primelogiclab.ioGolf App — Privacy Policy
Please read this first. The Golf App is a small, independently built application that is still in active development and currently in limited testing. This page is a plain-language, good-faith description of what the app actually does with data today — written by reading the app's own source code, not adapted from a template. It has not been reviewed by a lawyer, and it is not a substitute for formal legal advice. It will be reviewed and revised before the app is made broadly available to the public.
Who runs this app
The Golf App is built and operated by primelogiclab.io, an independent developer project. There is no company, no advertising business, and no data broker behind it. Data is stored on a single server rented from DigitalOcean, located in the United States.
For anything in this policy, including deletion requests, contact info@primelogiclab.io.
What the app collects
Account and profile information
Signing in is handled by Auth0, a third-party identity provider. You create and manage your login credentials with Auth0 — the Golf App never sees or stores your password. From Auth0, the app receives and stores:
- A permanent account identifier for you (Auth0's "subject" value)
- Your verified email address
In the app itself, you can add or edit a small profile: first and last name, a contact email, a phone number, a handicap, and a gender marker used for selecting the correct tee rating on a scorecard. Everything in that list except your name is optional, and you can leave it blank or change it at any time. The app does not collect or store a profile photo.
Golf and gameplay data
This is the core of what the app is for. It stores the rounds you play and the details you enter about them: courses, tee boxes, hole-by-hole scores, and optional shot detail such as putts, fairways hit, greens in regulation, penalties, sand saves and club used. From this, the app calculates and stores your round history, statistics and a computed handicap index.
Friends, guests and leagues
The app is built around playing with other people, so it stores who you play with: your friend connections, friend invitations (sent by email address or invite code), and any leagues you belong to along with your role and group within them. League organisers can also post league news and manage a roster.
You can also save guests — people who play with you but don't have an account. For a guest, the app stores the name you type in, and optionally a handicap and an email address. This is information about another person that you are entering, so please only add details you're comfortable recording, and only for people who are happy for you to do so.
Bets and money records between players
The app supports friendly side games (Nassau, Skins, Snake and similar) and league bookkeeping. It records the amounts agreed between players, who is in each bet, who ended up owing whom, and whether that has been marked as settled. Leagues can additionally record dues and expense entries with a description, an amount, a date and which member it relates to.
To be completely clear: the app does not process payments and never handles money. There is no payment provider connected to it. It does not collect card numbers, bank details or any other payment information. These are bookkeeping notes about amounts you and your playing partners settle between yourselves, entirely off the app.
Photos and files you upload for import
The app has an optional import feature that saves you typing. You can upload a photo or PDF of a scorecard, a league schedule, or a list of contacts (or paste text), and the app extracts the details from it automatically. When you use this feature, the file you upload is stored on the app's server and is sent to OpenAI, which reads it and returns the structured data.
Nothing is sent to OpenAI unless you actively choose to import something. Each import is a single, one-off action that you trigger yourself: you pick a file, and only that file's contents are sent, only at that moment, only so it can be read. Your account details — your name, your email address, your profile, your rounds, your scores, your bets, your friends and your leagues — are never sent to OpenAI. None of it is attached to an import request, and there is no background, automatic or ongoing sharing of any kind. If you never use the import feature, OpenAI receives nothing about you whatsoever.
What is sent is exactly the file or text you chose and nothing else. That does mean whatever is visible inside that file goes with it — so if you import a photo or list of people, the names, email addresses and handicaps written in it are part of the content being read. Upload only files you're comfortable having processed this way.
The app does not access your camera roll, photo library or files in the background, and it does not read your device's contacts list — a contact import is a photo, file or text that you supply yourself.
Email records
When you send an invitation or notification through the app, it records the recipient's email address, your name and email address as the sender, what the message was for, and whether delivery succeeded or failed.
Data stored on your own device
On Android, the app keeps a local copy of your current round so you can keep scoring when you lose signal on the course, and queues any scores entered offline until it can sync them. Your login session is stored on your device by the Auth0 SDK. Uninstalling the app removes all of this local data from your device; it does not remove data already saved on the server.
Server logs
The web server keeps standard technical access logs — IP address, timestamp, the address requested, and the response — which are used for diagnosing errors and abuse. The application also logs which requests it handled and how long they took.
What the app does not collect
These are worth stating plainly, because many apps do collect them and this one does not:
- No advertising. There are no ads and no advertising SDK of any kind.
- No analytics or tracking. There is no Google Analytics, Firebase Analytics, or any other usage-tracking or attribution SDK.
- No crash reporting SDK. There is no Crashlytics or equivalent.
- No location data. The app does not request or use GPS or location permissions.
- No device contacts, photos library, microphone or camera access beyond the file you explicitly choose when using the import feature.
- No payment or financial account data.
- No sale of data. Your data is not sold, rented, or shared with anyone for advertising or marketing purposes.
Why the app collects what it collects
Every item above exists to make a feature work, and for no other reason:
- Account information — so you can log in, so the app knows which rounds and leagues are yours, and so friends can find you by email or invite code.
- Gameplay data — to score a round, keep your history, and calculate your handicap index.
- Friends, guests and leagues — so you can play with other people, and so organisers can run a league.
- Bet and league money records — so the app can work out who owes whom at the end of a round or a season.
- Uploads — to read a scorecard, schedule or contact list so you don't have to type it in.
- Email records — to send invitations you asked for, and to show you whether they arrived.
- Server logs — to keep the service working and diagnose problems.
Who your data is shared with
The app uses three third-party services, plus its hosting provider. It does not share your data with anyone else.
- Auth0 (Okta, Inc.) — handles login. Auth0 holds your login credentials and email address, and tells the app who you are. Okta privacy policy
- OpenAI — receives only the specific photo, PDF, file or text you explicitly upload through the import feature, at the moment you upload it, so that it can be read and turned into structured data. It receives no account information — not your name, email address, profile, scores, bets, friends or leagues — and it receives nothing at all unless and until you choose to run an import. Whatever is visible inside a file you submit is part of that file's contents: if you import a list of people, the names, email addresses and handicaps written in it are read along with it. OpenAI privacy policy
- SMTP2GO — delivers the app's outgoing email. It receives the recipient's address, your name and reply address as the sender, and the content of the message. SMTP2GO privacy policy
- DigitalOcean — provides the server the app and its database run on.
Data may also be disclosed if required by law.
Separately from third parties: data you enter is visible to other people in the app in the ordinary way the app works. Players in a round can see that round's scores; people in a bet can see its stakes and settlements; league members and organisers can see the roster, results and league bookkeeping. Your friends can see your name and handicap.
How long data is kept
Honestly: there is no formal retention schedule yet. In practice:
- Your account and everything attached to it is kept for as long as your account exists, so your round history and statistics remain available to you.
- Files you upload for import are kept until you delete the import in the app. They are not automatically purged after processing. If you don't want a scorecard photo or contact list kept on the server, delete the import once you've confirmed it.
- Rounds, bets, guests, leagues and imports that you delete in the app are removed from the database at that point.
- Server access logs are kept only as long as needed for diagnostics.
A defined retention policy is one of the things intended for the app before general release.
Deleting your data
There is currently no in-app "delete my account" button. To have your account and all data associated with it deleted, email info@primelogiclab.io from the address on your account. Deletion is completed within 30 days, and you'll be emailed once it's done. A self-service option in the app is planned.
See Delete Your Account and Data for the full details of what a deletion request removes, what may remain, and why.
You can already delete most individual data yourself inside the app: rounds, bets, saved guests, league memberships, league entries and import uploads all have a delete action. You can also edit or clear your profile fields at any time.
Your login credentials are held by Auth0 rather than by this app; deleting your Golf App account removes the app's own copy of your data.
Security
Traffic between the app and the server is encrypted with HTTPS. Access to the API requires a valid login token, and the app checks on every request that you're only able to see rounds, bets and leagues you're actually part of. Data is stored in a database on a private network on the server, not exposed publicly.
No system is perfectly secure, and this one is a small independent project rather than a company with a security team. Please bear that in mind when deciding what to put into it.
Children
The Golf App is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has provided information to the app, please email info@primelogiclab.io and it will be removed.
Changes to this policy
The app is under active development, and this page will be updated as it changes. The date at the top of the page shows when it was last revised. Because the app is currently in limited testing, changes may be frequent.
Contact
Questions, deletion requests, or anything else about privacy in the Golf App: info@primelogiclab.io