you asked for, and only receive what they need.

Some of these providers are located outside the European Union (mainly in the United States). Where this is the case, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Other Golfmie users see the information described above (profile, shared rounds, messages in their chats). We may also disclose data if required by law.

5. How long we keep data

• Account, profile, rounds, chats and uploads: as long as your account exists. Messages and photos you delete are removed from our storage.
• When you delete your account in the app, your personal data is deleted straight away; by email, within 30 days. Courses you added stay in the shared course database, and your scores in rounds played with other golfers and your group chat messages stay under "Deleted golfer" / "Deleted user", without being linked to you.
• Push tokens: until you sign out, disable notifications or the token stops working.
• Email invitations: while the invitation is pending, plus the unsubscribe record (so we never email that address again) for as long as needed.
• Daily AI usage counters: kept with your account and deleted with it.
• Backups and provider logs are overwritten on their normal cycle.

6. Deleting your account

You can delete your account and its data at any time in the app (Profile → Account → Delete account), or ask us by email. See how to delete your account.

7. Your rights

Under the GDPR you have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You can edit most of your profile directly in the app. For anything else, email privacy@golfmie.com; we answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or your local authority.

8. Security

All data is sent over encrypted connections (HTTPS/TLS). Access to data on our servers is restricted by row-level security rules so users can only reach what they are allowed to see.

9. Children

Golfmie is intended for adults (18 and over) and is not directed at children. We do not knowingly collect data from children. If you think a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy when the app changes. The date at the top shows the latest version. If a change significantly affects how your data is used, we will tell you before it applies.