Privacy Policy

Effective date: 4 September 2026

This policy explains what personal data Golf Course Atlas (“the app”, “we”) collects, why we collect it, and what rights you have. We have written it to be read, not skimmed past — it is short because we collect little.

1. Who is responsible

The data controller for Golf Course Atlas is:

Pål Strand (private individual)

Sweden

Email: support@golfcourseatlas.app

2. What data we collect

Account data (required to use the app)

Email address and password (the password is stored only as a cryptographic hash — we cannot read it)
Display name (chosen by you, shown publicly next to your reviews)
Country and language preference

Your golf activity (created by you as you use the app)

Courses you mark as played, with dates and optional scores
Courses you save as favourites
Ratings and review texts you write. Reviews are public: other users see your review together with your display name.

Support

Messages you send through Help & support, linked to your account so we can reply.

Purchases

Your subscription status (active, trial, expired), received from Apple App Store or Google Play via our subscription platform RevenueCat. We never receive or store your card number or payment details — payment is handled entirely by Apple or Google.

Push notifications (only if you allow them)

A device push token, used solely to deliver notifications you have opted in to. Declining notifications does not limit the app.

Usage analytics (only with your consent)

Anonymous usage events such as which screens are used and which features are popular (via Google Analytics for Firebase). We deliberately collect the minimum: for example, when you search we record only that a search happened — never what you typed. If you decline analytics consent, no analytics are collected. You can change your choice at any time under Profile.

Location — used on your phone only

The map uses your position to show nearby courses and distances. Your position is processed only on your device. It is never transmitted to, or stored on, our servers.

We do not collect contacts, photos, precise location history, advertising identifiers, or any data for advertising. We do not sell personal data. There are no ads in the app.

3. Why we process your data (legal bases under GDPR)

Account data — to provide your account and sync your content across devices. Legal basis: contract (Art. 6.1 b)
Golf activity — the core service: your played courses, favourites and reviews. Legal basis: contract (Art. 6.1 b)
Purchase status — to grant access to the subscription you paid for. Legal basis: contract (Art. 6.1 b)
Support messages — to answer your questions. Legal basis: contract (Art. 6.1 b)
Push token — to deliver notifications you enabled. Legal basis: consent (Art. 6.1 a)
Analytics — to understand usage and improve the app. Legal basis: consent (Art. 6.1 a)
Security logs — to prevent abuse and keep the service secure. Legal basis: legitimate interest (Art. 6.1 f)

4. Who we share data with

We share personal data only with the service providers (“processors”) needed to run the app, and only for the purposes above:

Supabase — database and account hosting
RevenueCat — subscription status management (no payment details)
Apple / Google — payment processing and app distribution, under their own privacy policies
Google Firebase — push notification delivery, and analytics if you consented

Some providers may process data outside the EU/EEA. Where that happens, transfers are protected by the EU Commission’s Standard Contractual Clauses or an equivalent safeguard. We never sell data and never share it for advertising.

5. How long we keep data

Account and activity data: for as long as you have an account.
Account deletion: delete your account under Profile → Delete account. Your played courses, scores, favourites, reviews and profile are permanently removed within 30 days. This cannot be undone.
Support messages: kept while your account exists, so we can see the history if you contact us again.
Security logs: kept for a limited period, then removed.

6. Your rights

Under the GDPR you have the right to:

Access — get a copy of the personal data we hold about you
Rectification — correct inaccurate data (name, email and language can be changed directly under Profile → Edit profile)
Erasure — delete your data (Profile → Delete account, or email us)
Data portability — receive your data in a machine-readable format
Restriction and objection — limit or object to certain processing
Withdraw consent — turn off analytics or notifications at any time under Profile; withdrawing does not affect processing that already happened

To request a copy of your data or exercise any right: email support@golfcourseatlas.app or use Help & support in the app. We respond within one month. To protect your data we may ask you to confirm the request from the email address on your account.

If you believe we handle your data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) — imy.se — or your local EU supervisory authority.

7. Security

Data is encrypted in transit (TLS). Passwords are stored only as cryptographic hashes. Database access is restricted with row-level security so that your private data is readable only by you and, where strictly needed, by us.

8. Children

Golf Course Atlas is not directed at children under 13, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

9. Cookies on our website

Our website does not use analytics, advertising or tracking cookies. Only technically necessary storage may be used to make the site function. If we ever introduce analytics or other non-essential cookies on the website, we will ask for your consent first through a cookie banner, and this policy will be updated.

The app does not use cookies at all — the choices described above (analytics consent, notifications) are stored as settings on your device and in your account.

10. Changes to this policy

If we change this policy we will update it here and show the new version in the app. For significant changes we will notify you in the app before they take effect.

11. Request a copy of your data

You can request everything we store about you — account details, played courses, scores, favourites and reviews — in a machine-readable format. Email support@golfcourseatlas.app from the email address on your account, and we will send you a copy within one month, free of charge.

12. Delete your account and data

The fastest way is in the app: Profile → Delete account. Your played courses, scores, favourites, reviews and profile are then permanently removed within 30 days. This cannot be undone.

Prefer not to use the app? Email support@golfcourseatlas.app from the email address on your account and we will delete it for you. Note: an active subscription is cancelled separately in the App Store or Google Play — deleting the account does not stop the billing.

13. Contact

Pål Strand

support@golfcourseatlas.app