Privacy Policy

Golf Index is operated by XXXXXXXX AB (under formation), Sweden, which is responsible for your personal data (the "controller"). Questions about privacy, or requests about your data, can be sent to privacy@golfindex.io.

• Account details: your name, email address and password. Passwords are stored encrypted - we can never see them.
• Profile details: birth year, gender, golf handicap, distance unit, language, and any goals you set.
• Age and country of residence: the country (and, where rules differ, region) you live in and your birth year. If you could be under 18, we also ask for the month and day, so that the rules change on the right day - for example when you reach the age where you no longer need a parent's approval. We delete the month and day once you are an adult (from the January after your 18th birthday) and keep only the year. We use them to apply the right rules for young players, and keep a record of each check: the rules and policy version that applied and the result.
• Parent or guardian approvals: for young players, the parent's or guardian's email address, what they approved or declined, the steps they took and when, and which version of the information they saw.
• Test results: the tests you register, your results, the dates you did them, and any shot details you enter. This is what your Golf Index is calculated from.
• Coaching: which coaches you are connected to, when you accepted, whether a parent or guardian approved it, and whether you chose to show your name to other players in a group. If you coach others, your groups and club name.
• Leagues: the leagues you create or join.
• Messages: feedback you send us.

We do not use advertising trackers or third-party analytics, and we do not sell your data to anyone.

• To provide Golf Index - your account, your Golf Index, your development over time, leagues and coaching. This is necessary to deliver the service you signed up for.
• To share your results with a coach - only after you accept their invitation. You can withdraw this at any time by disconnecting from the coach.
• To improve Golf Index - we analyse results across many players combined, for example to build benchmarks and understand how players develop. These analyses never show any individual player.
• To keep the service secure and to answer you when you contact us. To stop password guessing we count failed login attempts, stored in a scrambled form that doesn't show your IP address or username, and delete the count after 24 hours. During the test period, before Golf Index opens to the public, the team can view an adult tester's account to find and fix problems - only testers who were told about it, never anyone under 18, without changing anything, and every view is logged.

• You can see all of your own data.
• A coach can see your test results and development only after you accept their invitation, and only until you disconnect. Young players also need a parent or guardian's approval for that specific coach.
• Other players in a coach's group see nothing about you unless the coach opens the group to players and you also choose to show your name. Even then they only see how much you have improved in percent and which tests you have done and when - never your results.
• League members see your name and your Golf Index in leagues you join.
• Anyone you share with - if you use the share button, the image you choose to share is visible to whoever you send it to.

Your data is stored in a database in Frankfurt, Germany (EU), and the service runs on servers in the same region. We use these providers to run Golf Index:

• Neon - database hosting (EU).
• Vercel - hosting of the website and its servers (EU region).
• Resend - sends emails, such as password reset links and emails to parents. It receives only the recipient's email address and the message.

Some of these providers are companies based in the United States. Where data may be accessed from outside the EU, we rely on the safeguards required by EU law, such as the EU Standard Contractual Clauses.

We keep your data for as long as you have an account. You can close your account at any time under Settings → Profile.

When you close your account, we remove your name, email address, username, password and login, your birth year and country, all connections to coaches, groups and leagues, any feedback you have sent, and your parents' contact details. Your test results are kept without any link to you: only the result, the month of the test (not the day), how old you were in whole years, your gender and your handicap. We use them only combined with other players' results, never to show or identify any individual player. Because they are no longer connected to you, they cannot be restored if you come back later. If a parent approved your account, we keep a record that the approval was given - but without their email address.

Feedback you send us is deleted 12 months after we have dealt with it, even if you keep your account.

You have the right to:

• see the personal data we hold about you, and get a copy of it - download it yourself under Settings → Profile → Your data;
• correct data that is wrong - most of it you can change yourself under Settings;
• have your data deleted - you can close your account yourself at any time;
• withdraw consent, for example by disconnecting from a coach - parents can withdraw their approvals via their personal link;
• object to how we use your data, or ask us to restrict it.

Contact us at privacy@golfindex.io and we will answer within one month. If you are unhappy with how we handle your data, you can also complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

We ask everyone where they live and when they were born, because the rules for young players differ between countries. Depending on age and country, a parent or guardian must approve:

• the child's own account - until then nothing is activated and no tests can be saved;
• each coach separately - approving the account never gives a coach access;
• for accounts a parent approved: joining leagues and showing their name in coaching groups.

We email the parent a personal link. Opening it changes nothing - the parent has to confirm that they are the parent or legal guardian and actively approve. Shortly afterwards we send a confirmation email, so a parent who didn't make the approval can notice and withdraw it. We cannot verify for certain that the person who approves is the parent, and we record what was actually done, not more. Where the law asks for more - for example in the United States, when a child under 13 would be visible to a coach or in a league - the parent instead signs a consent form and uploads a photo or scan of it. We check it by hand and then delete the file, keeping only a record of the check.

Parents get a personal link where they can see and withdraw their approvals at any time, without the child's password. Withdrawing the account approval pauses the account and removes all connections to coaches, groups and leagues - it does not delete anything; to have data deleted, close the account or contact us. If a child's age or the rules change, we check again and adjust - for example when a child reaches the age where they no longer need approval.

A registration waiting for a parent holds only the child's name, email, birth year, country and the parent's email. If nobody approves within 14 days it expires, and it is deleted 30 days after the sign-up. If you are a parent or guardian and believe your child has given us personal data without your consent, contact us and we will help.

We only use cookies that are needed for Golf Index to work: a few that keep you securely logged in, one that remembers whether the side menu is open, one that remembers the language you chose, and a short-lived one that remembers a league invitation you followed while you sign up. We do not use cookies for advertising or tracking, so there is nothing to opt out of.

If we change how we handle your data, we will update this page and the date at the top. If a change is significant, we will tell you in the app before it takes effect.