Privacy Policy for GolfX

Last Updated: 4th of November, 2025

Welcome to GolfX ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, process, and disclose your information when you use our mobile application and website (collectively, the "Service").

Because our users are located in the European Union, our data processing is governed by the General Data Protection Regulation (GDPR).

1. Data Controller

GolfX is the data controller for your personal information. If you have any questions or concerns, you can contact us at: Golf Excellence Technologies Oy; Kasarmikatu 28, 00130, Helsinki; support@golfx.app.

2. What Information We Collect

We collect the following personal data to provide and improve our Service:

  • Personal Identification Information: Name, email address, phone number.
  • Location Data: We collect your GPS location data only when you are using the app to show you nearby golf courses and for score tracking features.
  • Golf & Practice Data: We collect your handicap, scores, and other practice data you provide. This is essential for the core functionality of the app.
  • Payment Information: We use Stripe, a third-party payment processor, to handle subscriptions. We do not collect or store your full credit card information. We only receive information about your order status (e.g., active, not active), what you ordered, the price, and how long the order is valid.
  • Technical & Usage Data: We may collect standard information such as your IP address, browser type, and how you interact with our Service to help us improve functionality.

3. How We Use Your Information

We use your data based on the following legal grounds under GDPR:

To Fulfill Our Contract with You (Art. 6(1)(b) GDPR):

  • To create and manage your account.
  • To provide the core services, such as tracking scores and practice data.
  • To use your practice and performance data to generate personalized practice plans.
  • To provide social features, such as "Friends" lists, "Team" features, and chat functionality.
  • To process your subscription payments via Stripe.

Based on Your Consent (Art. 6(1)(a) GDPR):

  • To send you marketing newsletters via email. You can withdraw this consent at any time by clicking "unsubscribe" in the email or changing your account settings.

For Our Legitimate Interests (Art. 6(1)(f) GDPR):

  • To use your location (GPS) data to show you nearby courses.
  • To analyze and improve our Service, fix bugs, and ensure security.

4. How We Share Your Information

We do not sell your personal data. We only share it in the following limited circumstances:

  • Payment Processors: We share necessary payment information with Stripe to process your subscriptions.
  • Other Service Providers: We may use other third-party vendors for services like cloud hosting (e.g., AWS, Google Cloud), database management, and email marketing. These providers are only given access to the minimum data necessary to perform their service and are contractually obligated to protect your data.
  • Legal Obligations: We may disclose your information if required by law or in response to a valid legal request.

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): You can request that we delete your personal data. As you noted, you can do this at any time by deleting your profile via your account profile page. This action will permanently delete all your personal data.
  • Right to Restrict Processing: You can request that we limit the processing of your data in certain circumstances.
  • Right to Data Portability: You can request to receive your data in a structured, machine-readable format.
  • Right to Object: You can object to our processing of your data, particularly for direct marketing (our email newsletters).

To exercise any of these rights (other than profile deletion), please contact us at support@golfx.app.

6. Data Retention

We retain your personal data for as long as your account is active. If you choose to delete your account, all your personal data will be permanently and irreversibly deleted from our systems.

7. Data Security

We use technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. However, no internet-based service is 100% secure.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.