Privacy Policy

1. Information we handle

• Account information: your email address, account identifier, and available name or username. If you choose Google sign-in, Google and our authentication provider, Clerk, process the information needed to authenticate you. Passwords are handled by Clerk; they are not saved in Pocket Caddie’s golf-record database.
• Precise location: with your permission, the app uses your device’s location while you use golf GPS and shot tracking. A recorded shot can include precise start, end, and target coordinates together with its time, course, and hole. These records may be synced to your account. The app does not request continuous background location tracking.
• Golf information: your clubs and distances, shot records, scores, putts, round dates, course history, handicap-related information, strategies, performance statistics, and preferences.
• Course contributions: hazard reports, their coordinates, and hole-par corrections you submit. These are stored separately as shared course information and may be shown to other golfers.
• Technical and support information: service requests, timestamps, errors, and information you send us when requesting help. Hosting, authentication, map, and other service providers may also receive IP addresses and device or browser information when your device connects to them.

2. How we use information

We use information to provide and secure your account; show distances and maps; record shots and scores; personalise club and course guidance; calculate golf statistics; restore your saved records across devices; maintain shared course information; troubleshoot faults; and respond to support or privacy requests.

Where data-protection law requires a legal basis, we rely on providing the service you request, your consent where required (including permission-based location features), legitimate interests in maintaining a secure and reliable service, and compliance with legal obligations. Golf recommendations do not make decisions with legal or similarly significant effects on you.

3. Services that receive information

We use the following services to operate the app. They receive information needed for the functions described, and may process it under their own privacy policies:

• Clerk: account registration, authentication, session management, and related security. Clerk privacy policy.
• Replit and its infrastructure providers: hosting the backend, storing account-linked golf records, delivering the service, and operational logs. Replit privacy policy.
• Google: authentication if you choose Google sign-in, and map services where used by your device’s map implementation. Google privacy policy.
• Apple and platform map services: displaying maps and location-related features, including Apple Maps on iOS. Map providers may receive map-area and location-related requests and technical information. Apple privacy information.
• OpenStreetMap Nominatim: course-search text and related network information when searching for a golf course. OpenStreetMap Foundation privacy policy.
• Open-Meteo: coordinates of the selected course/target area and related network information to retrieve wind and weather information. Open-Meteo terms and privacy information.

We do not sell personal information or use Pocket Caddie for cross-app advertising tracking. We may disclose information where legally required, to protect users or the service, or in connection with a transfer of the service subject to applicable law.

4. Storage, security, and international processing

The app stores golf records and settings locally on your device and syncs account-linked records to the backend. Authentication tokens use the device’s secure storage. Network requests use HTTPS, and cloud records are scoped to the signed-in account.

No storage or transmission method is completely secure. Service providers may process information in countries other than your own, where privacy laws may differ. Where applicable law requires it, international processing must use an appropriate legal transfer mechanism.

5. Retention and deletion

Saved golf records are retained to provide your history and statistics; the app does not automatically expire them after a fixed period. You can remove individual records using the controls available in the app. Cloud changes require a working connection.

To delete your account and associated private cloud records, use the signed-in account deletion control, which sends an authenticated request with the confirmation DELETE. The server first records a deletion-in-progress marker, atomically purges the account’s private user_kv records, and blocks further sync for that account; it then asks Clerk to delete the authentication account. A temporary network, Clerk, or database failure returns a retryable error rather than claiming that deletion finished. If Clerk has already deleted the account, a retry completes the local lifecycle marker without another Clerk call.

After the private records are purged, we retain only a minimal account-lifecycle tombstone containing the account identifier and deletion state. It contains no golf records and prevents an old still-valid token from recreating or writing account data. Shared course contributions are stored separately from personal account records and are preserved so other golfers retain shared reports; account deletion does not remove them. Provider logs and backups may remain for their retention cycles, and some information may need to be retained for legal obligations, security, or resolving disputes.

Signing out or uninstalling the app does not, by itself, delete your account or cloud records.

6. Your choices and rights

You can withdraw location permission in your device’s settings at any time. This limits GPS distances and shot-tracking features, but does not automatically erase previously recorded locations.

Depending on the law that applies to you, you may have rights to access, correct, delete, or receive a copy of your personal information, restrict or object to certain processing, and withdraw consent where processing relies on it. Contact us using the email above. You may also complain to your local data-protection authority. For UK residents, this is the Information Commissioner’s Office.

7. Cookies and local storage

Authentication services may use essential cookies or session storage in web-based sign-in flows. The mobile app uses local storage for preferences and golf records and secure storage for authentication tokens. This privacy-policy page itself does not set cookies, load analytics scripts, or embed third-party content.

8. Children’s privacy

Pocket Caddie is not directed at children under 13. We do not knowingly collect their personal information. If you believe a child has provided information without the consent required by applicable law, contact us so we can investigate and take appropriate action.

9. Changes and contact

We may update this policy as the app or its services change. The latest version will be available on this page with an updated date. Where required by law, we will give additional notice or obtain consent for material changes.

Operator: Henry Garbutt
Privacy and deletion requests: garbutthenry097@gmail.com