Privacy Policy

Striped(“we”, “us”) makes a golf shot-tracking app for iPhone and Android and the website at stripedgolf.ca. This policy explains what we collect, why, and what you can do about it. It applies to the apps, the website and the web dashboard together (the “Service”).

What we collect

Account. Your email address and a password (stored only as a hash by our authentication provider), plus an optional display name and handicap goal.

Rounds and shots. When you play a round the app records the course, your scores, the clubs you use, and the GPS position of each shot. Location is read only while a round is active in the app (including from your pocket, when you allow background location for that purpose) and is never collected at any other time.

Your bag. Club names and the identifiers programmed onto your NFC stickers. Stickers hold only an opaque club id; nothing personal is written to them.

Friends. If you use the friends features we store friendships, invitation codes, group rounds and reactions. Friends you connect with can see your completed rounds and live group scorecards; nobody else can.

Purchases. Subscription and tag-kit purchases are processed by Stripe. We store your subscription status and Stripe customer identifier, never your card details.

Imports. If you import data from another service (for example Arccos), we store the rounds and shots from that import as if you had played them with Striped.

Technical. Standard server logs (IP address, device type, timestamps) kept for security and debugging. We do not use advertising identifiers or third-party analytics or tracking SDKs.

How we use it

To run the Service: computing yardages, Strokes Gained and club distances, syncing your data between your devices and the web dashboard, showing rounds to friends you have connected with, and billing. We also use it to keep the Service secure and to respond when you contact support. We do not sell personal data and we do not use it for advertising.

Weather and maps

During a round the app asks Open-Meteo for current wind and temperature near the course; that request carries the course’s approximate position, not your account. Course maps are drawn by Apple Maps on iPhone and Google Maps on Android, subject to those providers’ own policies. Course shapes and elevation are our own data, built from open government sources listed on the data sources page.

Feature rollouts

We use ConfigCat for remote feature configuration, so we can turn features on gradually or switch one off without an app update. The app and our web server download that feature configuration from ConfigCat and decide which features apply to you themselves, locally. The identifier used for that decision is your account id when you are signed in; when you are not, it is a random identifier created on your iPhone (which stays on the phone) or held in a website cookie. These identifiers are not sent to ConfigCat, and your email is not used for feature targeting. Feature decisions are not recorded, measured or used for advertising.

Cookies

The website uses only first-party cookies that it needs to work: sign-in cookies that keep you logged in to the dashboard, and striped_ff_anon, a first-party cookie holding a random identifier that keeps signed-out feature rollouts consistent between visits. It lasts one year, is readable only by our server, and contains nothing about you. We set no advertising or third-party tracking cookies.

Who else handles your data

Only the providers we need to run the Service: Supabase (authentication and database hosting), Stripe (payments), Vercel (website hosting), Apple and Google (app distribution and the maps above), Open-Meteo (weather), and ConfigCat (feature configuration, which our apps and server download; no personal data is sent to ConfigCat). Each processes data on our behalf under their own terms. Data may be stored or processed in Canada and the United States.

Retention and deletion

We keep your data for as long as you have an account. You can delete your account yourself at any time from Settings in the app or from the Account page of the web dashboard; this permanently removes your account, rounds, shots, clubs, friendships and group rounds, and cancels any subscription. Server logs are kept for up to 90 days. Payment records are retained by Stripe as required by law.

Your rights

Wherever you live you can access, correct, export or delete your data. Export is available from the web dashboard; for anything else email support@stripedgolf.ca and we will respond within 30 days. Residents of Canada (PIPEDA), the EU/UK (GDPR) and California (CCPA) have additional statutory rights, including the right to complain to their privacy regulator.

Apple privacy manifest

The iPhone app ships Apple’s privacy manifest declaring the same data types and purposes described here, and no tracking. It is written out on the privacy manifest page.

Children

The Service is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit and at rest. Access to your rows in our database is enforced per user by row-level security; our staff access production data only to resolve support requests or incidents.

Changes

If we change this policy in a way that matters we will update the date above and notify you in the app or by email before the change takes effect.

Contact

Striped · support@stripedgolf.ca