Privacy Policy

Who is responsible for your data

The data controller is Trophy Tech Support LLC, Trophy Club, Texas, USA. For any privacy question or request, contact us at support@back9bookie.com.

What we collect

• Account information — your name, email address, and optional phone number, zip code, GHIN number and profile photo.
• Golf data — the rounds, hole-by-hole scores, games, handicap records and settlements you or your group record.
• Group & roster data — groups you create or join and the players (including guests) you add.
• Technical data — sign-in events, and limited device and log data needed to operate and secure the Service.
• Push notification tokens — if you allow notifications on your phone, a device token so we can send you round and group alerts. Turn notifications off in your device settings at any time.
• Advertising data (mobile app only) — when the app shows an ad: your IP address (used to estimate your approximate location), device details such as model, operating system and language, an identifier scoped to the app on your device, and whether you viewed or tapped an ad. See Advertising in the mobile app below.
• Location while you scan a scorecard (mobile app only) — if you allow it, the app uses your phone’s current position while you scan a scorecard, to work out which course you’re at and avoid adding it twice. To find courses near you, the app sends an approximate area (a box around your position) to our database; that search is not stored. Your position is not sent to GolfCourseAPI or to Anthropic. When you add a new course by scanning, you can tick “I’m at this course now” to save your current position (rounded to about 100 metres) as the course’s location. It is saved only if you tick that confirmation, and it then becomes part of the course details that other players can see. Otherwise your location isn’t stored.
• Contacts you choose (mobile app only) — if you add players from your phone’s contacts, the app opens your phone’s own contact picker. We save the name, email address and phone number of only the people you pick, to your roster. We never read the rest of your address book.

If you use Face ID or Touch ID to sign back in, the biometric check happens entirely on your device; we never receive biometric data. We do not store your precise location, and we do not read your address book beyond the contacts you choose to add. The website shows no advertising; the mobile app may show non-personalized advertising, described below.

Advertising in the mobile app

The Back 9 Bookie mobile app may show ads served by Google AdMob. The website does not show ads.

• Ads are non-personalized: they are chosen from context such as the app and your approximate location, not from a profile of your interests or activity in other apps and websites.
• The app does not ask for permission to track you across other companies’ apps and websites, and does not track you in that way.
• Google uses the advertising data listed above, including an identifier scoped to the app on your device, to cap how often you see the same ad, to report ad views and taps, and to detect fraud and abuse.
• If you are in the European Economic Area, the United Kingdom or Switzerland, the app will ask for your consent before showing any ad. Once advertising is on, you can change that choice at any time under Settings › Privacy choices in the app.
• Plus subscribers do not see ads.

How Google uses information from apps that use its services: policies.google.com/technologies/partner-sites.

How we use it & our legal bases

• To provide the Service — scoring, games, handicaps and settlements (performance of a contract).
• To secure the Service and prevent abuse, including rate limiting (legitimate interests).
• To send service and invitation emails you or your group trigger (contract / legitimate interests).
• To show non-personalized ads in the mobile app (legitimate interests; consent where the law requires it, such as in the EEA, UK and Switzerland).
• To comply with legal obligations where they apply.

We do not sell your personal data.

Who we share it with (processors)

We use a small number of trusted providers to run the Service:

• Supabase — database, authentication and hosting.
• Vercel — application hosting and content delivery.
• Resend — transactional and invitation email delivery.
• Cloudflare Turnstile — bot protection when you sign up or sign in. Cloudflare checks the browser or app making the request; it is not used to identify you or for advertising.
• Apple and Google — Sign in with Apple / Google (if you choose them) and push notification delivery.
• GolfCourseAPI — course search. Only the search text is sent; no personal data.
• Google (AdMob) — serving and measuring the non-personalized ads in the mobile app.
• Anthropic — reading a course’s details from a scorecard photo, if you choose to scan one in the mobile app. The whole photo is sent to Anthropic to read the course’s tees, par, stroke index, yardage, rating and slope. If the card has been used, the photo may include handwritten names or scores. We don’t store the photo, and Anthropic processes it under its API terms.

These providers process data on our behalf under data-processing terms. Some may process data outside your country; where required we rely on appropriate safeguards (e.g. Standard Contractual Clauses).

Cookies

We use only strictly-necessary cookies (and, in the app, equivalent on-device storage) to keep you signed in and to secure the Service. We do not use advertising or analytics cookies. In the mobile app only, when advertising is on, Google AdMob keeps an identifier scoped to the app on your device, and the app stores your ad-consent choice there; both are used as described under Advertising in the mobile app.

How long we keep it

We keep your data while your account is active. When you delete your account, we delete your sign-in and anonymize your personal details (name, email, phone), but keep the scores of shared rounds so your playing partners’ group history stays intact. Server logs are kept for a limited period for security and then deleted.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact support@back9bookie.com. You also have the right to complain to your local data-protection authority.

Right to be forgotten: you can delete your account at any time from Settings, in the app or on the web. We delete your sign-in and your personal information (name, email and profile). Rounds you played stay in other players' history in anonymized form, shown as “Deleted player”. To get a copy of your data, email us at the address above.

Children

The Service is not directed to anyone under 18. We do not knowingly collect data from children under that age.

Changes

We may update this policy from time to time. We will post the new version here and update the “last updated” date.

Contact

Questions or requests: support@back9bookie.com, Trophy Tech Support LLC, Trophy Club, Texas, USA.