← golffeed.golf

Privacy Policy

Last updated: 21 March 2026

1. Who we are

GolfFeed is operated by Mark Mullen, trading as GolfFeed, based in the United Kingdom. References to “GolfFeed”, “we”, “us”, or “our” in this policy refer to that entity.

If you have any questions about this policy or your data, contact us at: privacy@golffeed.golf

2. What data we collect

We collect the following personal data when you use GolfFeed:

  • Phone number — used to verify your identity via SMS one-time passcode (OTP). Required to use the app.
  • Display name — the name shown on your profile, leaderboard, and to other players in events you join.
  • Profile photo — an optional avatar you choose to upload.
  • Handicap index — optionally provided by you or the event organiser. Used to calculate net scores.
  • Score data — hole-by-hole scores you enter or that are entered on your behalf by a nominated scorer.
  • Photos and media — photos you upload to an event's feed, including any captions and player or hole tags you add.
  • Device push notification token — collected when you grant notification permission. Used to send you event-related notifications.
  • Usage data — basic technical information such as your IP address, device type, and app version, collected automatically when you use the service.

3. Why we collect it (lawful basis)

Performance of a contract / legitimate interests

Your phone number is collected to authenticate you via OTP. This is necessary to provide the service securely and to enable event organisers to invite you by phone number.

Consent

Your display name, profile photo, handicap index, scores, media uploads, and device notification token are provided by you voluntarily. You can decline to provide optional data (profile photo, handicap, notification permission) without losing access to the core service.

Legitimate interests

We collect basic usage data to maintain the security and reliability of the service, diagnose errors, and understand how the app is used.

4. How your data is stored

Your data is stored on servers operated by Amazon Web Services (AWS) in the EU West 1 (Ireland) region — within the European Economic Area. Media files (photos) are stored in Amazon S3. All data is encrypted in transit and at rest.

5. Third parties we share data with

We use the following third-party services to operate GolfFeed. They act as data processors under our instruction and are bound by appropriate data processing agreements:

  • Amazon Web Services (AWS) — database and file storage (AWS DynamoDB, S3, Lambda). Servers located in Ireland (EU West 1).
  • Twilio — used to send SMS invitation and OTP verification messages. Your phone number is transmitted to Twilio solely for this purpose.
  • Expo (Expo Push Notification Service) — used to deliver push notifications to your device. Your device token is transmitted to Expo for this purpose.
  • AWS Cognito — manages authentication and secure session tokens.

We do not sell your personal data to any third party. We do not share your data with advertisers.

6. Who can see your data

Within GolfFeed, your data is visible as follows:

  • Your display name, profile photo, and scores are visible to other participants in the same event.
  • Your phone number is never displayed to other users.
  • If an organiser enables the public spectator link for an event, your display name and scores may be visible to anyone with that link. The organiser controls this setting.
  • Photos you upload to an event feed are visible to all participants in that event, and to the public if the public spectator link is enabled.

7. How long we keep your data

We retain your account data (phone number, display name, profile photo) for as long as your account is active. Event data (scores, photos, player lists) is retained for as long as the event exists on the platform.

If you request deletion of your account, we will delete your personal profile data within 30 days. Event contributions (scores, photos) may be retained in anonymised or aggregate form for the integrity of the event record, or deleted at the organiser's request.

8. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your personal data (“right to be forgotten”).
  • Portability — request your data in a machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at privacy@golffeed.golf. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

GolfFeed is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “last updated” date at the top of this page. Material changes will be notified within the app. Continued use of GolfFeed after any changes constitutes acceptance of the updated policy.