Privacy policy

1. What we collect when you make an account

• Your name and email address.
• Your password, stored only in scrambled (hashed) form. We can't read it.
• At launch you sign in with your email address only. We don't offer Google or X sign-in. If we add them later, we'll update this page first.
• Sign-in session details: a sign-in token, your IP address, your browser type and the times you signed in, so you stay signed in safely.

2. Your profile (optional)

• The name you show, your role (player, clubhouse or cart), home course, ZIP code, whether you walk or ride, and whether you play weekends or weekdays.
• Whether you said yes to email or text messages from us. Both are off unless you tick them.
• A referral code, if you came from someone's invite link.

3. Events, scores and play

• Event codes you join, your name at check-in, your team, your tee, handicap, cart and meal choice, shirt size (if the organizer asks) and your scores.
• Auction bids, raffle tickets and pledges: the name you enter and the amount.
• Bingo cards: the name on the card and whether the organizer marked it paid.
• Organizers also enter event details: the charity or course name, the charity's EIN, the director's name, phone and email, sponsors, contest winners, and hotel or vendor contacts.

4. Courses, clubs and sponsors

• When a course, club or charity asks for a plan: the club name, a contact name and email, the plan, the price, and its status and dates.
• Payments are not made through TripleBogey. If you pay, you pay by Venmo, outside the app; we only record that it was paid. We never see or store card or bank numbers. Venmo's own privacy policy covers that payment.
• Sponsor and supply requests: name, club, email, phone, what you need and your note.
• Club sign-up leads: the email and club name, and which welcome emails we've sent.

5. Feedback and messages

• Feedback notes you send, with the course name, the app version and your account.
• Emails the app sends you (for example a password reset) are logged on our server: the address, subject and text. These emails are delivered through Microsoft 365 from our info@triplebogey.app account.
• Anything you email us.

6. Saved on your own phone, not on our servers

Much of TripleBogey keeps information in your browser's storage on your own device: your current round and scorecard, scores waiting to upload, playing partners and names you type, your club's terms agreement (name, email and the boxes ticked), and your sign-in token. It stays on that device unless a feature sends it to us, for example when you join an event or save to your account.

Cart and kitchen orders are sent by your own phone's text-message app. Our server only counts how many were sent; it doesn't keep the words.

To remove it: use "Clear this phone" on the Reset account page, or clear this site's data in your browser settings.

7. Location, camera and files (only if you choose)

• Location: some golfer pages ask your browser for your location to measure shots, sort nearby courses, show weather and wind, or draw the course map. Your browser asks first. Say no and the rest still works.
• Scorecard photo: if you use the card reader, the photo is sent to xAI (the Grok service) to read the numbers, then the numbers come back to you. We don't keep the photo.
• Files you add, such as a sponsor logo or a team list, are used only for that feature.

8. Collected automatically

• Server and error logs: your IP address, browser type, the page you asked for, the time, and error details. Our host (Microsoft Azure) keeps these, and we use Microsoft Application Insights to spot and fix errors.
• No advertising cookies, no ad networks, no analytics trackers. The only cookies are the ones that keep you signed in and remember owner or staff unlocks.

9. How we use it

• To run the app: sign-in, events, teams, scoring, boards, auctions and clubhouse tools.
• To show scores and results to your group and your event organizer.
• To help courses, clubs and charities run their events and to handle their plans.
• To answer questions, fix bugs and keep the app secure.
• To send email about your account or your events, and other email only if you said yes.
• To meet legal duties.

10. Who can see it

• Your group and your event organizer: your name, team and scores.
• Leaderboards and TV boards show the display name the event director picks for the event, for example your full name, your first name and last initial, or your team name only.
• TripleBogey staff, only as needed to run and support the app.
• We don't sell your personal information and we don't share it for advertising.

11. Outside services we use

These companies process data only to provide their service. When a feature calls one, it receives your IP address and what that lookup needs:

• Microsoft Azure: hosting, backups and error monitoring (Application Insights). Microsoft 365: our email.
• xAI: reads a scorecard photo, only if you use the card reader.
• OpenStreetMap (Nominatim and Overpass): turns an address you type into a map point; draws course maps.
• U.S. National Weather Service (api.weather.gov) and Open-Meteo: weather, wind and elevation for a location.
• ProPublica Nonprofit Explorer and the IRS charity search: checks a charity name or EIN.
• Zippopotam.us: looks up a ZIP code you type.
• QR codes: api.qrserver.com receives the event join link when a QR code is shown. We plan to move this inside the app; we'll update this policy before that change goes live.
• Google Fonts: page fonts (receives your IP address).
• Links you tap to Venmo, Facebook, Instagram, X, WhatsApp, Uber or Lyft take you to that service; its own policy applies.

12. How long we keep it

• Account and profile: until you ask us to delete it.
• Event data (teams, scores, bids): 24 months after the event, unless the organizer deletes it sooner.
• Server and error logs: up to 90 days.
• Backups: a nightly copy of the database is kept for 14 days in private Azure storage, then deleted automatically. Deleted data disappears from backups within 14 days.
• Data on your phone: until you clear it.

13. Your choices and rights

• See, correct, get a copy of, or delete your data: email info@triplebogey.app from the email on your account. See the Delete your data page.
• Email and text messages: off unless you opt in. Email us any time to opt out.
• Location, camera and files: say no, or turn access off in your phone or browser settings.
• Depending on your state you may have more rights (to know, correct, delete, copy, or opt out). We will answer as your state's law requires.

14. Age

You must be 18 or older to use TripleBogey, except at youth events, where players 13 to 17 may take part with a parent's or guardian's consent. Nothing in TripleBogey is directed at children under 13. If you think a child under 13 gave us information, email us and we'll delete it.

15. Security

We use encrypted connections (HTTPS), scrambled passwords, private storage and limits on who can see data. No system is perfect, so we can't promise data will never be accessed without permission. If a breach affects you, we'll tell you as the law requires.

16. Changes

If we change this policy in a material way we'll say so in the app or by email before it takes effect. The date at the top shows which version applies.

17. Contact

TripleBogey. Email: info@triplebogey.app. The fastest way to reach us is by email.