Privacy Policy

1. Controller

The controller responsible for your data is:

Otto Dämpfle
Lübeckerstraße 1
88250 Weingarten
Germany
Email: hello@hi.getfairwayapp.com

We are not required to appoint a data protection officer. For any privacy question or request, contact us at the address above.

2. Data we process in the app

Account

• Email address, used to sign you in with a one-time code. We do not use passwords.
• Technical account data such as sign-up date, last sign-in and session tokens.

Golf profile

• Your name and, if you add one, a profile photo.
• Your handicap (as you enter it) and your home club.
• Your profile setting (public or private) and app preferences.

Rounds and results

• Rounds you create, join, are invited to or request to join: club and course, tees, date and time, game format, participants, and the status of your participation.
• Hole-by-hole scores, including who entered a score, match results, placements and ranking points. Rankings, statistics and season standings are calculated from these.

Social features

• Who you follow, who follows you, and follow requests.
• Ratings you give and receive after a round (one to five stars and an optional comment of up to 280 characters). The average of the ratings you receive is shown as your trust score.
• In-app notifications, such as invitations, join requests, new followers and finished rounds.

Notifications and device data

• If you allow push notifications: a push token and a device identifier from our push provider, linked to your user ID, plus basic device information (device model, operating system, app version, language and time zone).
• On iPhone, while you play a round: a Live Activity token so the current score can be shown on your lock screen.

Technical logs

• When the app talks to our servers, our hosting provider records technical data such as IP address, time of the request and error messages. We use these only to keep the Service secure and to fix problems.

What we do not collect

• We do not access your device's GPS location. Distances to rounds are calculated from the location of your home club and the course.
• We only access your camera or photo library when you choose a profile photo, and only the photo you pick is uploaded.
• We do not use advertising, analytics or crash-tracking tools.

3. Purposes and legal bases

• Providing Fairway (account, profile, arranging rounds, scorecards, results, rankings, follows, ratings and in-app notifications): performance of our contract with you, Art. 6(1)(b) GDPR.
• Push notifications and Live Activities: your consent, Art. 6(1)(a) GDPR, which you give in your device's permission prompt. You can withdraw it at any time in the app settings or your device settings.
• Profile photo: your choice to upload one, as part of the contract, Art. 6(1)(b) GDPR. Camera and photo access are controlled by your device's permission settings.
• Security, abuse prevention and fixing errors, including technical logs and reviewing reported content: our legitimate interest in a safe and working service, Art. 6(1)(f) GDPR.
• Legal obligations, such as answering requests from authorities: Art. 6(1)(c) GDPR.

A handicap is a sporting figure, not health data. We do not ask for or want health data, so please do not put any in your profile or comments.

4. What other players can see

Fairway is a social app, so some of your data is visible to other signed-in Fairway players:

• Your name, profile photo, handicap, home club, trust score and the ratings and comments you have received.
• Your statistics, season ranking and points, and the results and scores of rounds you played.
• Rounds you are part of. Open rounds can be found by any player; rounds marked private are only listed for their participants and people who were invited.
• Your followers see your recent rounds in their activity feed and may be notified when you create a new round.
• Ratings you give, including any comment, are shown with your name on the profile of the player you rated.

Your private profile setting means people have to send you a follow request, which you can accept or decline. It does not currently hide your profile, scores or rankings from other signed-in players.

Profile photos are stored at a public web address that is hard to guess but can be opened by anyone who has the link. Your email address is never shown to other players.

5. Service providers and recipients

We use the following providers, who process data on our behalf under a data processing agreement (Art. 28 GDPR):

• Supabase (Supabase, Inc., USA) hosts our database, sign-in, file storage and server functions. Our project runs in the AWS region eu-central-1 (Frankfurt, Germany).
• Resend (Resend, Inc., USA) delivers the sign-in emails with your one-time code, and receives emails you send to our contact address so we can read and answer them. It processes your email address and the content of these emails.
• OneSignal (OneSignal, Inc., USA) delivers push notifications and iPhone Live Activities. It receives your push token, device information and your Fairway user ID, and the text of the notifications we send you. Notifications are delivered to your device via Apple Push Notification service or Firebase Cloud Messaging (Google).
• Google Maps Platform / Places API (Google Ireland Ltd. / Google LLC) is used when you search for a golf club. Our server sends only your search text to Google, not your name or email address.
• Cloudflare (Cloudflare, Inc., USA) hosts this website. See section 10.

Transfers outside the EU. Some of these providers are based in the USA or may access data from there. Where this happens, transfers are covered by the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Apple (App Store) and Google (Google Play) process data when you download the app, under their own privacy policies. We do not otherwise share your data, unless we are legally required to.

6. Data stored on your device

The app stores your sign-in session and a local cache on your device, including scores you enter while offline until they are synced. This is necessary for the app to work (§ 25(2) TDDDG) and is removed when you sign out or uninstall the app.

7. How long we keep your data

• We keep your account data for as long as you have an account.
• Technical logs are kept by our hosting provider for a short period (generally no longer than 30 days) and then deleted.
• Database backups are kept for a limited period and then overwritten. Data you delete may remain in a backup until it expires.

8. Deleting your account

You can delete your account at any time in the app under Settings → Delete account. This permanently deletes your account, email address, profile and profile photo, your follows, the ratings you gave and received, your notifications, and your own scores and results.

Rounds are shared with other players, so their history stays intact:

• Open or ongoing rounds you host are cancelled and the other players are notified.
• Finished rounds you hosted are handed to another player in that round.
• Scores you entered for other players stay with them, but are no longer linked to you.
• Other players' results and points are not affected.

If you cannot access the app, email us at hello@hi.getfairwayapp.com from the address you signed up with and we will delete your account for you.

9. Your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15);
• have incorrect data corrected (Art. 16) – most of it you can edit yourself in the app;
• have your data deleted (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw consent at any time, without affecting processing before the withdrawal (Art. 7(3)).

To exercise these rights, email hello@hi.getfairwayapp.com. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or where we are based (Art. 77 GDPR).

10. This website

This website is hosted by Cloudflare (Cloudflare, Inc., USA), which also protects it against attacks and delivers it through its global network. When you visit getfairwayapp.com, Cloudflare processes technical data your browser sends automatically, such as IP address, date and time, page requested, referrer and browser type, to deliver the site and protect it against attacks (Art. 6(1)(f) GDPR). These logs are deleted after a short period.

The website sets no cookies and uses no analytics or tracking. Fonts are served from our own server. If you switch between light and dark mode, your choice is saved in your browser's local storage; it never leaves your device.

If you email us, we use your message and address only to answer you and delete the conversation once it is no longer needed.

11. Children

Fairway is intended for people aged 16 and over. We do not knowingly process data of younger children. If you believe a child has created an account, please contact us and we will delete it.

12. Changes to this policy

We will update this policy when the app or the law changes. The date at the top shows the latest version. We will tell you about material changes in the app. See also our Terms of Use and Imprint.