Privacy Policy

Flopshot · Last updated 31 July 2026

Flopshot is a golf tracking app. This policy explains what it collects, why, and what control you have. It is written to be read, not to be skimmed past.

What is collected

• Your email address and a username, so you can sign in and so your data follows you between devices.
• A password, stored only as a salted hash by our authentication provider. It is never visible to us in readable form.
• Golf data you enter: rounds and scores, practice sessions, club distances, playing partners you add by name, and any notes you write.
• An optional profile picture, if you choose to add one.
• Scorecard photos, only when you use the scanner. The photo is sent to be read and the hole pars it produces are saved to your round; the image itself is not stored on our servers afterwards.
• Subscription status, if you buy Premium, so the app knows which features to unlock.

What is not collected

• No location or GPS data.
• No contacts and no microphone access.
• The camera and photo library are used only when you ask — to scan a scorecard or set a profile picture. Nothing is read from your library beyond the image you pick, and the camera is never used in the background.
• No advertising identifiers, and no third-party analytics or tracking SDKs.
• No payment card details — payments are handled entirely by the App Store.

How it is used

Solely to run the app: to sign you in, store and sync your golf history, calculate your statistics and handicap, and determine whether you have an active subscription. Your data is not used to build advertising profiles and is not sold or rented to anyone.

Who it is shared with

Data is stored with Supabase, which provides the database and authentication and processes it only on our behalf. If you opt in to product emails, your address is also passed to our email provider for that purpose alone. If you subscribe, Apple processes the payment and tells us only whether your subscription is active — we never see your card details.

When you scan a scorecard, that photo is sent to Anthropic to be read into hole pars. Only the image you chose is sent — never your account details or your golf history — and it is not used to train their models. If you would rather no photo left the app, enter pars by hand instead; scanning is entirely optional.

Where it is kept, and for how long

Your data is retained for as long as your account exists. A copy is also cached on your device so the app works without a signal on the course; that copy is removed when you log out or delete your account.

Deleting your account

Open Manage account from your profile and choose Delete my account. This permanently erases your account and all associated rounds, practice sessions, clubs and friends. It takes effect immediately and cannot be undone — we cannot recover deleted data, so export anything you want to keep first.

Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, and to object to processing. The app gives you direct access to everything it holds about you, and deletion is available in-app. For anything else, contact us at the address below.

Children

Flopshot is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Security

Data is transmitted over encrypted connections and stored with row-level security rules, so one account cannot read another's data. No system is perfectly secure, but access is restricted to what the app needs to work.

Changes

If this policy changes materially, the date at the top will be updated and the change noted in the app.

Contact

Questions about this policy or your data: flopshotapp@gmail.com