Privacy Policy

Fairway (Friend) Finder is a small, invite-only iOS app for coordinating golf tee times among friends. We collect the minimum data needed to make the app work and we don't share it with advertisers or sell it. This page explains what we collect, why, and your choices.

What we collect

• Name and emailfrom Apple Sign-In when you create your account. Apple gives us only what you choose to share (you can elect to hide your real email via Apple's relay service).
• Phone number (optional) — only if you enter it in Settings, so other group members can reach you.
• Home ZIP code (optional) — only if you enter it in Settings. We use it to bias golf-course suggestions to your area.
• Tee times you create or join— course, date, time, notes, who's on the roster.
• Chat messages you post inside a tee time.
• Push notification token — an opaque identifier issued by Apple to deliver notifications to your specific device.
• Course search queries— characters you type into the course field are sent to Google's Places API to return suggestions. We don't attach your identity to these queries.

How we use it

Strictly to operate the app: show your group's tee times, deliver push notifications about upcoming rounds and roster changes, suggest golf courses near you, and let you chat with the people in your tee time. That's it. No advertising, no behavior tracking, no profiling, no data sales.

Third parties we rely on

• Apple — Sign in with Apple (authentication), Apple Push Notification service (delivering notifications).
• Supabase — hosts our database and authenticates API requests. All data lives on Supabase servers in us-east-1.
• Google (Places API)— only receives the literal text you type into the course-search field and returns matching course names + addresses + phones. Google doesn't see your identity or your tee-time data.
• Expo Push— delivers push notifications to Apple's servers on our behalf.
• zippopotam.us — a free public service that converts a US ZIP code into a latitude/longitude. We send only the 5-digit ZIP, no identifier.

Data retention

Your data is kept as long as your account is active. If you stop using the app and want your data deleted, email us at the address below and we'll remove your profile, tee times, and chat messages within 30 days.

Your rights

You can edit your profile, leave any group, sign out, or request full data deletion at any time. To request deletion or ask any other privacy question, email kdgcode@proton.me.

Security

All app↔server traffic is encrypted in transit (HTTPS/TLS). Your iOS session token is stored in iOS Keychain via Apple's SecureStore. Database row-level security ensures you can only read data for groups you've been invited to.

Children

The app is not directed at children under 13 and we don't knowingly collect data from them.

Changes to this policy

If we change anything material, we'll update the effective date at the top of this page. Continued use after changes means you accept the updated policy.

Contact

Questions, deletion requests, or privacy concerns: kdgcode@proton.me